last executing test programs: 13.332720134s ago: executing program 3 (id=8091): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.997411917s ago: executing program 3 (id=8095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000240)={0xf0f045, 0x800}) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.408313076s ago: executing program 2 (id=8106): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x80}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) 8.084039856s ago: executing program 2 (id=8108): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7.34325554s ago: executing program 3 (id=8110): r0 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x1, {0x2, @pix={0x204, 0x8, 0x71070474, 0x3, 0x20829, 0x4, 0x4, 0x6, 0x1, 0x0, 0x1, 0x3}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2000}, 0x2c004) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r4}) socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}}]}, 0x88}}, 0x20000000) syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 6.692489394s ago: executing program 2 (id=8111): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20a1}, [@IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_GROUP={0xfffffea8}]}, 0x30}}, 0x4000804) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e010100000000010000000600"], 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x20, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048081}, 0x48080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100039041800000000001f0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) 5.619055016s ago: executing program 4 (id=8112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000700)="3ada4a6ce07a0a421ae9853be7a0965c383b57096b783ac8eb840acf60bb68567385964d095d29472fe0d494fe57df0b73224ba5227811216c22d90c531026065054fa6cdb0d886395", 0x0, 0x1, 0x1000000}, 0x50) 5.562823322s ago: executing program 4 (id=8113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x4, 0x0, &(0x7f0000000280)="f8806115"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 5.259674833s ago: executing program 0 (id=8115): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)={0x918, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x8, 0x4, 0xffff0000}, {0x3, 0x9, 0x83, 0x8b}, {0x6, 0x0, 0x1, 0xa74}, {0x7ff, 0x2, 0xcf, 0x3}, {0x8, 0x8, 0x8c, 0xc}, {0x401, 0x5, 0x2, 0x3}, {0x2, 0x0, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x90b}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x8, 0xb, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x3, 0xeb0a}, {0x1, 0x9, 0x81, 0x2}, {0x9, 0x8, 0x1, 0x9}, {0x4, 0x0, 0x3, 0x3}]}}}]}}]}, 0x918}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 5.258011338s ago: executing program 2 (id=8116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(0x0, &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) 4.855284913s ago: executing program 2 (id=8117): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = accept4$rose(r0, &(0x7f0000000140)=@short={0xb, @dev, @rose}, &(0x7f0000000240)=0x1c, 0x0) ioctl$sock_ifreq(r4, 0x891b, &(0x7f0000000400)={'veth1_to_team\x00', @ifru_data=&(0x7f0000000380)="5cdab5340c53b17e989b565c26e403f081b47b455dfc7c65502438533f4ed551"}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff0200000007070000"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040)) getdents64(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 4.767585424s ago: executing program 1 (id=8118): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport', @ANYRESDEC=r3]) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x3) 4.675958124s ago: executing program 1 (id=8119): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.669356305s ago: executing program 4 (id=8120): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x16, 0xfffffffffffffffd, 0x0, 0x5], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.582956275s ago: executing program 0 (id=8121): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.3788557s ago: executing program 4 (id=8122): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x700000000000000, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}, 0x1}) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$sequencer(r1, &(0x7f00000007c0)=""/212, 0xd4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a0000880"], 0xe0}}, 0x0) 4.352636142s ago: executing program 0 (id=8123): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)={0x924, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x8, 0x4, 0xffff0000}, {0x3, 0x9, 0x83, 0x8b}, {0x6, 0x0, 0x1, 0xa74}, {0x7ff, 0x2, 0xcf, 0x3}, {0x8, 0x8, 0x8c, 0xc}, {0x401, 0x5, 0x2, 0x3}, {0x2, 0x0, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x90b}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r9}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x8, 0xb, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x3, 0xeb0a}, {0x1, 0x9, 0x81, 0x2}, {0x9, 0x8, 0x1, 0x9}, {0x4, 0x0, 0x3, 0x3}]}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 4.215016277s ago: executing program 1 (id=8124): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000700)="3ada4a6ce07a0a421ae9853be7a0965c383b57096b783ac8eb840acf60bb68567385964d095d29472fe0d494fe57df0b73224ba5227811216c22d90c531026065054fa6cdb0d886395", 0x0, 0x1, 0x1000000}, 0x50) 3.427630331s ago: executing program 4 (id=8125): r0 = syz_io_uring_setup(0x109, 0x0, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, &(0x7f0000000bc0)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) syz_clone(0x81400, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, {0xa, 0x800, 0x1000000, @rand_addr=' \x01\x00', 0x80000}}}, 0x32) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.193767176s ago: executing program 1 (id=8126): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="0f000000000d0003002000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) 3.165535398s ago: executing program 3 (id=8127): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.019527093s ago: executing program 0 (id=8128): syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800d1000000fbdbbefb973d065bc3e04400", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 1.890639685s ago: executing program 2 (id=8129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7f874", 0x5c}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00', 0x8, 0x1) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000240)={0xf0f045, 0x800}) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.664205638s ago: executing program 0 (id=8130): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.399840482s ago: executing program 1 (id=8131): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 1.360220237s ago: executing program 3 (id=8132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, &(0x7f0000000200), 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.1011809s ago: executing program 4 (id=8133): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)={0x924, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x8, 0x4, 0xffff0000}, {0x3, 0x9, 0x83, 0x8b}, {0x6, 0x0, 0x1, 0xa74}, {0x7ff, 0x2, 0xcf, 0x3}, {0x8, 0x8, 0x8c, 0xc}, {0x401, 0x5, 0x2, 0x3}, {0x2, 0x0, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x90b}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x8, 0xb, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x3, 0xeb0a}, {0x1, 0x9, 0x81, 0x2}, {0x9, 0x8, 0x1, 0x9}, {0x4, 0x0, 0x3, 0x3}]}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 1.02789119s ago: executing program 0 (id=8134): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r3, r3, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)=0x455853c1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "87d52890d86dde1f66f6917dcad7d7ad92f7eb71ae6687481d34af7f8009c03e", "282e2debe5b6e2d9cad8f3518100f38f417d72544a2bb7fa11b662fef4dcc9a3", "cc23b1f369d519afed2d88adb87a656e4818391934fadf59616c097176643d4d", "fde867d2e299226caad10a947624655f91c4544c05b52b7ec7e68e27a55c6afb", "bee1fd21ead56db3e38ff37c0ad23d47f9aaeca9c5831008e79c20a71128d4c6", "0f0c3b4a2fe52f95297b7b93", 0x1, 0x4, 0x40, 0x5, 0xb0}}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x18, 0x800, 0x6, 0x4, 0x9, @local, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x30}}}}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r6, 0x5608) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'macsec0\x00', 0x0}) r8 = accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000001140)={&(0x7f00000007c0)={0x924, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3ff, 0x8, 0x4, 0xffff0000}, {0x3, 0x9, 0x83, 0x8b}, {0x6, 0x0, 0x1, 0xa74}, {0x7ff, 0x2, 0xcf, 0x3}, {0x8, 0x8, 0x8c, 0xc}, {0x401, 0x5, 0x2, 0x3}, {0x2, 0x0, 0x3, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x90b}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r9}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1c4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x188, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x8, 0xb, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x8, 0x3, 0xeb0a}, {0x1, 0x9, 0x81, 0x2}, {0x9, 0x8, 0x1, 0x9}, {0x4, 0x0, 0x3, 0x3}]}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x40010}, 0x8040) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x5, 0x2, 0x100, 0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020}, 0x2020) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 988.996942ms ago: executing program 1 (id=8135): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000007d1000000000000", @ANYRES32=0x1, @ANYBLOB="0f000000000d00030020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000400"/28], 0x50) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b5, 0x13500, 0x0, 0x352}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000040)) 0s ago: executing program 3 (id=8136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x20}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r11], 0x1, r9, r10, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): T20281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.592380][T20281] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1911.602014][T20281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.626008][T20281] usb 3-1: config 0 descriptor?? [ 1911.646330][T20281] pwc: Askey VC010 type 2 USB webcam detected. [ 1911.693806][ T5960] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1911.724696][ T5960] usb 5-1: device descriptor read/8, error -71 [ 1911.834297][ T5960] usb usb5-port1: unable to enumerate USB device [ 1912.054057][T20281] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1912.107337][T20281] pwc: recv_control_msg error -32 req 02 val 2700 [ 1912.214063][T20281] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1912.220822][T29704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1912.229098][T20281] pwc: recv_control_msg error -32 req 04 val 1000 [ 1912.240317][T20281] pwc: recv_control_msg error -32 req 04 val 1300 [ 1912.247347][T20281] pwc: recv_control_msg error -32 req 04 val 1400 [ 1912.258557][T20281] pwc: recv_control_msg error -32 req 02 val 2000 [ 1912.266115][T20281] pwc: recv_control_msg error -32 req 02 val 2100 [ 1912.287254][T20281] pwc: recv_control_msg error -32 req 04 val 1500 [ 1912.512302][T20281] pwc: recv_control_msg error -71 req 02 val 2400 [ 1912.529700][T20281] pwc: recv_control_msg error -71 req 02 val 2600 [ 1912.539468][T20281] pwc: recv_control_msg error -71 req 02 val 2900 [ 1912.564609][T20281] pwc: recv_control_msg error -71 req 02 val 2800 [ 1912.595228][T20281] pwc: recv_control_msg error -71 req 04 val 1100 [ 1912.603777][T20281] pwc: recv_control_msg error -71 req 04 val 1200 [ 1912.611605][T20281] pwc: Registered as video103. [ 1912.634613][T20281] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input61 [ 1913.169906][T20281] usb 3-1: USB disconnect, device number 103 [ 1914.011553][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.011606][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.167582][T29734] netlink: 'syz.1.6977': attribute type 5 has an invalid length. [ 1914.957138][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6982'. [ 1915.513061][ T43] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1915.946381][ T5982] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1915.957196][ T43] usb 2-1: device descriptor read/64, error -71 [ 1916.112934][ T5982] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 1916.126292][ T5982] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 1916.137962][ T5982] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1916.165242][ T5982] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1916.181544][ T5982] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 1916.194708][ T5982] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1916.204405][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.271560][ T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1916.296079][T24273] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1916.401629][ T43] usb 2-1: device descriptor read/64, error -71 [ 1916.429915][ T5982] ath6kl: Failed to submit usb control message: -71 [ 1916.437350][ T5982] ath6kl: unable to send the bmi data to the device: -71 [ 1916.444804][ T5982] ath6kl: Unable to send get target info: -71 [ 1916.453000][ T5982] ath6kl: Failed to init ath6kl core: -71 [ 1916.459214][ T5982] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1916.461028][T24273] usb 3-1: Using ep0 maxpacket: 16 [ 1916.482242][ T5982] usb 5-1: USB disconnect, device number 99 [ 1916.503456][T24273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.515472][ T43] usb usb2-port1: attempt power cycle [ 1916.525297][T24273] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1916.551382][T24273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.565542][T24273] usb 3-1: config 0 descriptor?? [ 1916.636821][T29776] netlink: 'syz.3.6990': attribute type 5 has an invalid length. [ 1916.891226][ T43] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1916.974114][ T43] usb 2-1: device descriptor read/8, error -71 [ 1917.221176][ T43] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1917.234574][T24273] usbhid 3-1:0.0: can't add hid device: -71 [ 1917.241092][T24273] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1917.254930][T24273] usb 3-1: USB disconnect, device number 104 [ 1917.271927][ T43] usb 2-1: device descriptor read/8, error -71 [ 1917.740323][ T43] usb usb2-port1: unable to enumerate USB device [ 1917.890631][ T5960] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1918.067285][ T5960] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 1918.076072][ T5960] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1918.086265][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.097226][ T5960] usb 5-1: config 0 has no interface number 0 [ 1918.106497][ T5960] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1918.118715][ T5960] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1918.155008][ T5960] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1918.213090][T29791] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6993'. [ 1918.240559][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.327324][ T5960] usb 5-1: config 0 descriptor?? [ 1918.353845][ T5960] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1918.469308][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6995'. [ 1919.369943][T24276] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1919.400515][T20547] usb 5-1: Failed to submit usb control message: -110 [ 1919.438103][T20547] usb 5-1: unable to send the bmi data to the device: -110 [ 1919.475184][T20547] usb 5-1: unable to get target info from device [ 1919.513976][T20547] usb 5-1: could not get target info (-110) [ 1919.529843][T24276] usb 2-1: Using ep0 maxpacket: 16 [ 1919.537884][T24276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.555610][T20547] usb 5-1: could not probe fw (-110) [ 1919.573171][T24276] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1919.594910][T24276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.621989][T24276] usb 2-1: Product: syz [ 1919.631811][T24276] usb 2-1: Manufacturer: syz [ 1919.644045][T24276] usb 2-1: SerialNumber: syz [ 1919.661782][T24276] usb 2-1: config 0 descriptor?? [ 1919.679785][T24276] kobil_sct 2-1:0.0: required endpoints missing [ 1919.891640][T24273] usb 2-1: USB disconnect, device number 93 [ 1920.415670][T24276] usb 5-1: USB disconnect, device number 100 [ 1920.589819][T29822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7002'. [ 1922.829097][T29844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7007'. [ 1923.098200][ T43] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1923.262225][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1923.298302][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1923.321032][ T43] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1923.333962][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.352923][ T43] usb 5-1: Product: syz [ 1923.369230][ T43] usb 5-1: Manufacturer: syz [ 1923.381875][ T43] usb 5-1: SerialNumber: syz [ 1923.409800][ T43] usb 5-1: config 0 descriptor?? [ 1923.600171][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1925.324652][ T43] gspca_stk1135: reg_w 0x200 err -71 [ 1925.356025][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.468140][ T43] gspca_stk1135: Sensor write failed [ 1925.485319][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.498931][ T43] gspca_stk1135: Sensor write failed [ 1925.510539][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.524992][ T43] gspca_stk1135: Sensor read failed [ 1925.545133][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.562201][ T43] gspca_stk1135: Sensor read failed [ 1925.782977][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880339c6800: rx timeout, send abort [ 1925.786732][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 1925.791389][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056b6b800: rx timeout, send abort [ 1925.791712][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880339c6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1925.807667][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.820677][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b6b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1925.872281][ T43] gspca_stk1135: Sensor read failed [ 1925.882247][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.914575][ T43] gspca_stk1135: Sensor read failed [ 1925.929420][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.949654][ T43] gspca_stk1135: Sensor write failed [ 1925.969085][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1925.982160][ T43] gspca_stk1135: Sensor write failed [ 1925.996590][ T43] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 1926.046552][T24273] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1926.057113][ T43] usb 5-1: USB disconnect, device number 101 [ 1926.276848][T24273] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 1926.410288][T24273] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1926.420642][T24273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1926.431681][T24273] usb 4-1: config 0 has no interface number 0 [ 1926.440675][T24273] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1926.451600][T24273] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1926.529190][T24273] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1927.237993][T24273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.263847][T24273] usb 4-1: config 0 descriptor?? [ 1927.430567][T24273] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1927.715472][T29892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7021'. [ 1928.517154][T14505] usb 4-1: Failed to submit usb control message: -110 [ 1928.524678][T14505] usb 4-1: unable to send the bmi data to the device: -110 [ 1928.585307][T14505] usb 4-1: unable to get target info from device [ 1928.629415][T14505] usb 4-1: could not get target info (-110) [ 1928.653186][T14505] usb 4-1: could not probe fw (-110) [ 1928.955129][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1929.056985][T29900] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7022'. [ 1929.105076][ T9] usb 2-1: device descriptor read/64, error -71 [ 1929.348554][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1929.405475][ T43] usb 4-1: USB disconnect, device number 96 [ 1929.512808][ T9] usb 2-1: device descriptor read/64, error -71 [ 1929.534820][T24273] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1929.735333][ T9] usb usb2-port1: attempt power cycle [ 1929.827276][T24273] usb 5-1: Using ep0 maxpacket: 16 [ 1929.842364][T24273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.865503][T24273] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1930.005865][T24273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.033471][T24273] usb 5-1: config 0 descriptor?? [ 1930.070467][T29918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7029'. [ 1930.075840][ T9] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1930.176254][ T9] usb 2-1: device descriptor read/8, error -71 [ 1930.451992][T24273] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 1930.462939][T24273] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 1930.473032][T24273] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 1930.482997][T24273] hid-steam 0003:28DE:1102.003C: unknown main item tag 0x0 [ 1930.494406][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1930.516476][ T9] usb 2-1: device descriptor read/8, error -71 [ 1930.625205][ T9] usb usb2-port1: unable to enumerate USB device [ 1930.935693][T24273] hid-steam 0003:28DE:1102.003C: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1930.962685][T24273] usb 5-1: USB disconnect, device number 102 [ 1931.060750][T29926] fido_id[29926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1932.782865][T29928] Set syz1 is full, maxelem 65536 reached [ 1933.432870][ T9] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1933.602767][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1933.675942][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.696270][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1933.721721][ T9] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1933.731951][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.741368][ T9] usb 5-1: Product: syz [ 1933.746795][ T9] usb 5-1: Manufacturer: syz [ 1933.751592][ T9] usb 5-1: SerialNumber: syz [ 1934.135939][ T9] usb 5-1: config 0 descriptor?? [ 1934.143885][ T9] kobil_sct 5-1:0.0: required endpoints missing [ 1934.370421][ T9] usb 5-1: USB disconnect, device number 103 [ 1934.832278][ T5982] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1934.983060][ T5982] usb 4-1: Using ep0 maxpacket: 16 [ 1934.990618][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.013249][ T5982] usb 4-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1935.027768][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.052448][ T5982] usb 4-1: config 0 descriptor?? [ 1935.692222][ T5982] usbhid 4-1:0.0: can't add hid device: -71 [ 1935.713365][ T5982] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1935.740881][ T5982] usb 4-1: USB disconnect, device number 97 [ 1938.881744][T30023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7059'. [ 1940.200133][ T5982] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1940.444225][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1940.515176][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1940.626090][ T5982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1940.677050][ T5982] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1940.686999][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.710521][ T5982] usb 4-1: Product: syz [ 1940.724237][ T5982] usb 4-1: Manufacturer: syz [ 1940.771160][ T5982] usb 4-1: SerialNumber: syz [ 1940.791622][ T5982] usb 4-1: config 0 descriptor?? [ 1940.806797][ T5982] adutux 4-1:0.0: interrupt endpoints not found [ 1941.011452][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1941.340780][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1941.350466][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.367988][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1941.379391][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1941.401639][ T9] usb 3-1: config 0 descriptor?? [ 1941.754135][T30054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7069'. [ 1941.899296][T30058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7071'. [ 1942.095398][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1942.101888][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1942.119048][ T9] usb 3-1: USB disconnect, device number 105 [ 1942.718780][T30062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7070'. [ 1942.908442][ T43] usb 4-1: USB disconnect, device number 98 [ 1943.139788][T30073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7074'. [ 1943.196140][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1943.947939][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1943.960016][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1943.965474][T24273] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1944.107912][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.252243][ T9] usb 5-1: config 0 descriptor?? [ 1944.656400][T24273] usb 3-1: Using ep0 maxpacket: 16 [ 1944.663377][T24273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1944.697233][T24273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1944.715680][T24273] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1944.719060][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1944.731303][T24273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.739536][T24273] usb 3-1: Product: syz [ 1944.743686][T24273] usb 3-1: Manufacturer: syz [ 1944.748808][T24273] usb 3-1: SerialNumber: syz [ 1944.754814][T24273] usb 3-1: config 0 descriptor?? [ 1944.766051][T24273] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1944.779852][T24273] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1944.788525][ T43] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1944.806128][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1944.823160][ T7945] Bluetooth: (null): Too short H5 packet [ 1944.860310][ T7945] Bluetooth: (null): Invalid header checksum [ 1944.866529][ T7945] Bluetooth: (null): Invalid header checksum [ 1944.892861][ T9] usb 5-1: USB disconnect, device number 104 [ 1944.961517][T14505] Bluetooth: (null): Invalid header checksum [ 1945.049237][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 1945.063368][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.081708][T14505] Bluetooth: (null): Invalid header checksum [ 1945.107397][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1945.116641][ T43] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1945.232772][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.494214][ T43] usb 4-1: config 0 descriptor?? [ 1945.560995][ T59] Bluetooth: (null): Invalid header checksum [ 1945.569782][T30091] binder: 30088:30091 ioctl c0306201 0 returned -14 [ 1945.576956][ T59] Bluetooth: (null): Invalid header checksum [ 1945.583164][ T59] Bluetooth: (null): Invalid header checksum [ 1945.590761][ T59] Bluetooth: (null): Invalid header checksum [ 1945.597247][ T59] Bluetooth: (null): Invalid header checksum [ 1945.697362][ T13] Bluetooth: (null): Invalid header checksum [ 1945.826046][ T3018] Bluetooth: (null): Invalid header checksum [ 1945.847525][T30093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7081'. [ 1945.876736][ T9] usb 5-1: new low-speed USB device number 105 using dummy_hcd [ 1945.917081][ T13] Bluetooth: (null): Invalid header checksum [ 1946.006755][ T9] usb 5-1: device descriptor read/64, error -71 [ 1946.211238][ T7945] Bluetooth: (null): Invalid header checksum [ 1946.241276][ T7945] Bluetooth: (null): Invalid header checksum [ 1946.319042][ T43] usb 3-1: USB disconnect, device number 106 [ 1946.346451][ T9] usb 5-1: new low-speed USB device number 106 using dummy_hcd [ 1946.346937][ T43] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1946.369372][ T43] kobil_sct 3-1:0.0: device disconnected [ 1946.946479][T30113] netlink: 'syz.2.7084': attribute type 29 has an invalid length. [ 1946.946532][T30113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7084'. [ 1947.136361][T30115] netlink: 'syz.4.7087': attribute type 5 has an invalid length. [ 1947.232801][T30121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7088'. [ 1947.273838][T24273] usb 4-1: USB disconnect, device number 99 [ 1948.416626][ T43] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 1948.671073][ T43] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 1948.716689][ T43] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1948.751318][T30141] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1948.793437][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.853795][ T43] usb 3-1: config 0 has no interface number 0 [ 1948.872035][ T43] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1948.926889][ T43] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1949.035083][ T43] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1949.044155][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.226383][ T43] usb 3-1: config 0 descriptor?? [ 1949.368607][ T43] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1949.393416][T30150] sp0: Synchronizing with TNC [ 1949.526772][T30147] [U] è [ 1949.635683][ T9] usb 3-1: USB disconnect, device number 107 [ 1949.642467][ T59] usb 3-1: Failed to submit usb control message: -71 [ 1949.671695][ T59] usb 3-1: unable to send the bmi data to the device: -71 [ 1949.722024][ T59] usb 3-1: unable to get target info from device [ 1949.858015][ T59] usb 3-1: could not get target info (-71) [ 1950.039153][ T59] usb 3-1: could not probe fw (-71) [ 1950.424532][T20281] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1950.526027][T30166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7098'. [ 1950.574336][T20281] usb 5-1: Using ep0 maxpacket: 32 [ 1950.585171][T20281] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1950.594495][T20281] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1950.614778][T20281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1950.649351][T20281] usb 5-1: config 0 descriptor?? [ 1951.258441][T30177] netlink: 'syz.2.7104': attribute type 5 has an invalid length. [ 1951.648112][T30180] netlink: 'syz.3.7105': attribute type 5 has an invalid length. [ 1952.434557][T20281] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1952.624237][T20281] usb 2-1: Using ep0 maxpacket: 16 [ 1952.656955][T20281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1952.700109][T20281] usb 2-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1952.710209][T20281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.720709][T20281] usb 2-1: Product: syz [ 1952.725526][T20281] usb 2-1: Manufacturer: syz [ 1952.730161][T20281] usb 2-1: SerialNumber: syz [ 1952.738426][T20281] usb 2-1: config 0 descriptor?? [ 1952.745672][T20281] kobil_sct 2-1:0.0: required endpoints missing [ 1953.053723][T30204] netlink: 'syz.2.7111': attribute type 29 has an invalid length. [ 1953.061671][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7111'. [ 1953.237971][ T5916] usb 5-1: USB disconnect, device number 107 [ 1953.369026][ T5982] usb 2-1: USB disconnect, device number 98 [ 1953.762817][T20281] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1954.031214][T20281] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 1954.068058][T20281] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1954.112660][T20281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.170671][T20281] usb 3-1: config 0 has no interface number 0 [ 1954.216200][T20281] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1954.229590][T20281] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1954.386643][T20281] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1954.506767][T30218] netlink: 'syz.1.7115': attribute type 5 has an invalid length. [ 1954.535279][T20281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.713020][T20281] usb 3-1: config 0 descriptor?? [ 1954.761072][T20281] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1955.562938][T20281] IPVS: starting estimator thread 0... [ 1955.651762][T30229] IPVS: using max 39 ests per chain, 93600 per kthread [ 1955.782213][ T13] usb 3-1: Failed to submit usb control message: -110 [ 1955.866202][ T13] usb 3-1: unable to send the bmi data to the device: -110 [ 1955.879812][ T13] usb 3-1: unable to get target info from device [ 1955.886928][ T13] usb 3-1: could not get target info (-110) [ 1955.893422][ T13] usb 3-1: could not probe fw (-110) [ 1956.001667][ T5916] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1956.607371][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 1956.678073][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1956.693400][ T5916] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1956.716418][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.763000][ T5916] usb 5-1: config 0 descriptor?? [ 1957.206105][T20281] usb 3-1: USB disconnect, device number 108 [ 1957.539913][ T5916] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 1957.572025][ T5916] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 1957.579595][ T5916] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 1957.595608][ T5916] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 1958.289663][ T5916] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 1958.335380][ T5916] hid-steam 0003:28DE:1102.003D: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1958.356338][ T5916] usb 5-1: USB disconnect, device number 108 [ 1958.543572][T30268] fido_id[30268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1958.800457][T30278] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1959.733534][T30284] netlink: 'syz.4.7134': attribute type 5 has an invalid length. [ 1960.028118][T14505] batadv1: left allmulticast mode [ 1960.038009][T14505] batadv1: left promiscuous mode [ 1960.089617][T14505] bridge0: port 3(batadv1) entered disabled state [ 1960.181855][T14505] bridge_slave_1: left allmulticast mode [ 1960.187567][T14505] bridge_slave_1: left promiscuous mode [ 1960.203730][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1960.269858][T14505] bridge_slave_0: left allmulticast mode [ 1960.277272][T14505] bridge_slave_0: left promiscuous mode [ 1960.324510][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.337265][T30267] Set syz1 is full, maxelem 65536 reached [ 1961.459864][T14505] dvmrp0 (unregistering): left allmulticast mode [ 1961.996993][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7141'. [ 1962.216994][T14505] IPVS: stopping backup sync thread 19114 ... [ 1962.760286][T20281] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1962.948389][T20281] usb 4-1: Using ep0 maxpacket: 16 [ 1962.958593][T20281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1962.974059][T20281] usb 4-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1962.986763][T20281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.995097][T20281] usb 4-1: Product: syz [ 1963.013806][T20281] usb 4-1: Manufacturer: syz [ 1963.025631][T20281] usb 4-1: SerialNumber: syz [ 1963.060787][T20281] usb 4-1: config 0 descriptor?? [ 1963.074676][T20281] kobil_sct 4-1:0.0: required endpoints missing [ 1963.094971][T14505] hsr_slave_0: left promiscuous mode [ 1963.112698][T14505] hsr_slave_1: left promiscuous mode [ 1963.137648][T14505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1963.502246][T24276] usb 4-1: USB disconnect, device number 100 [ 1963.682520][T14505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1963.818119][T14505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1963.825517][T14505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1963.867519][T14505] veth1_macvtap: left promiscuous mode [ 1963.880388][T14505] veth0_macvtap: left promiscuous mode [ 1963.886478][T14505] veth1_vlan: left promiscuous mode [ 1963.918179][T14505] veth0_vlan: left promiscuous mode [ 1964.716220][T30337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7147'. [ 1966.117671][T14505] team_slave_1 (unregistering): left promiscuous mode [ 1966.125257][T14505] team0 (unregistering): Port device team_slave_1 removed [ 1966.181676][T14505] team_slave_0 (unregistering): left promiscuous mode [ 1966.189342][T14505] team0 (unregistering): Port device team_slave_0 removed [ 1968.802523][T30383] netlink: 'syz.1.7161': attribute type 5 has an invalid length. [ 1969.126328][T14505] IPVS: stop unused estimator thread 0... [ 1970.534567][T30399] netlink: 'syz.1.7166': attribute type 5 has an invalid length. [ 1972.090908][T30417] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1972.365145][T30425] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7175'. [ 1972.476946][T30435] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7178'. [ 1974.696385][T30465] netlink: 'syz.2.7187': attribute type 5 has an invalid length. [ 1974.852215][T24276] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1975.015581][T24276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1975.026679][T24276] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1975.040364][T24276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.075858][T24276] usb 5-1: config 0 descriptor?? [ 1975.090074][T24276] pwc: Askey VC010 type 2 USB webcam detected. [ 1975.296581][T30476] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7192'. [ 1975.377191][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.383587][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.634362][T24276] pwc: recv_control_msg error -71 req 02 val 2700 [ 1976.641367][T24276] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1976.699861][T24276] pwc: recv_control_msg error -71 req 04 val 1000 [ 1976.731416][T24276] pwc: recv_control_msg error -71 req 04 val 1300 [ 1976.757001][T24276] pwc: recv_control_msg error -71 req 04 val 1400 [ 1976.806064][T24276] pwc: recv_control_msg error -71 req 02 val 2000 [ 1976.844163][T24276] pwc: recv_control_msg error -71 req 02 val 2100 [ 1976.884541][T24276] pwc: recv_control_msg error -71 req 04 val 1500 [ 1976.907030][T24276] pwc: recv_control_msg error -71 req 02 val 2500 [ 1976.924325][T24276] pwc: recv_control_msg error -71 req 02 val 2400 [ 1976.939424][T24276] pwc: recv_control_msg error -71 req 02 val 2600 [ 1977.036092][T24276] pwc: recv_control_msg error -71 req 02 val 2900 [ 1977.056771][T24276] pwc: recv_control_msg error -71 req 02 val 2800 [ 1977.068619][T30498] fuse: Bad value for 'fd' [ 1977.105149][T24276] pwc: recv_control_msg error -71 req 04 val 1100 [ 1977.121297][T24276] pwc: recv_control_msg error -71 req 04 val 1200 [ 1977.161301][T24276] pwc: Registered as video103. [ 1977.200461][T24276] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input62 [ 1977.295950][T24276] usb 5-1: USB disconnect, device number 109 [ 1977.600850][ T5916] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1977.720754][T24276] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1977.750661][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 1977.795380][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.822464][ T5916] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1977.835518][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.856725][ T5916] usb 2-1: config 0 descriptor?? [ 1977.870619][T24276] usb 5-1: Using ep0 maxpacket: 32 [ 1977.892082][T24276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.030529][T24276] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1978.042707][T24276] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1978.060734][T24276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1978.070521][T24276] usb 5-1: Product: syz [ 1978.076590][T24276] usb 5-1: Manufacturer: syz [ 1978.521465][T24276] usb 5-1: SerialNumber: syz [ 1978.528244][T24276] usb 5-1: config 0 descriptor?? [ 1978.558889][ T5916] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 1978.585101][ T5916] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 1978.608624][ T5916] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 1978.619439][ T5916] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 1978.644938][ T5916] hid-steam 0003:28DE:1102.003E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 1978.697431][ T5916] usb 2-1: USB disconnect, device number 99 [ 1978.842077][T30514] udevd[30514]: failed to send result of seq 28817 to main daemon: Connection refused [ 1980.642742][T24276] usb 5-1: USB disconnect, device number 110 [ 1980.756193][T30534] binder: 30532:30534 ioctl c0306201 0 returned -14 [ 1982.885706][T30567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7215'. [ 1982.992915][T30570] netlink: 892 bytes leftover after parsing attributes in process `syz.0.7219'. [ 1983.149053][T30574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7220'. [ 1983.510859][T30577] netlink: 'syz.0.7221': attribute type 5 has an invalid length. [ 1984.577291][ T5982] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1984.739835][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.752520][ T5982] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1984.784059][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.838957][ T5982] usb 5-1: config 0 descriptor?? [ 1984.853436][ T5982] pwc: Askey VC010 type 2 USB webcam detected. [ 1985.412055][ T5982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1985.429844][ T5982] pwc: recv_control_msg error -32 req 02 val 2700 [ 1985.441740][ T5982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1985.462977][ T5982] pwc: recv_control_msg error -32 req 04 val 1000 [ 1985.490040][ T5982] pwc: recv_control_msg error -32 req 04 val 1300 [ 1986.163982][ T5982] pwc: recv_control_msg error -32 req 02 val 2000 [ 1986.173709][ T5982] pwc: recv_control_msg error -32 req 02 val 2100 [ 1986.190745][ T5982] pwc: recv_control_msg error -32 req 04 val 1500 [ 1986.202244][ T5982] pwc: recv_control_msg error -32 req 02 val 2500 [ 1986.220326][ T5982] pwc: recv_control_msg error -71 req 02 val 2400 [ 1986.242646][ T5982] pwc: recv_control_msg error -71 req 02 val 2600 [ 1986.259603][ T5982] pwc: recv_control_msg error -71 req 02 val 2900 [ 1986.275015][ T5982] pwc: recv_control_msg error -71 req 02 val 2800 [ 1986.312251][ T5982] pwc: recv_control_msg error -71 req 04 val 1100 [ 1986.335257][ T5982] pwc: recv_control_msg error -71 req 04 val 1200 [ 1986.448718][ T5982] pwc: Registered as video103. [ 1986.456594][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 1986.499230][ T5982] usb 5-1: USB disconnect, device number 111 [ 1986.771767][T30629] netlink: 892 bytes leftover after parsing attributes in process `syz.3.7239'. [ 1987.119049][T30634] netlink: 'syz.4.7240': attribute type 29 has an invalid length. [ 1987.144072][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7240'. [ 1987.865632][ T975] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1988.442567][ T975] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 1988.466682][ T975] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 1988.499298][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.565781][ T975] usb 5-1: config 0 has no interface number 0 [ 1988.955708][ T975] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1989.019261][ T975] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1989.135096][ T975] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1989.164503][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.191707][ T975] usb 5-1: config 0 descriptor?? [ 1989.211269][ T975] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1989.435482][T30672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1990.350339][T20535] usb 5-1: Failed to submit usb control message: -110 [ 1990.384127][T20535] usb 5-1: unable to send the bmi data to the device: -110 [ 1990.395739][T20535] usb 5-1: unable to get target info from device [ 1990.528557][T20535] usb 5-1: could not get target info (-110) [ 1990.562007][T20535] usb 5-1: could not probe fw (-110) [ 1990.779574][ T9] usb 5-1: USB disconnect, device number 112 [ 1991.370628][T30691] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1991.566017][T30686] kvm: pic: level sensitive irq not supported [ 1991.566105][T30686] kvm: pic: non byte read [ 1991.776638][T30686] kvm: pic: level sensitive irq not supported [ 1991.776799][T30686] kvm: pic: non byte read [ 1991.777092][T30686] kvm: pic: level sensitive irq not supported [ 1991.777362][T30686] kvm: pic: non byte read [ 1991.777618][T30686] kvm: pic: level sensitive irq not supported [ 1991.777759][T30686] kvm: pic: non byte read [ 1994.647351][T30733] netlink: 892 bytes leftover after parsing attributes in process `syz.4.7267'. [ 1995.295763][T30741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7270'. [ 1997.676300][T30759] Set syz1 is full, maxelem 65536 reached [ 2000.741387][T30821] program syz.2.7294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2001.154216][T30823] netlink: 'syz.1.7295': attribute type 29 has an invalid length. [ 2001.163099][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7295'. [ 2001.706259][T17417] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 2002.348504][T17417] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 2002.405942][T17417] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 2002.420748][T17417] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2002.512115][T17417] usb 2-1: config 0 has no interface number 0 [ 2002.518909][T17417] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2002.528860][T17417] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2002.543880][T17417] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2002.555778][T17417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.567076][T17417] usb 2-1: config 0 descriptor?? [ 2002.598694][T17417] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2002.618973][T30844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7301'. [ 2003.692335][T20543] usb 2-1: Failed to submit usb control message: -110 [ 2003.803038][T20543] usb 2-1: unable to send the bmi data to the device: -110 [ 2003.898674][T20543] usb 2-1: unable to get target info from device [ 2003.906119][T20543] usb 2-1: could not get target info (-110) [ 2003.934022][T20543] usb 2-1: could not probe fw (-110) [ 2004.045940][T30384] usb 2-1: USB disconnect, device number 100 [ 2004.153040][T30873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7310'. [ 2005.509070][T30903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7322'. [ 2006.077262][ T43] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2006.136733][ T13] Bluetooth: (null): Invalid header checksum [ 2006.142823][ T13] Bluetooth: (null): Invalid header checksum [ 2006.273430][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 2006.280162][ T43] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2006.292541][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.303301][ T43] usb 5-1: config 0 descriptor?? [ 2006.311136][ T43] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2007.588674][T30927] program syz.3.7329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2007.908562][ T43] gspca_vc032x: reg_w err -110 [ 2007.908629][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908686][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908722][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908757][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908813][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908849][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908884][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908925][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908959][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.908994][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909030][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909064][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909099][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909134][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909167][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909202][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909236][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909271][ T43] gspca_vc032x: I2c Bus Busy Wait 00 [ 2007.909306][ T43] gspca_vc032x: Unknown sensor... [ 2007.909950][ T43] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 2008.485055][T20281] usb 5-1: USB disconnect, device number 113 [ 2009.095052][T30947] netlink: 'syz.1.7336': attribute type 5 has an invalid length. [ 2010.440471][T30974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7345'. [ 2010.684357][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2010.944109][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2010.951269][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2010.964223][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.994609][ T9] usb 4-1: config 0 descriptor?? [ 2011.095835][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2011.655472][T30384] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2011.723701][ T975] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2012.253413][T30384] usb 2-1: Using ep0 maxpacket: 32 [ 2012.483299][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 2012.491604][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 2012.522181][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2012.558902][ T975] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 2012.568245][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.576607][ T975] usb 5-1: Product: syz [ 2012.581699][T30384] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2012.703094][T30384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.711618][T30384] usb 2-1: Product: syz [ 2012.716321][ T975] usb 5-1: Manufacturer: syz [ 2012.723479][ T975] usb 5-1: SerialNumber: syz [ 2012.729338][T30384] usb 2-1: Manufacturer: syz [ 2012.743156][T30384] usb 2-1: SerialNumber: syz [ 2012.773989][ T975] usb 5-1: config 0 descriptor?? [ 2012.788269][ T975] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 2012.856210][ T975] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 2012.868894][T30384] usb 2-1: config 0 descriptor?? [ 2012.891153][T30384] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2013.183216][ T43] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2013.191970][ T9] gspca_vc032x: reg_r err -32 [ 2013.197760][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.204086][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.209377][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.214700][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.220034][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.225390][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.230668][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.236575][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.241849][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.247198][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.252489][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.262986][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.268326][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.276709][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.283772][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.296100][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.348279][ T43] usb 3-1: device descriptor read/64, error -71 [ 2013.365053][ T5982] usb 5-1: USB disconnect, device number 114 [ 2013.388897][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.394817][ T5982] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 2013.406892][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 2013.423132][ T5982] kobil_sct 5-1:0.0: device disconnected [ 2013.428799][ T9] gspca_vc032x: Unknown sensor... [ 2013.435361][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2013.452997][ T9] usb 4-1: USB disconnect, device number 101 [ 2013.722812][ T43] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2013.862710][ T43] usb 3-1: device descriptor read/64, error -71 [ 2013.983892][ T43] usb usb3-port1: attempt power cycle [ 2013.989446][T30384] gspca_stk1135: reg_w 0x7 err -71 [ 2013.995783][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.002132][T30384] gspca_stk1135: Sensor write failed [ 2014.008263][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.014740][T30384] gspca_stk1135: Sensor write failed [ 2014.020146][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.026517][T30384] gspca_stk1135: Sensor read failed [ 2014.031730][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.038562][T30384] gspca_stk1135: Sensor read failed [ 2014.043820][T30384] gspca_stk1135: Detected sensor type unknown (0x0) [ 2014.050414][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.056793][T30384] gspca_stk1135: Sensor read failed [ 2014.062004][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.068579][T30384] gspca_stk1135: Sensor read failed [ 2014.074793][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.081133][T30384] gspca_stk1135: Sensor write failed [ 2014.086590][T30384] gspca_stk1135: serial bus timeout: status=0x00 [ 2014.093012][T30384] gspca_stk1135: Sensor write failed [ 2014.098324][T30384] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 2014.108644][T30384] usb 2-1: USB disconnect, device number 101 [ 2014.163352][ T5916] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 2014.322745][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 2014.329386][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2014.340186][ T5916] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2014.349313][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2014.357391][ T43] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2014.365090][ T5916] usb 5-1: Product: syz [ 2014.369343][ T5916] usb 5-1: Manufacturer: syz [ 2014.374077][ T5916] usb 5-1: SerialNumber: syz [ 2014.379999][ T5916] usb 5-1: config 0 descriptor?? [ 2014.392819][ T43] usb 3-1: device descriptor read/8, error -71 [ 2014.692379][ T43] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2014.713201][ T43] usb 3-1: device descriptor read/8, error -71 [ 2014.843556][ T43] usb usb3-port1: unable to enumerate USB device [ 2016.282568][T31043] netlink: 'syz.3.7368': attribute type 5 has an invalid length. [ 2016.611310][T30384] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2016.771192][T30384] usb 4-1: Using ep0 maxpacket: 32 [ 2016.784992][T30384] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2016.794562][T30384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.805592][T30384] usb 4-1: config 0 descriptor?? [ 2016.817185][T30384] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2017.029106][ T5982] usb 5-1: USB disconnect, device number 115 [ 2017.365310][ T5982] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2017.668443][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.689004][ T5982] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2017.701081][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2017.711596][ T5982] usb 5-1: config 0 descriptor?? [ 2017.719603][ T5982] pwc: Askey VC010 type 2 USB webcam detected. [ 2018.205815][T31074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7376'. [ 2018.365644][ T5982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2018.366126][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7379'. [ 2018.375078][ T5982] pwc: recv_control_msg error -32 req 02 val 2700 [ 2018.390430][T31049] Bluetooth: hci3: command 0x0406 tx timeout [ 2018.403953][ T5982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2018.417624][ T5982] pwc: recv_control_msg error -32 req 04 val 1000 [ 2018.437421][ T5982] pwc: recv_control_msg error -32 req 04 val 1300 [ 2018.447313][ T5982] pwc: recv_control_msg error -32 req 04 val 1400 [ 2018.463695][ T5982] pwc: recv_control_msg error -32 req 02 val 2000 [ 2018.483419][ T5982] pwc: recv_control_msg error -71 req 02 val 2100 [ 2018.490398][ T5982] pwc: recv_control_msg error -71 req 04 val 1500 [ 2018.497588][ T5982] pwc: recv_control_msg error -71 req 02 val 2500 [ 2018.505436][ T5982] pwc: recv_control_msg error -71 req 02 val 2400 [ 2018.512605][ T5982] pwc: recv_control_msg error -71 req 02 val 2600 [ 2018.520148][ T5982] pwc: recv_control_msg error -71 req 02 val 2900 [ 2018.527678][ T5982] pwc: recv_control_msg error -71 req 02 val 2800 [ 2018.537738][ T5982] pwc: recv_control_msg error -71 req 04 val 1100 [ 2018.544902][ T5982] pwc: recv_control_msg error -71 req 04 val 1200 [ 2018.560037][ T5982] pwc: Registered as video103. [ 2018.566631][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 2018.587338][ T5982] usb 5-1: USB disconnect, device number 116 [ 2018.750412][ T43] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2018.941651][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2018.964296][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2018.982540][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2018.993587][T30384] gspca_vc032x: reg_r err -71 [ 2019.000176][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.009868][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.017685][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2019.030181][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.035623][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.049454][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2019.059998][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.065855][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2019.073968][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.079286][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.089870][ T43] usb 2-1: Product: syz [ 2019.125599][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.135092][ T43] usb 2-1: Manufacturer: syz [ 2019.184872][ T43] usb 2-1: SerialNumber: syz [ 2019.195187][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.480033][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.485398][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.492161][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.499837][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.505399][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.510825][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.516258][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.521679][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.527116][T30384] gspca_vc032x: I2c Bus Busy Wait 00 [ 2019.532438][T30384] gspca_vc032x: Unknown sensor... [ 2019.540825][ T43] usb 2-1: config 0 descriptor?? [ 2020.179538][T30384] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2020.190550][T30384] usb 4-1: USB disconnect, device number 102 [ 2020.213088][ T43] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2020.442872][T30384] usb 2-1: USB disconnect, device number 102 [ 2021.728704][T20281] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2021.747912][T31116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7389'. [ 2021.889288][T20281] usb 2-1: Using ep0 maxpacket: 32 [ 2021.898413][T20281] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2021.907605][T20281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.916708][T20281] usb 2-1: Product: syz [ 2021.920947][T20281] usb 2-1: Manufacturer: syz [ 2021.925537][T20281] usb 2-1: SerialNumber: syz [ 2021.931585][T20281] usb 2-1: config 0 descriptor?? [ 2021.939007][T20281] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2022.559167][ T5982] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 2022.694358][T31127] binder_alloc: 31125: binder_alloc_buf, no vma [ 2022.740107][ T5982] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 2022.786182][T20281] gspca_stk1135: reg_w 0x5 err -71 [ 2022.798730][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2022.858648][ T5982] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 2022.868429][T20281] gspca_stk1135: Sensor write failed [ 2022.875783][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2022.882247][ T5982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.916472][T20281] gspca_stk1135: Sensor write failed [ 2022.945068][ T5982] usb 4-1: config 0 has no interface number 0 [ 2022.956929][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2022.968050][ T5982] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2022.991553][T20281] gspca_stk1135: Sensor read failed [ 2023.000433][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2023.026858][ T5982] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2023.056516][T20281] gspca_stk1135: Sensor read failed [ 2023.064729][T20281] gspca_stk1135: Detected sensor type unknown (0x0) [ 2023.072040][ T5982] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2023.082660][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2023.089612][T20281] gspca_stk1135: Sensor read failed [ 2023.094903][ T5982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.116828][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2023.138682][T20281] gspca_stk1135: Sensor read failed [ 2023.143962][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2023.151096][ T5982] usb 4-1: config 0 descriptor?? [ 2023.156268][T20281] gspca_stk1135: Sensor write failed [ 2023.165064][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2023.171482][T20281] gspca_stk1135: Sensor write failed [ 2023.177143][T20281] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 2023.189279][T20281] usb 2-1: USB disconnect, device number 103 [ 2023.200142][ T5982] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2024.278531][ T13] usb 4-1: Failed to submit usb control message: -110 [ 2024.296138][ T13] usb 4-1: unable to send the bmi data to the device: -110 [ 2024.322963][ T13] usb 4-1: unable to get target info from device [ 2024.341978][T31144] netlink: 'syz.0.7397': attribute type 5 has an invalid length. [ 2024.364325][ T13] usb 4-1: could not get target info (-110) [ 2024.537521][ T13] usb 4-1: could not probe fw (-110) [ 2025.402152][T20281] usb 4-1: USB disconnect, device number 103 [ 2027.036060][T31178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7407'. [ 2030.859767][T31214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7418'. [ 2031.415047][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2031.568056][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2031.582866][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2031.649737][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.575763][ T9] usb 2-1: config 0 descriptor?? [ 2032.596950][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2033.009402][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2033.017766][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 2033.036450][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2033.043669][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 2033.052731][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 2033.296919][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 2033.304304][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 2033.311457][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 2033.824134][T31233] Set syz1 is full, maxelem 65536 reached [ 2033.836780][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2033.852708][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2034.136414][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2034.147728][T31235] netlink: 'syz.3.7426': attribute type 5 has an invalid length. [ 2034.165963][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2034.196329][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2034.232530][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2034.283392][ T9] pwc: Registered as video103. [ 2034.349304][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 2034.374283][ T9] usb 2-1: USB disconnect, device number 104 [ 2035.859693][T31269] sp0: Synchronizing with TNC [ 2036.400307][T31262] [U] è [ 2036.706656][T31286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7441'. [ 2036.802505][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.810247][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.005092][T31301] binder: 31296:31301 ioctl c0306201 0 returned -14 [ 2038.987794][T31314] netlink: 'syz.4.7449': attribute type 5 has an invalid length. [ 2039.182300][T31308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7448'. [ 2039.229977][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2039.415372][T31318] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7451'. [ 2039.435302][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.450416][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2039.474137][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.610355][ T9] usb 3-1: config 0 descriptor?? [ 2039.627062][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2040.131402][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2040.141830][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 2040.164586][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2040.722116][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 2040.743988][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 2040.751472][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 2040.808904][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 2040.838665][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 2040.857783][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 2040.883067][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 2040.904429][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2040.939214][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2040.949150][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2041.161260][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2041.193553][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2041.213334][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2041.235686][ T9] pwc: Registered as video103. [ 2041.249807][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input66 [ 2041.275392][ T9] usb 3-1: USB disconnect, device number 113 [ 2041.802722][ T9] IPVS: starting estimator thread 0... [ 2041.998534][T31347] IPVS: using max 74 ests per chain, 177600 per kthread [ 2043.227966][ T5982] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2043.393567][ T5982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.419352][ T5982] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2043.444042][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.773326][ T5982] usb 2-1: config 0 descriptor?? [ 2043.785491][ T5982] pwc: Askey VC010 type 2 USB webcam detected. [ 2044.717275][ T5982] pwc: recv_control_msg error -71 req 02 val 2700 [ 2044.732481][ T5982] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2044.748126][ T5982] pwc: recv_control_msg error -71 req 04 val 1000 [ 2044.757689][ T5982] pwc: recv_control_msg error -71 req 04 val 1300 [ 2044.764587][ T5982] pwc: recv_control_msg error -71 req 04 val 1400 [ 2044.771482][ T5982] pwc: recv_control_msg error -71 req 02 val 2000 [ 2044.778803][ T5982] pwc: recv_control_msg error -71 req 02 val 2100 [ 2044.812311][ T5982] pwc: recv_control_msg error -71 req 04 val 1500 [ 2044.829358][ T5982] pwc: recv_control_msg error -71 req 02 val 2500 [ 2044.847539][ T5982] pwc: recv_control_msg error -71 req 02 val 2400 [ 2044.854329][ T5982] pwc: recv_control_msg error -71 req 02 val 2600 [ 2045.165889][T31386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7471'. [ 2045.431093][ T5982] pwc: recv_control_msg error -71 req 02 val 2900 [ 2045.491467][ T5982] pwc: recv_control_msg error -71 req 02 val 2800 [ 2045.512806][ T5982] pwc: recv_control_msg error -71 req 04 val 1100 [ 2045.529776][ T5982] pwc: recv_control_msg error -71 req 04 val 1200 [ 2045.568215][ T5982] pwc: Registered as video103. [ 2045.575879][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 2045.615785][ T5982] usb 2-1: USB disconnect, device number 105 [ 2046.441006][T31412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7479'. [ 2046.716481][T31422] netlink: 'syz.4.7483': attribute type 5 has an invalid length. [ 2048.625368][T24273] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2048.787045][T24273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2048.875820][T24273] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2048.895538][T24273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.972194][T24273] usb 4-1: config 0 descriptor?? [ 2049.076954][T24273] pwc: Askey VC010 type 2 USB webcam detected. [ 2049.808425][T24273] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2049.835531][T24273] pwc: recv_control_msg error -71 req 02 val 2700 [ 2049.842505][T24273] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2049.869785][T24273] pwc: recv_control_msg error -71 req 04 val 1000 [ 2049.886961][T24273] pwc: recv_control_msg error -71 req 04 val 1300 [ 2049.921055][T24273] pwc: recv_control_msg error -71 req 04 val 1400 [ 2049.937984][T24273] pwc: recv_control_msg error -71 req 02 val 2000 [ 2049.955088][T24273] pwc: recv_control_msg error -71 req 02 val 2100 [ 2049.972185][T24273] pwc: recv_control_msg error -71 req 04 val 1500 [ 2049.982290][T24273] pwc: recv_control_msg error -71 req 02 val 2500 [ 2050.002615][T24273] pwc: recv_control_msg error -71 req 02 val 2400 [ 2050.032669][T24273] pwc: recv_control_msg error -71 req 02 val 2600 [ 2050.042729][T24273] pwc: recv_control_msg error -71 req 02 val 2900 [ 2050.064578][T24273] pwc: recv_control_msg error -71 req 02 val 2800 [ 2050.086326][T24273] pwc: recv_control_msg error -71 req 04 val 1100 [ 2050.095527][T24273] pwc: recv_control_msg error -71 req 04 val 1200 [ 2050.327554][T24273] pwc: Registered as video103. [ 2050.359130][T24273] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68 [ 2050.465761][T24273] usb 4-1: USB disconnect, device number 104 [ 2051.561208][T31459] sp0: Synchronizing with TNC [ 2051.569760][T31458] [U] è [ 2053.365834][T24273] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2053.877726][T24273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 2053.912628][T24273] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2053.935436][T24273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.969885][T24273] usb 3-1: config 0 descriptor?? [ 2054.242887][T24273] usbhid 3-1:0.0: can't add hid device: -71 [ 2054.249288][T24273] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2054.290096][T24273] usb 3-1: USB disconnect, device number 114 [ 2054.345879][ T7945] Bluetooth: (null): Too short H5 packet [ 2054.360847][ T7945] Bluetooth: (null): Invalid header checksum [ 2054.381254][ T7945] Bluetooth: (null): Invalid header checksum [ 2054.453580][ T7945] Bluetooth: (null): Invalid header checksum [ 2054.676975][T31506] netlink: 'syz.1.7508': attribute type 5 has an invalid length. [ 2054.981042][T31510] netlink: 772 bytes leftover after parsing attributes in process `syz.4.7510'. [ 2056.316870][T31529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7515'. [ 2056.331750][ T5982] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2056.571652][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 2056.742775][ T5982] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2056.755638][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.767073][ T5982] usb 5-1: Product: syz [ 2056.777774][ T5982] usb 5-1: Manufacturer: syz [ 2056.785886][ T5982] usb 5-1: SerialNumber: syz [ 2056.795740][ T5982] usb 5-1: config 0 descriptor?? [ 2056.806881][ T5982] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2057.048446][ T975] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2057.203213][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.229244][ T975] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2057.243696][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2057.256239][ T975] usb 3-1: config 0 descriptor?? [ 2057.265213][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 2057.580368][T31549] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7521'. [ 2058.070712][ T5982] gspca_stk1135: reg_w 0x5 err -110 [ 2058.081712][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.101680][ T5982] gspca_stk1135: Sensor write failed [ 2058.117672][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.128339][ T5982] gspca_stk1135: Sensor write failed [ 2058.174361][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.187113][ T5982] gspca_stk1135: Sensor read failed [ 2058.196815][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.293882][ T975] pwc: recv_control_msg error -71 req 02 val 2700 [ 2058.294315][ T5982] gspca_stk1135: Sensor read failed [ 2058.315359][ T975] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2058.335586][ T5982] gspca_stk1135: Detected sensor type unknown (0x0) [ 2058.336693][T31554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7523'. [ 2058.350723][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.357542][ T975] pwc: recv_control_msg error -71 req 04 val 1000 [ 2058.364022][ T5982] gspca_stk1135: Sensor read failed [ 2058.364057][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.364068][ T5982] gspca_stk1135: Sensor read failed [ 2058.364126][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.383485][ T975] pwc: recv_control_msg error -71 req 04 val 1300 [ 2058.406621][ T5982] gspca_stk1135: Sensor write failed [ 2058.420350][ T5982] gspca_stk1135: serial bus timeout: status=0x00 [ 2058.437322][ T975] pwc: recv_control_msg error -71 req 04 val 1400 [ 2058.450699][ T975] pwc: recv_control_msg error -71 req 02 val 2000 [ 2058.454678][ T5982] gspca_stk1135: Sensor write failed [ 2058.467707][ T975] pwc: recv_control_msg error -71 req 02 val 2100 [ 2058.483548][ T975] pwc: recv_control_msg error -71 req 04 val 1500 [ 2058.492887][ T5982] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 2058.500612][ T975] pwc: recv_control_msg error -71 req 02 val 2500 [ 2058.519776][ T5982] usb 5-1: USB disconnect, device number 117 [ 2058.520285][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 2058.533308][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 2058.553743][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 2058.590249][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 2058.597168][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 2058.622812][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 2058.637177][ T975] pwc: Registered as video103. [ 2058.661683][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input69 [ 2058.695320][ T975] usb 3-1: USB disconnect, device number 115 [ 2059.490210][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2059.661234][ T9] usb 3-1: device descriptor read/64, error -71 [ 2059.959586][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2060.153083][ T9] usb 3-1: device descriptor read/64, error -71 [ 2060.339822][ T9] usb usb3-port1: attempt power cycle [ 2060.679296][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2061.025048][ T9] usb 3-1: device descriptor read/8, error -71 [ 2061.289025][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2061.349553][ T9] usb 3-1: device descriptor read/8, error -71 [ 2061.469184][ T9] usb usb3-port1: unable to enumerate USB device [ 2063.617776][ T9] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 2063.683731][T31619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7540'. [ 2063.904658][ T9] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 2063.913221][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 2063.952610][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.021793][ T9] usb 4-1: config 0 has no interface number 0 [ 2064.051050][ T9] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2064.239444][ T9] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2064.301020][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2064.350304][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.468232][ T9] usb 4-1: config 0 descriptor?? [ 2064.573690][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2065.709072][T20543] usb 4-1: Failed to submit usb control message: -110 [ 2066.009206][T20543] usb 4-1: unable to send the bmi data to the device: -110 [ 2066.075097][T20543] usb 4-1: unable to get target info from device [ 2066.083478][T20543] usb 4-1: could not get target info (-110) [ 2066.093055][T20543] usb 4-1: could not probe fw (-110) [ 2066.435288][T31643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7546'. [ 2067.189327][T31654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7549'. [ 2067.258227][T24273] usb 4-1: USB disconnect, device number 105 [ 2067.756106][T24273] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2068.500503][T24273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.500547][T24273] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2068.502223][T24273] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2068.502241][T24273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.502253][T24273] usb 4-1: Product: syz [ 2068.502263][T24273] usb 4-1: Manufacturer: syz [ 2068.502273][T24273] usb 4-1: SerialNumber: syz [ 2068.505777][T24273] usb 4-1: config 0 descriptor?? [ 2068.507146][T24273] adutux 4-1:0.0: interrupt endpoints not found [ 2070.135788][T31680] Set syz1 is full, maxelem 65536 reached [ 2070.238819][T31685] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2070.306267][T31685] kvm: pic: level sensitive irq not supported [ 2070.306560][T31685] kvm: pic: non byte read [ 2070.800989][ T43] usb 4-1: USB disconnect, device number 106 [ 2072.279024][T31702] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2074.154354][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7571'. [ 2076.461386][ T5982] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2076.532084][T31755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7577'. [ 2076.682849][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 2076.726125][ T5982] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2076.764705][ T5982] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2076.840310][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2076.866191][ T5982] usb 5-1: Product: syz [ 2076.876850][ T5982] usb 5-1: Manufacturer: syz [ 2076.894532][ T5982] usb 5-1: SerialNumber: syz [ 2076.903899][ T5982] usb 5-1: config 0 descriptor?? [ 2078.585496][T31780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7583'. [ 2078.898704][T31785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7585'. [ 2079.180470][ T5982] usb 5-1: USB disconnect, device number 118 [ 2080.432121][T31806] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7591'. [ 2082.498293][ T43] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2082.658254][ T43] usb 4-1: device descriptor read/64, error -71 [ 2083.310360][ T43] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2083.457837][ T43] usb 4-1: device descriptor read/64, error -71 [ 2083.568886][ T43] usb usb4-port1: attempt power cycle [ 2083.665574][T31850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7605'. [ 2083.737336][T31851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2083.918017][ T5982] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2083.947671][ T43] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2083.968505][ T43] usb 4-1: device descriptor read/8, error -71 [ 2084.077588][ T5982] usb 5-1: Using ep0 maxpacket: 16 [ 2084.090194][ T5982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2084.113139][ T5982] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 2084.126997][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.157852][ T5982] usb 5-1: Product: syz [ 2084.162070][ T5982] usb 5-1: Manufacturer: syz [ 2084.166702][ T5982] usb 5-1: SerialNumber: syz [ 2084.173238][ T5982] usb 5-1: config 0 descriptor?? [ 2084.178273][T20281] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2084.188724][ T5982] kobil_sct 5-1:0.0: required endpoints missing [ 2084.227615][ T43] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2084.259540][ T43] usb 4-1: device descriptor read/8, error -71 [ 2084.329918][T20281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2084.341833][T20281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2084.351651][T20281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2084.363329][T20281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2084.376608][T20281] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2084.378858][ T43] usb usb4-port1: unable to enumerate USB device [ 2084.392185][T20281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2084.392212][T20281] usb 2-1: Product: syz [ 2084.392227][T20281] usb 2-1: Manufacturer: syz [ 2084.436092][T31860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7609'. [ 2084.438860][ T43] usb 5-1: USB disconnect, device number 119 [ 2084.461310][T20281] usb 2-1: SerialNumber: syz [ 2084.468178][T20281] usb 2-1: config 0 descriptor?? [ 2084.648285][T31864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7610'. [ 2084.767635][T20281] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2084.972391][T24273] usb 2-1: USB disconnect, device number 106 [ 2086.978551][T31894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7620'. [ 2087.748333][T31905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7621'. [ 2088.325423][T24276] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2088.465370][T24276] usb 2-1: device descriptor read/64, error -71 [ 2088.715628][T24276] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2089.334850][T24276] usb 2-1: device descriptor read/64, error -71 [ 2089.515105][T24276] usb usb2-port1: attempt power cycle [ 2089.529742][T31923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7627'. [ 2090.014619][T24276] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2090.104815][T24276] usb 2-1: device descriptor read/8, error -71 [ 2090.576251][T24276] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2090.807891][T31935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7633'. [ 2091.243360][T31899] Set syz1 is full, maxelem 65536 reached [ 2091.706959][T24276] usb 2-1: device descriptor read/8, error -71 [ 2091.923701][T24276] usb usb2-port1: unable to enumerate USB device [ 2091.954078][ T13] Bluetooth: (null): Invalid header checksum [ 2091.960876][ T13] Bluetooth: (null): Invalid header checksum [ 2094.265549][T31976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7643'. [ 2094.476228][T31982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'. [ 2095.042902][T31992] binder: BINDER_SET_CONTEXT_MGR already set [ 2095.048913][T31992] binder: 31991:31992 ioctl 4018620d 200000004a80 returned -16 [ 2095.172853][ T43] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2095.591753][ T43] usb 4-1: device descriptor read/64, error -71 [ 2095.881658][ T43] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2096.094595][ T43] usb 4-1: device descriptor read/64, error -71 [ 2096.298044][ T43] usb usb4-port1: attempt power cycle [ 2096.846221][ T43] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2096.920046][ T43] usb 4-1: device descriptor read/8, error -71 [ 2097.190977][ T43] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2097.251267][ T43] usb 4-1: device descriptor read/8, error -71 [ 2097.401043][ T43] usb usb4-port1: unable to enumerate USB device [ 2098.200774][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.207471][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.899492][T32026] netlink: 'syz.1.7658': attribute type 5 has an invalid length. [ 2100.059528][ T43] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2100.450790][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2100.472498][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2100.507843][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2100.545973][ T43] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2100.561513][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.582901][ T43] usb 5-1: Product: syz [ 2100.594400][ T43] usb 5-1: Manufacturer: syz [ 2100.612676][ T43] usb 5-1: SerialNumber: syz [ 2100.631763][ T43] usb 5-1: config 0 descriptor?? [ 2100.651360][ T43] adutux 5-1:0.0: interrupt endpoints not found [ 2100.840571][T32042] Set syz1 is full, maxelem 65536 reached [ 2101.594039][T32054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7665'. [ 2102.098562][ T43] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2102.244475][ T43] usb 4-1: device descriptor read/64, error -71 [ 2103.033753][ T43] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2103.061397][ T975] usb 5-1: USB disconnect, device number 120 [ 2103.098924][T32068] netlink: 'syz.1.7672': attribute type 5 has an invalid length. [ 2103.168284][ T43] usb 4-1: device descriptor read/64, error -71 [ 2103.338116][ T43] usb usb4-port1: attempt power cycle [ 2103.777906][ T43] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2103.827210][ T43] usb 4-1: device descriptor read/8, error -71 [ 2104.505243][ T43] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2104.518331][ T43] usb 4-1: device descriptor read/8, error -71 [ 2104.643266][ T43] usb usb4-port1: unable to enumerate USB device [ 2105.108202][T32101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7679'. [ 2105.131755][T32102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7680'. [ 2105.369924][T32106] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7682'. [ 2105.877504][T32111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7683'. [ 2106.264451][T32118] netlink: 828 bytes leftover after parsing attributes in process `syz.3.7686'. [ 2107.525874][T24273] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2107.675680][T20281] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2107.699399][T24273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2107.711561][T24273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2107.736258][T24273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2107.751682][T24273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2107.799674][T24273] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2107.814837][T24273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.824261][T24273] usb 2-1: Product: syz [ 2107.838882][T24273] usb 2-1: Manufacturer: syz [ 2107.840028][T20281] usb 3-1: Using ep0 maxpacket: 32 [ 2107.843626][T24273] usb 2-1: SerialNumber: syz [ 2107.876603][T24273] usb 2-1: config 0 descriptor?? [ 2108.017531][T20281] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2108.026776][T20281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.034820][T20281] usb 3-1: Product: syz [ 2108.039400][T20281] usb 3-1: Manufacturer: syz [ 2108.044027][T20281] usb 3-1: SerialNumber: syz [ 2108.129528][T24273] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2108.599520][ T5982] usb 2-1: USB disconnect, device number 111 [ 2108.668101][T20281] usb 3-1: config 0 descriptor?? [ 2108.697768][T20281] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2109.254990][ T43] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2109.384890][ T43] usb 5-1: device descriptor read/64, error -71 [ 2109.627939][ T43] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2109.718931][T32164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7701'. [ 2109.764676][ T43] usb 5-1: device descriptor read/64, error -71 [ 2109.915790][ T43] usb usb5-port1: attempt power cycle [ 2110.594306][ T43] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2110.614798][ T43] usb 5-1: device descriptor read/8, error -71 [ 2110.661642][T32176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7704'. [ 2110.739650][T20281] gspca_stk1135: reg_w 0x200 err -71 [ 2110.748237][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.757311][T20281] gspca_stk1135: Sensor write failed [ 2110.762661][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.770300][T20281] gspca_stk1135: Sensor write failed [ 2110.777304][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.784911][T20281] gspca_stk1135: Sensor read failed [ 2110.790145][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.798020][T20281] gspca_stk1135: Sensor read failed [ 2110.803871][T20281] gspca_stk1135: Detected sensor type unknown (0x0) [ 2110.811955][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.818902][T20281] gspca_stk1135: Sensor read failed [ 2110.858349][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.871152][T20281] gspca_stk1135: Sensor read failed [ 2110.880817][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.891125][T20281] gspca_stk1135: Sensor write failed [ 2110.897932][T20281] gspca_stk1135: serial bus timeout: status=0x00 [ 2110.904069][ T43] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2110.909535][T20281] gspca_stk1135: Sensor write failed [ 2110.917796][T20281] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 2110.931519][T20281] usb 3-1: USB disconnect, device number 120 [ 2110.964579][ T43] usb 5-1: device descriptor read/8, error -71 [ 2111.078235][ T43] usb usb5-port1: unable to enumerate USB device [ 2112.568070][ T43] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2112.738492][ T43] usb 4-1: device descriptor read/64, error -71 [ 2112.927246][T32204] netlink: 828 bytes leftover after parsing attributes in process `syz.0.7715'. [ 2113.053234][ T43] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2113.103931][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7719'. [ 2113.216002][ T43] usb 4-1: device descriptor read/64, error -71 [ 2113.446306][ T43] usb usb4-port1: attempt power cycle [ 2113.812887][ T43] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2113.834714][T24273] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2113.865009][ T43] usb 4-1: device descriptor read/8, error -71 [ 2114.140268][T24273] usb 3-1: device descriptor read/64, error -71 [ 2114.239960][T32242] netlink: 'syz.0.7728': attribute type 72 has an invalid length. [ 2114.248089][T32242] netlink: 'syz.0.7728': attribute type 8 has an invalid length. [ 2114.416689][ T43] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2114.472281][T24273] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2114.569615][T32251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7731'. [ 2114.617951][T24273] usb 3-1: device descriptor read/64, error -71 [ 2114.632268][ T43] usb 4-1: device not accepting address 122, error -71 [ 2114.908393][T24273] usb usb3-port1: attempt power cycle [ 2114.916045][ T43] usb usb4-port1: unable to enumerate USB device [ 2115.508627][T24273] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2115.517505][ T43] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2115.644289][T24273] usb 3-1: device descriptor read/8, error -71 [ 2115.741662][ T43] usb 4-1: device descriptor read/64, error -71 [ 2115.881856][T24273] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2115.902306][T24273] usb 3-1: device descriptor read/8, error -71 [ 2115.971571][ T975] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2116.011799][T24273] usb usb3-port1: unable to enumerate USB device [ 2116.021536][ T43] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2116.112032][ T13] Bluetooth: (null): Invalid header checksum [ 2116.124405][ T13] Bluetooth: (null): Invalid header checksum [ 2116.133175][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.146489][ T975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2116.155812][ T43] usb 4-1: device descriptor read/64, error -71 [ 2116.164792][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.176324][ T975] usb 5-1: config 0 descriptor?? [ 2116.184215][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 2116.271712][ T43] usb usb4-port1: attempt power cycle [ 2116.621440][ T43] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2116.664953][ T43] usb 4-1: device descriptor read/8, error -71 [ 2117.300679][ T975] pwc: recv_control_msg error -71 req 02 val 2700 [ 2117.319800][ T975] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2117.327402][ T975] pwc: recv_control_msg error -71 req 04 val 1000 [ 2117.334334][ T975] pwc: recv_control_msg error -71 req 04 val 1300 [ 2117.353790][ T975] pwc: recv_control_msg error -71 req 04 val 1400 [ 2117.381345][ T975] pwc: recv_control_msg error -71 req 02 val 2000 [ 2117.436809][ T975] pwc: recv_control_msg error -71 req 02 val 2100 [ 2117.443695][ T975] pwc: recv_control_msg error -71 req 04 val 1500 [ 2117.450819][ T43] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2117.539357][ T975] pwc: recv_control_msg error -71 req 02 val 2500 [ 2117.564350][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 2117.578162][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 2117.585153][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 2117.600950][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 2117.607936][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 2117.615364][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 2117.632074][ T975] pwc: Registered as video103. [ 2117.649225][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 2117.662922][ T975] usb 5-1: USB disconnect, device number 125 [ 2117.743155][ T43] usb 4-1: device not accepting address 126, error -71 [ 2117.805168][ T43] usb usb4-port1: unable to enumerate USB device [ 2118.942361][T32310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7746'. [ 2120.718500][T32332] 9pnet_fd: Insufficient options for proto=fd [ 2121.729697][T32344] binder: BINDER_SET_CONTEXT_MGR already set [ 2121.735854][T32344] binder: 32343:32344 ioctl 4018620d 200000004a80 returned -16 [ 2123.733540][T32361] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2124.018852][T32370] netlink: 892 bytes leftover after parsing attributes in process `syz.4.7764'. [ 2125.625931][T32405] 9p: Unknown access argument 18446744073709551615: -34 [ 2125.850407][T32409] binder: BINDER_SET_CONTEXT_MGR already set [ 2125.857473][T32411] netlink: 892 bytes leftover after parsing attributes in process `syz.4.7775'. [ 2125.869500][T32409] binder: 32408:32409 ioctl 4018620d 200000004a80 returned -16 [ 2126.120978][T32402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7771'. [ 2126.656625][T32419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7776'. [ 2129.033555][T32445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7783'. [ 2131.054316][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2131.207947][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2131.231868][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2131.246637][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2131.259316][ T9] usb 3-1: config 0 descriptor?? [ 2131.267374][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2131.687518][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2131.697606][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 2131.952801][T32492] 9pnet_fd: Insufficient options for proto=fd [ 2132.089262][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2132.114617][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 2132.336558][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 2132.403146][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 2132.450540][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 2132.484716][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 2132.747351][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2132.756183][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2132.764997][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2132.774746][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2132.787513][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2132.797823][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2132.812973][ T9] pwc: Registered as video103. [ 2132.824904][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input71 [ 2132.859765][ T9] usb 3-1: USB disconnect, device number 125 [ 2135.082041][ T5982] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2135.221992][ T5982] usb 2-1: device descriptor read/64, error -71 [ 2135.504860][ T5982] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2135.751876][ T5982] usb 2-1: device descriptor read/64, error -71 [ 2135.861896][ T5982] usb usb2-port1: attempt power cycle [ 2136.261541][ T5982] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2136.302042][ T5982] usb 2-1: device descriptor read/8, error -71 [ 2136.731181][ T5982] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2136.782030][ T5982] usb 2-1: device descriptor read/8, error -71 [ 2136.911590][ T5982] usb usb2-port1: unable to enumerate USB device [ 2137.868922][T32580] 9pnet_fd: Insufficient options for proto=fd [ 2138.311124][T32595] netlink: 'syz.1.7826': attribute type 5 has an invalid length. [ 2140.141075][T20535] Bluetooth: (null): Invalid header checksum [ 2140.147148][T20535] Bluetooth: (null): Invalid header checksum [ 2140.192950][T32619] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2140.227975][T32619] kvm: pic: level sensitive irq not supported [ 2140.228067][T32619] kvm: pic: non byte read [ 2140.251714][ T13] Bluetooth: (null): Invalid header checksum [ 2140.262788][T32619] kvm: pic: level sensitive irq not supported [ 2140.263084][T32619] kvm: pic: non byte read [ 2140.285947][T32619] kvm: pic: level sensitive irq not supported [ 2140.286010][T32619] kvm: pic: non byte read [ 2140.298593][T32619] kvm: pic: level sensitive irq not supported [ 2140.298694][T32619] kvm: pic: non byte read [ 2140.691791][T32631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7837'. [ 2142.755972][T32664] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7848'. [ 2143.102651][ T7945] Bluetooth: (null): Invalid header checksum [ 2143.122006][ T7945] Bluetooth: (null): Invalid header checksum [ 2143.920163][T32676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2143.946041][T32676] kvm: pic: level sensitive irq not supported [ 2143.957342][T32676] kvm: pic: non byte read [ 2143.985718][T32676] kvm: pic: level sensitive irq not supported [ 2143.985785][T32676] kvm: pic: non byte read [ 2144.021076][T32676] kvm: pic: level sensitive irq not supported [ 2144.021141][T32676] kvm: pic: non byte read [ 2144.049353][T32676] kvm: pic: level sensitive irq not supported [ 2144.049651][T32676] kvm: pic: non byte read [ 2144.488344][T32683] 9pnet_fd: Insufficient options for proto=fd [ 2145.162387][T32703] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2145.186097][ T13] Bluetooth: (null): Invalid header checksum [ 2145.193129][T32703] kvm: pic: level sensitive irq not supported [ 2145.193294][T32703] kvm: pic: non byte read [ 2145.213044][ T13] Bluetooth: (null): Invalid header checksum [ 2145.226652][T32703] kvm: pic: level sensitive irq not supported [ 2145.226718][T32703] kvm: pic: non byte read [ 2145.248248][T32703] kvm: pic: level sensitive irq not supported [ 2145.248312][T32703] kvm: pic: non byte read [ 2145.292404][T32703] kvm: pic: level sensitive irq not supported [ 2145.292469][T32703] kvm: pic: non byte read [ 2145.478163][T32714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7863'. [ 2146.544021][T32739] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2146.566489][T32740] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2146.568304][T32739] kvm: pic: level sensitive irq not supported [ 2146.590490][T32739] kvm: pic: non byte read [ 2146.599521][T32740] kvm: pic: level sensitive irq not supported [ 2146.601510][T32740] kvm: pic: non byte read [ 2146.616926][T32739] kvm: pic: level sensitive irq not supported [ 2146.616990][T32739] kvm: pic: non byte read [ 2146.623560][T32740] kvm: pic: level sensitive irq not supported [ 2146.628263][T32740] kvm: pic: non byte read [ 2146.642806][T32740] kvm: pic: level sensitive irq not supported [ 2146.642907][T32740] kvm: pic: non byte read [ 2146.646595][T32739] kvm: pic: level sensitive irq not supported [ 2146.652288][T32740] kvm: pic: level sensitive irq not supported [ 2146.660803][T32739] kvm: pic: non byte read [ 2146.661003][T32739] kvm: pic: level sensitive irq not supported [ 2146.661054][T32739] kvm: pic: non byte read [ 2146.696850][T32740] kvm: pic: non byte read [ 2147.773413][T32761] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7878'. [ 2147.965619][ T5982] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2148.105589][ T5982] usb 5-1: device descriptor read/64, error -71 [ 2148.645355][ T5982] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2148.775268][ T5982] usb 5-1: device descriptor read/64, error -71 [ 2148.914316][ T5982] usb usb5-port1: attempt power cycle [ 2149.265142][ T5982] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2149.360332][ T330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7892'. [ 2149.431869][ T5982] usb 5-1: device descriptor read/8, error -71 [ 2149.905643][ T5982] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2149.931340][ T5982] usb 5-1: device descriptor read/8, error -71 [ 2150.152635][ T5982] usb usb5-port1: unable to enumerate USB device [ 2150.231737][ T336] 9pnet_fd: Insufficient options for proto=fd [ 2151.445825][ T350] Set syz1 is full, maxelem 65536 reached [ 2152.336200][ T364] 9pnet_fd: Insufficient options for proto=fd [ 2153.100018][ T373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7908'. [ 2153.431374][ T379] fuse: Bad value for 'fd' [ 2153.923012][ T9] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2154.112487][ T9] usb 3-1: device descriptor read/64, error -71 [ 2154.447671][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2154.582289][ T9] usb 3-1: device descriptor read/64, error -71 [ 2154.712665][ T9] usb usb3-port1: attempt power cycle [ 2155.062003][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2155.082765][ T9] usb 3-1: device descriptor read/8, error -71 [ 2155.702639][ T400] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2155.731665][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2155.800470][ T400] kvm: pic: level sensitive irq not supported [ 2155.800525][ T400] kvm: pic: non byte read [ 2155.820373][ T9] usb 3-1: device descriptor read/8, error -71 [ 2155.852056][ T400] kvm: pic: level sensitive irq not supported [ 2155.852115][ T400] kvm: pic: non byte read [ 2155.918457][ T400] kvm: pic: level sensitive irq not supported [ 2155.918525][ T400] kvm: pic: non byte read [ 2155.946741][ T400] kvm: pic: level sensitive irq not supported [ 2155.946829][ T400] kvm: pic: non byte read [ 2155.983225][ T9] usb usb3-port1: unable to enumerate USB device [ 2156.211069][ T408] 9pnet_fd: Insufficient options for proto=fd [ 2158.766752][ T5960] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2158.835075][ T451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7931'. [ 2158.920586][ T5960] usb 2-1: device descriptor read/64, error -71 [ 2159.260022][ T5960] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2159.555614][ T5960] usb 2-1: device descriptor read/64, error -71 [ 2159.603891][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.610727][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2159.689723][ T5960] usb usb2-port1: attempt power cycle [ 2159.704865][ T466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7937'. [ 2160.209619][ T5960] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2160.241044][ T5960] usb 2-1: device descriptor read/8, error -71 [ 2160.582441][ T5960] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2160.659854][ T5960] usb 2-1: device descriptor read/8, error -71 [ 2160.809468][ T5960] usb usb2-port1: unable to enumerate USB device [ 2160.817617][ T463] Set syz1 is full, maxelem 65536 reached [ 2161.181901][ T487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7944'. [ 2161.748664][ T5982] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2162.018534][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 2162.098871][ T5982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.123624][ T5982] usb 2-1: config 0 has no interfaces? [ 2162.147017][ T5982] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2162.158469][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.169720][ T5960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2162.184204][ T5982] usb 2-1: Product: syz [ 2162.190005][ T5982] usb 2-1: Manufacturer: syz [ 2162.212579][ T5982] usb 2-1: SerialNumber: syz [ 2162.242908][ T5982] usb 2-1: config 0 descriptor?? [ 2162.333547][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2162.344459][ T5960] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2162.357016][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.479025][ T5960] usb 5-1: config 0 descriptor?? [ 2162.486598][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 2163.279911][ T5960] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2163.289015][ T5960] pwc: recv_control_msg error -32 req 02 val 2700 [ 2163.321235][ T5960] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2163.330891][ T5960] pwc: recv_control_msg error -32 req 04 val 1000 [ 2163.361647][ T5960] pwc: recv_control_msg error -32 req 04 val 1300 [ 2163.724298][ T5960] pwc: recv_control_msg error -32 req 02 val 2000 [ 2163.740353][ T5960] pwc: recv_control_msg error -32 req 02 val 2100 [ 2163.764431][ T5960] pwc: recv_control_msg error -32 req 04 val 1500 [ 2164.121699][ T5960] pwc: recv_control_msg error -71 req 02 val 2400 [ 2164.135826][ T5960] pwc: recv_control_msg error -71 req 02 val 2600 [ 2164.147843][ T5960] pwc: recv_control_msg error -71 req 02 val 2900 [ 2164.157083][ T5960] pwc: recv_control_msg error -71 req 02 val 2800 [ 2164.164181][ T5960] pwc: recv_control_msg error -71 req 04 val 1100 [ 2164.171181][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 2164.179260][ T5960] pwc: Registered as video103. [ 2164.187881][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input72 [ 2164.200386][ T5960] usb 5-1: USB disconnect, device number 4 [ 2164.369293][ T5982] usb 2-1: USB disconnect, device number 120 [ 2164.387681][T20281] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2164.593565][T20281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.593614][T20281] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2164.593636][T20281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.627835][T20281] usb 3-1: config 0 descriptor?? [ 2164.630247][T20281] pwc: Askey VC010 type 2 USB webcam detected. [ 2164.759707][ T5982] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2164.920181][ T5982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.945302][ T5982] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2164.959459][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.981901][ T5982] usb 2-1: config 0 descriptor?? [ 2165.009090][ T5982] pwc: Askey VC010 type 2 USB webcam detected. [ 2165.045011][T20281] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2165.052939][T20281] pwc: recv_control_msg error -32 req 02 val 2700 [ 2165.060904][T20281] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2165.069585][T20281] pwc: recv_control_msg error -32 req 04 val 1000 [ 2165.086629][T20281] pwc: recv_control_msg error -32 req 04 val 1300 [ 2165.308354][T20281] pwc: recv_control_msg error -32 req 02 val 2000 [ 2165.315561][T20281] pwc: recv_control_msg error -32 req 02 val 2100 [ 2165.323634][T20281] pwc: recv_control_msg error -32 req 04 val 1500 [ 2165.427456][ T5982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2165.438207][ T5982] pwc: recv_control_msg error -32 req 02 val 2700 [ 2165.450660][ T5982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2165.463751][ T5982] pwc: recv_control_msg error -32 req 04 val 1000 [ 2165.630872][T20281] pwc: recv_control_msg error -71 req 02 val 2400 [ 2165.645946][T20281] pwc: recv_control_msg error -71 req 02 val 2600 [ 2165.657854][T20281] pwc: recv_control_msg error -71 req 02 val 2900 [ 2165.665555][T20281] pwc: recv_control_msg error -71 req 02 val 2800 [ 2165.673183][T20281] pwc: recv_control_msg error -71 req 04 val 1100 [ 2165.686897][T20281] pwc: recv_control_msg error -71 req 04 val 1200 [ 2165.693609][ T5982] pwc: recv_control_msg error -32 req 04 val 1400 [ 2165.710595][ T5982] pwc: recv_control_msg error -32 req 02 val 2000 [ 2165.720559][T20281] pwc: Registered as video103. [ 2165.725480][ T5982] pwc: recv_control_msg error -32 req 02 val 2100 [ 2165.734105][T20281] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73 [ 2165.744332][ T5982] pwc: recv_control_msg error -32 req 04 val 1500 [ 2165.759534][T20281] usb 3-1: USB disconnect, device number 4 [ 2166.075633][ T5982] pwc: recv_control_msg error -71 req 02 val 2400 [ 2166.086058][ T5982] pwc: recv_control_msg error -71 req 02 val 2600 [ 2166.093415][ T5982] pwc: recv_control_msg error -71 req 02 val 2900 [ 2166.100356][ T5982] pwc: recv_control_msg error -71 req 02 val 2800 [ 2166.147423][ T5982] pwc: recv_control_msg error -71 req 04 val 1100 [ 2166.164544][ T5982] pwc: recv_control_msg error -71 req 04 val 1200 [ 2166.172207][ T5982] pwc: Registered as video103. [ 2166.198422][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input74 [ 2166.240740][ T5982] usb 2-1: USB disconnect, device number 121 [ 2166.856117][ T5982] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2167.067996][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 2167.073901][ T5982] usb 2-1: no configurations [ 2167.085755][ T5982] usb 2-1: can't read configurations, error -22 [ 2167.387821][ T5982] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2167.741555][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 2167.763689][ T5982] usb 2-1: no configurations [ 2167.768729][ T5982] usb 2-1: can't read configurations, error -22 [ 2167.788655][ T5982] usb usb2-port1: attempt power cycle [ 2168.271727][ T595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7975'. [ 2168.280916][ T5982] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2168.321696][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 2168.355674][ T5982] usb 2-1: no configurations [ 2168.358483][ T975] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2168.368204][ T5982] usb 2-1: can't read configurations, error -22 [ 2168.410230][ T596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2168.519607][ T5982] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2168.588578][ T975] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.601943][ T975] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2168.612160][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.623095][ T975] usb 5-1: config 0 descriptor?? [ 2168.625651][ T5982] usb 2-1: Using ep0 maxpacket: 16 [ 2168.650421][ T975] pwc: Askey VC010 type 2 USB webcam detected. [ 2168.654600][ T5982] usb 2-1: no configurations [ 2168.661597][ T5982] usb 2-1: can't read configurations, error -22 [ 2168.732121][ T5982] usb usb2-port1: unable to enumerate USB device [ 2169.190166][ T975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2169.197582][ T975] pwc: recv_control_msg error -32 req 02 val 2700 [ 2169.204546][ T975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2169.216715][ T975] pwc: recv_control_msg error -32 req 04 val 1000 [ 2169.242328][ T975] pwc: recv_control_msg error -32 req 04 val 1300 [ 2169.457623][ T975] pwc: recv_control_msg error -32 req 02 val 2000 [ 2169.464878][ T975] pwc: recv_control_msg error -32 req 02 val 2100 [ 2169.597536][ T610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7980'. [ 2169.683389][ T975] pwc: recv_control_msg error -32 req 04 val 1500 [ 2169.901797][ T975] pwc: recv_control_msg error -71 req 02 val 2400 [ 2169.912031][ T975] pwc: recv_control_msg error -71 req 02 val 2600 [ 2169.922440][ T975] pwc: recv_control_msg error -71 req 02 val 2900 [ 2170.013484][ T975] pwc: recv_control_msg error -71 req 02 val 2800 [ 2170.103268][ T975] pwc: recv_control_msg error -71 req 04 val 1100 [ 2170.130093][ T975] pwc: recv_control_msg error -71 req 04 val 1200 [ 2170.153697][ T975] pwc: Registered as video103. [ 2170.164299][ T975] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input75 [ 2170.587748][ T975] usb 5-1: USB disconnect, device number 5 [ 2171.265696][ T634] binder: BINDER_SET_CONTEXT_MGR already set [ 2171.273450][ T634] binder: 633:634 ioctl 4018620d 200000004a80 returned -16 [ 2171.973734][ T646] netlink: 'syz.0.7991': attribute type 29 has an invalid length. [ 2171.981680][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 2172.380694][ T975] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2172.553340][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 2172.565225][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.602657][ T975] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2172.662617][ T975] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2172.682498][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.747536][ T975] usb 4-1: Product: syz [ 2172.751952][ T975] usb 4-1: Manufacturer: syz [ 2172.762804][ T975] usb 4-1: SerialNumber: syz [ 2172.779858][ T975] usb 4-1: config 0 descriptor?? [ 2172.915358][ T662] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2173.362291][ T672] 9pnet_fd: Insufficient options for proto=fd [ 2173.479959][ T30] audit: type=1400 audit(1757029912.338:837): avc: denied { setattr } for pid=675 comm="syz.2.8002" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2173.596251][ T680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8001'. [ 2175.006008][ T9] usb 4-1: USB disconnect, device number 127 [ 2175.078240][ T702] binder: BINDER_SET_CONTEXT_MGR already set [ 2175.084375][ T702] binder: 697:702 ioctl 4018620d 200000004a80 returned -16 [ 2175.881963][ T715] 9pnet_fd: Insufficient options for proto=fd [ 2178.000247][ T744] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8022'. [ 2179.847672][ T755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8025'. [ 2180.005594][ T759] 9pnet_fd: Insufficient options for proto=fd [ 2180.357280][ T771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8029'. [ 2180.472744][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2180.710663][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2180.746105][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2180.759655][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.822032][ T9] usb 5-1: config 0 descriptor?? [ 2180.830156][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 2181.234400][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2181.241533][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 2181.258167][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2181.266638][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 2181.282504][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 2181.492908][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 2181.506427][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 2181.997482][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 2182.235489][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 2182.245716][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 2182.258512][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 2182.267426][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 2182.278066][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 2182.287121][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 2182.295197][ T9] pwc: Registered as video103. [ 2182.301861][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input76 [ 2182.314758][ T9] usb 5-1: USB disconnect, device number 6 [ 2182.498592][ T794] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8035'. [ 2184.131092][ T810] 9pnet_fd: Insufficient options for proto=fd [ 2184.652462][ T821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8042'. [ 2184.727769][ T817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2184.826438][ T820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8044'. [ 2186.639589][ T853] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8049'. [ 2187.762013][ T863] 9pnet_fd: Insufficient options for proto=fd [ 2188.293177][ T876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8057'. [ 2188.343283][ T877] netlink: 'syz.1.8058': attribute type 29 has an invalid length. [ 2188.351220][ T877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8058'. [ 2189.310374][ T887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8060'. [ 2190.650453][ T907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8063'. [ 2190.769303][ T5960] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2191.205361][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2191.215698][ T5960] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2191.227899][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.279792][ T5960] usb 5-1: config 0 descriptor?? [ 2191.311146][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 2191.626012][ T916] 9pnet_fd: Insufficient options for proto=fd [ 2191.754032][ T5960] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2191.788133][ T5960] pwc: recv_control_msg error -32 req 02 val 2700 [ 2191.834743][ T928] netlink: 'syz.1.8069': attribute type 29 has an invalid length. [ 2191.853635][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8069'. [ 2192.028720][ T5960] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2192.036756][ T5960] pwc: recv_control_msg error -32 req 04 val 1000 [ 2192.043820][ T5960] pwc: recv_control_msg error -32 req 04 val 1300 [ 2192.415112][ T5960] pwc: recv_control_msg error -32 req 02 val 2000 [ 2192.431402][ T5960] pwc: recv_control_msg error -32 req 02 val 2100 [ 2192.452596][ T5960] pwc: recv_control_msg error -32 req 04 val 1500 [ 2192.543602][ T975] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 2192.665093][ T5960] pwc: recv_control_msg error -71 req 02 val 2400 [ 2192.692579][ T5960] pwc: recv_control_msg error -71 req 02 val 2600 [ 2192.826667][ T975] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 2192.836103][ T975] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 2192.863277][ T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.873509][ T5960] pwc: recv_control_msg error -71 req 02 val 2900 [ 2192.880298][ T5960] pwc: recv_control_msg error -71 req 02 val 2800 [ 2192.890284][ T975] usb 2-1: config 0 has no interface number 0 [ 2192.896911][ T975] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2192.910056][ T5960] pwc: recv_control_msg error -71 req 04 val 1100 [ 2192.919567][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 2192.927489][ T975] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2192.965470][ T5960] pwc: Registered as video103. [ 2192.993371][ T975] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2193.011244][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input77 [ 2193.044703][ T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.059172][ T5960] usb 5-1: USB disconnect, device number 7 [ 2193.117926][ T975] usb 2-1: config 0 descriptor?? [ 2193.156285][ T975] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2194.542582][T24276] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2194.613544][ T7945] usb 2-1: Failed to submit usb control message: -110 [ 2194.620970][ T7945] usb 2-1: unable to send the bmi data to the device: -110 [ 2194.682480][T24276] usb 4-1: device descriptor read/64, error -71 [ 2194.722804][ T7945] usb 2-1: unable to get target info from device [ 2194.731446][ T7945] usb 2-1: could not get target info (-110) [ 2194.738765][ T7945] usb 2-1: could not probe fw (-110) [ 2194.814524][ T975] usb 2-1: USB disconnect, device number 126 [ 2194.852454][ T5982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2194.898861][ T970] 9pnet_fd: Insufficient options for proto=fd [ 2194.932224][T24276] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2195.006700][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2195.018407][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2195.319486][T24276] usb 4-1: device descriptor read/64, error -71 [ 2195.451994][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2195.463759][T24276] usb usb4-port1: attempt power cycle [ 2195.470308][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2195.482863][ T5982] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2195.524915][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.534992][ T5982] usb 5-1: Product: syz [ 2195.975990][ T5982] usb 5-1: Manufacturer: syz [ 2195.983023][ T5982] usb 5-1: SerialNumber: syz [ 2195.991011][ T5982] usb 5-1: config 0 descriptor?? [ 2196.061620][T24276] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2196.132065][T24276] usb 4-1: device descriptor read/8, error -71 [ 2196.463634][T24276] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2196.561277][T24276] usb 4-1: device descriptor read/8, error -71 [ 2196.561601][ T5982] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2196.681549][T24276] usb usb4-port1: unable to enumerate USB device [ 2196.719066][T24276] usb 5-1: USB disconnect, device number 8 [ 2198.042580][ T1018] 9pnet_fd: Insufficient options for proto=fd [ 2198.918331][ T1031] netlink: 'syz.3.8095': attribute type 29 has an invalid length. [ 2198.926395][ T1031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8095'. [ 2199.709871][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 2199.878325][ T9] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 2199.890455][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 2199.902040][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.948882][ T9] usb 4-1: config 0 has no interface number 0 [ 2199.982057][ T9] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2200.020441][ T9] usb 4-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2200.056095][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2200.124478][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.153833][ T9] usb 4-1: config 0 descriptor?? [ 2200.262214][ T5960] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2200.331276][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2200.449345][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 2200.752764][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.783279][ T5960] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2200.843446][ T5960] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 2200.876512][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.911648][ T5960] usb 3-1: Product: syz [ 2200.923340][ T5960] usb 3-1: Manufacturer: syz [ 2200.938551][ T5960] usb 3-1: SerialNumber: syz [ 2200.958765][ T5960] usb 3-1: config 0 descriptor?? [ 2201.231192][ T5960] usb 3-1: USB disconnect, device number 5 [ 2201.739415][ T7945] usb 4-1: Failed to submit usb control message: -110 [ 2201.768831][ T7945] usb 4-1: unable to send the bmi data to the device: -110 [ 2201.776473][ T7945] usb 4-1: unable to get target info from device [ 2201.798693][ T7945] usb 4-1: could not get target info (-110) [ 2201.815854][ T7945] usb 4-1: could not probe fw (-110) [ 2202.059268][ T1074] 9pnet_fd: Insufficient options for proto=fd [ 2202.184037][ T1081] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8104'. [ 2203.005298][ T5960] usb 4-1: USB disconnect, device number 6 [ 2204.462175][ T1101] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8111'. [ 2205.529166][ T1111] 9p: Unknown access argument 18446744073709551615: -34 [ 2205.962168][ T1124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2205.973896][ T1124] kvm: pic: level sensitive irq not supported [ 2205.973987][ T1124] kvm: pic: non byte read [ 2207.202095][ T1122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8117'. [ 2208.835948][ T1169] netlink: 'syz.2.8129': attribute type 29 has an invalid length. [ 2208.848564][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8129'. [ 2210.154575][ T1143] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 2210.681274][ T1143] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 2210.681303][ T1143] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 2210.681321][ T1143] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.681339][ T1143] usb 3-1: config 0 has no interface number 0 [ 2210.681373][ T1143] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2210.681393][ T1143] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 2210.681435][ T1143] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 2210.681455][ T1143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.683458][ T1143] usb 3-1: config 0 descriptor?? [ 2210.774054][ C0] ------------[ cut here ]------------ [ 2210.774114][ C0] ODEBUG: free active (active state 0) object: ffff88804ddd4490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 2210.774531][ C0] WARNING: CPU: 0 PID: 1192 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 2210.774569][ C0] Modules linked in: [ 2210.774621][ C0] CPU: 0 UID: 0 PID: 1192 Comm: syz.1.8135 Not tainted syzkaller #0 PREEMPT(full) [ 2210.774643][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2210.774656][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2210.774682][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 1f 60 8f fc 90 <0f> 0b 90 90 58 83 05 86 c1 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2210.774708][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286 [ 2210.774726][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 2210.774740][ C0] RDX: ffff888033ee8000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 2210.774754][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2210.774767][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163700 [ 2210.774781][ C0] R13: ffffffff8bafedc0 R14: ffffffff8a81a5e0 R15: ffffc90000007b28 [ 2210.774795][ C0] FS: 00007fab40fd56c0(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 2210.774842][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2210.774857][ C0] CR2: 0000200000008000 CR3: 0000000032b79000 CR4: 00000000003526f0 [ 2210.774870][ C0] Call Trace: [ 2210.774878][ C0] [ 2210.774886][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2210.774911][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2210.774937][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 2210.774966][ C0] ? look_up_lock_class+0x59/0x150 [ 2210.774994][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2210.775035][ C0] kfree+0x28f/0x4d0 [ 2210.775060][ C0] ? lock_acquire+0x179/0x350 [ 2210.775083][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2210.775109][ C0] rose_timer_expiry+0x53f/0x630 [ 2210.775132][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2210.775155][ C0] call_timer_fn+0x197/0x620 [ 2210.775185][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2210.775218][ C0] ? mark_held_locks+0x49/0x80 [ 2210.775242][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2210.775271][ C0] __run_timers+0x6ef/0x960 [ 2210.775304][ C0] ? __pfx___run_timers+0x10/0x10 [ 2210.775346][ C0] run_timer_base+0x114/0x190 [ 2210.775369][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2210.775400][ C0] run_timer_softirq+0x1a/0x40 [ 2210.775428][ C0] handle_softirqs+0x219/0x8e0 [ 2210.775458][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2210.775487][ C0] __irq_exit_rcu+0x109/0x170 [ 2210.775509][ C0] irq_exit_rcu+0x9/0x30 [ 2210.775554][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2210.775591][ C0] [ 2210.775612][ C0] [ 2210.775633][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2210.775656][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2210.775692][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 ee 00 f6 48 89 df e8 0e 42 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 3e f1 f5 65 8b 05 be cb 3f 08 85 c0 74 16 5b [ 2210.775722][ C0] RSP: 0018:ffffc90011ca7858 EFLAGS: 00000246 [ 2210.775751][ C0] RAX: 0000000000000002 RBX: ffff88804f38a080 RCX: 0000000000000006 [ 2210.775775][ C0] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 2210.775788][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001 [ 2210.775813][ C0] R10: ffffffff90ab6197 R11: 0000000000000000 R12: ffff88804f389ef8 [ 2210.775838][ C0] R13: ffff88804f38a0c0 R14: ffff88804f389a68 R15: ffff8880297e2000 [ 2210.775904][ C0] __unix_dgram_recvmsg+0x315/0xc30 [ 2210.775960][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2210.776034][ C0] ? iovec_from_user+0xbb/0x140 [ 2210.776073][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 2210.776108][ C0] ____sys_recvmsg+0x5f6/0x6b0 [ 2210.776163][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2210.776209][ C0] ? kfree+0x24f/0x4d0 [ 2210.776266][ C0] ___sys_recvmsg+0x114/0x1a0 [ 2210.776300][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 2210.776345][ C0] ? __pfx___might_resched+0x10/0x10 [ 2210.776388][ C0] do_recvmmsg+0x2fe/0x750 [ 2210.776424][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 2210.776455][ C0] ? trace_sched_exit_tp+0xd1/0x120 [ 2210.776503][ C0] ? __pfx___schedule+0x10/0x10 [ 2210.776522][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 2210.776566][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 2210.776601][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2210.776633][ C0] ? xfd_validate_state+0x61/0x180 [ 2210.776681][ C0] do_syscall_64+0xcd/0x4c0 [ 2210.776724][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.776756][ C0] RIP: 0033:0x7fab42d8ebe9 [ 2210.776785][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2210.776815][ C0] RSP: 002b:00007fab40fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2210.776861][ C0] RAX: ffffffffffffffda RBX: 00007fab42fc6090 RCX: 00007fab42d8ebe9 [ 2210.776885][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000008 [ 2210.776910][ C0] RBP: 00007fab42e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2210.776934][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2210.776946][ C0] R13: 00007fab42fc6128 R14: 00007fab42fc6090 R15: 00007fff0a3cde38 [ 2210.776998][ C0] [ 2210.777021][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2210.777035][ C0] CPU: 0 UID: 0 PID: 1192 Comm: syz.1.8135 Not tainted syzkaller #0 PREEMPT(full) [ 2210.777057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2210.777068][ C0] Call Trace: [ 2210.777076][ C0] [ 2210.777083][ C0] dump_stack_lvl+0x3d/0x1f0 [ 2210.777106][ C0] vpanic+0x6e8/0x7a0 [ 2210.777135][ C0] ? __pfx_vpanic+0x10/0x10 [ 2210.777169][ C0] ? debug_print_object+0x1a2/0x2b0 [ 2210.777195][ C0] panic+0xca/0xd0 [ 2210.777220][ C0] ? __pfx_panic+0x10/0x10 [ 2210.777256][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 2210.777275][ C0] check_panic_on_warn+0xab/0xb0 [ 2210.777294][ C0] __warn+0xf6/0x3c0 [ 2210.777312][ C0] ? debug_print_object+0x1a2/0x2b0 [ 2210.777339][ C0] report_bug+0x3c3/0x580 [ 2210.777358][ C0] ? debug_print_object+0x1a2/0x2b0 [ 2210.777385][ C0] handle_bug+0x184/0x210 [ 2210.777409][ C0] exc_invalid_op+0x17/0x50 [ 2210.777433][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2210.777449][ C0] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 2210.777472][ C0] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd e0 3b 16 8c 4c 89 e6 48 c7 c7 60 30 16 8c e8 1f 60 8f fc 90 <0f> 0b 90 90 58 83 05 86 c1 c0 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 2210.777490][ C0] RSP: 0018:ffffc90000007a28 EFLAGS: 00010286 [ 2210.777505][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a3388 [ 2210.777520][ C0] RDX: ffff888033ee8000 RSI: ffffffff817a3395 RDI: 0000000000000001 [ 2210.777533][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2210.777546][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8c163700 [ 2210.777559][ C0] R13: ffffffff8bafedc0 R14: ffffffff8a81a5e0 R15: ffffc90000007b28 [ 2210.777574][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2210.777604][ C0] ? __warn_printk+0x198/0x350 [ 2210.777637][ C0] ? __warn_printk+0x1a5/0x350 [ 2210.777668][ C0] ? debug_print_object+0x1a1/0x2b0 [ 2210.777696][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 2210.777717][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2210.777738][ C0] debug_check_no_obj_freed+0x4b7/0x600 [ 2210.777764][ C0] ? look_up_lock_class+0x59/0x150 [ 2210.777793][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2210.777837][ C0] kfree+0x28f/0x4d0 [ 2210.777862][ C0] ? lock_acquire+0x179/0x350 [ 2210.777889][ C0] ? rose_timer_expiry+0x53f/0x630 [ 2210.777919][ C0] rose_timer_expiry+0x53f/0x630 [ 2210.777950][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2210.777977][ C0] call_timer_fn+0x197/0x620 [ 2210.778009][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2210.778044][ C0] ? mark_held_locks+0x49/0x80 [ 2210.778073][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 2210.778103][ C0] __run_timers+0x6ef/0x960 [ 2210.778139][ C0] ? __pfx___run_timers+0x10/0x10 [ 2210.778184][ C0] run_timer_base+0x114/0x190 [ 2210.778215][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2210.778248][ C0] run_timer_softirq+0x1a/0x40 [ 2210.778276][ C0] handle_softirqs+0x219/0x8e0 [ 2210.778305][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2210.778333][ C0] __irq_exit_rcu+0x109/0x170 [ 2210.778358][ C0] irq_exit_rcu+0x9/0x30 [ 2210.778388][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2210.778413][ C0] [ 2210.778420][ C0] [ 2210.778429][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2210.778448][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 2210.778468][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 ee 00 f6 48 89 df e8 0e 42 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 e5 3e f1 f5 65 8b 05 be cb 3f 08 85 c0 74 16 5b [ 2210.778487][ C0] RSP: 0018:ffffc90011ca7858 EFLAGS: 00000246 [ 2210.778504][ C0] RAX: 0000000000000002 RBX: ffff88804f38a080 RCX: 0000000000000006 [ 2210.778517][ C0] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 2210.778531][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001 [ 2210.778543][ C0] R10: ffffffff90ab6197 R11: 0000000000000000 R12: ffff88804f389ef8 [ 2210.778557][ C0] R13: ffff88804f38a0c0 R14: ffff88804f389a68 R15: ffff8880297e2000 [ 2210.778586][ C0] __unix_dgram_recvmsg+0x315/0xc30 [ 2210.778616][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 2210.778654][ C0] ? iovec_from_user+0xbb/0x140 [ 2210.778683][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 2210.778711][ C0] ____sys_recvmsg+0x5f6/0x6b0 [ 2210.778738][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2210.778776][ C0] ? kfree+0x24f/0x4d0 [ 2210.778809][ C0] ___sys_recvmsg+0x114/0x1a0 [ 2210.778832][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 2210.778866][ C0] ? __pfx___might_resched+0x10/0x10 [ 2210.778897][ C0] do_recvmmsg+0x2fe/0x750 [ 2210.778923][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 2210.778943][ C0] ? trace_sched_exit_tp+0xd1/0x120 [ 2210.778984][ C0] ? __pfx___schedule+0x10/0x10 [ 2210.779001][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 2210.779033][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 2210.779058][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2210.779079][ C0] ? xfd_validate_state+0x61/0x180 [ 2210.779116][ C0] do_syscall_64+0xcd/0x4c0 [ 2210.779139][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.779160][ C0] RIP: 0033:0x7fab42d8ebe9 [ 2210.779175][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2210.779194][ C0] RSP: 002b:00007fab40fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2210.779214][ C0] RAX: ffffffffffffffda RBX: 00007fab42fc6090 RCX: 00007fab42d8ebe9 [ 2210.779227][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000008 [ 2210.779241][ C0] RBP: 00007fab42e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2210.779254][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2210.779266][ C0] R13: 00007fab42fc6128 R14: 00007fab42fc6090 R15: 00007fff0a3cde38 [ 2210.779292][ C0] [ 2210.779514][ C0] Kernel Offset: disabled