last executing test programs: 17.893900981s ago: executing program 0 (id=1923): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="9dd0288d8e3ad62cc5d6b9387a3e0c9962db0550212c3c6900a8babca0db1c3a8023f7aab02d46ced8a8b75bdc8e340c8a960eaa029113c31526f0b45d581f89357a424aa7c415faee7198b52dc80e3a9180e839be79e7162e2ceb1e27230de93d33b829c6a16a8a95c95e62c6c50b684542f1fbdae87610c671efa3749476fbd0c00284c32f1116688ab2904b0869d4cbe8bae92e718f6c6dda8ffa", 0x9c}, {&(0x7f00000005c0)="ba00fd8de5", 0x5}], 0x2, 0x0, 0x0, 0x604c011}], 0x1, 0x20040810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) 15.380579695s ago: executing program 0 (id=1926): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xa) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff01000000000000000002000001140000001100"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 14.748720874s ago: executing program 2 (id=1931): syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x9, 0x9, 0x43}) 14.109447924s ago: executing program 1 (id=1932): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xa) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r10, 0x0, 0x40440c4) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 12.871391371s ago: executing program 2 (id=1933): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000180)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) 12.018255045s ago: executing program 0 (id=1934): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffff"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(&(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) 10.582892627s ago: executing program 1 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00", @ANYRESOCT], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) 10.469234846s ago: executing program 2 (id=1936): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x0, 0x2, 0x8}, 0x10) sendmmsg$alg(r1, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="9dd0288d8e3ad62cc5d6b9387a3e0c9962db0550212c3c6900a8babca0db1c3a8023f7aab02d46ced8a8b75bdc8e340c8a960eaa029113c31526f0b45d581f89357a424aa7c415faee7198b52dc80e3a9180e839be79e7162e2ceb1e27230de93d33b829c6a16a8a95c95e62c6c50b684542f1fbdae87610c671efa3749476fbd0c00284c32f1116688ab2904b0869d4cbe8bae92e718f6c6dda8ffa", 0x9c}, {&(0x7f00000005c0)="ba00fd8de5", 0x5}], 0x2, 0x0, 0x0, 0x604c011}], 0x1, 0x20040810) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) 9.918267925s ago: executing program 4 (id=1938): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f545479b86389af1677ed7812f19b0014cc7170783fd6b27e63e13ff49dacb9187a8c6ac04"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.39603199s ago: executing program 4 (id=1939): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1002, 0x0, 0x13f, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r0, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) shutdown(r3, 0x1) 9.376880665s ago: executing program 2 (id=1940): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f3fd65bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e208000000729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e7095d6744756e17ece06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 8.191224908s ago: executing program 0 (id=1942): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, r2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000040)={0x3fe, 0x1, 0x0, 0x0, 0x7, 0xfffff2db}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x800, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc7", 0xb8}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x1, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$rtl8150(0x3, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 7.8336174s ago: executing program 2 (id=1943): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x300}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008047) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.536493761s ago: executing program 3 (id=1944): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008047) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 7.366374591s ago: executing program 2 (id=1945): fanotify_init(0x20, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) syz_usb_connect(0x0, 0x54, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000072389020b822972d6451010203010902420001020000000904"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = io_uring_setup(0xcce, &(0x7f0000000680)={0x0, 0x24f6, 0x2, 0x2, 0x36f}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x2, 0x1, 0xfff7fffd, 0x0, r2}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce010203010902", @ANYRESHEX, @ANYRES32, @ANYRES32=0x0], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x2}, {0x3, 0x1}, {0xb, 0x7}}, ["", "", ""]}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x5, 0x4}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r6, 0x929, 0x7) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = dup(r9) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) 7.048004606s ago: executing program 4 (id=1946): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x9, 0x9, 0x43}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) unshare(0x64000600) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a00000081"]) 6.449965051s ago: executing program 1 (id=1947): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe03, 0x48}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x1c040}, 0x48840) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.25223087s ago: executing program 3 (id=1948): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000280), 0x13f, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r0, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) shutdown(r3, 0x1) 5.554576878s ago: executing program 4 (id=1949): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r1, 0x1) 5.297977303s ago: executing program 1 (id=1950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0x9}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x49, 0xc, "1d1227950e6661b5656516f7be86af4c33422b66ff7a081498cdc06303ae3ed4f545479b86389af1677ed7812f19b0014cc7170783fd6b27e63e13ff49dacb9187a8c6ac04"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x3}]}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce", 0xb5}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.796715418s ago: executing program 1 (id=1951): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0) 4.795351403s ago: executing program 3 (id=1952): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="9dd0288d8e3ad62cc5d6b9387a3e0c9962db0550212c3c6900a8babca0db1c3a8023f7aab02d46ced8a8b75bdc8e340c8a960eaa029113c31526f0b45d581f89357a424aa7c415faee7198b52dc80e3a9180e839be79e7162e2ceb1e27230de93d33b829c6a16a8a95c95e62c6c50b684542f1fbdae87610c671efa3749476fbd0c00284c32f1116688ab2904b0869d4cbe8bae92e718f6c6dda8ffa", 0x9c}, {&(0x7f00000005c0)="ba00fd8de5", 0x5}], 0x2, 0x0, 0x0, 0x604c011}], 0x1, 0x20040810) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x4}}, 0x20) 4.78325608s ago: executing program 4 (id=1953): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000120005ff00000400040000000000004a", @ANYRES32=0x0, @ANYBLOB="452000000020000014001280090001"], 0x3c}}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) 4.660464612s ago: executing program 3 (id=1954): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x146b, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.526332036s ago: executing program 3 (id=1955): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe03, 0x48}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x1c040}, 0x48840) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.156835077s ago: executing program 0 (id=1956): ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.085414166s ago: executing program 4 (id=1957): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000280), 0x13f, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r0, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) shutdown(r3, 0x1) 977.901433ms ago: executing program 3 (id=1958): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xa) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 864.191051ms ago: executing program 1 (id=1959): gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) epoll_create(0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0xa) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_NMI(r9, 0xae9a) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 0 (id=1960): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000180)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) kernel console output (not intermixed with test programs): und, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 591.702367][ T5864] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 591.717914][ T5864] usb 5-1: Manufacturer: syz [ 591.754298][ T5864] usb 5-1: config 0 descriptor?? [ 592.783417][ T5864] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 592.890456][ T5864] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 592.901856][ T5864] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 592.915609][ T5864] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 592.924836][ T5864] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 592.970703][ T5864] usb 5-1: USB disconnect, device number 47 [ 593.604472][T10526] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 594.033108][T10526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.045726][T10526] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.083920][T10526] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 594.095695][T10526] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 594.142160][T10526] usb 4-1: Manufacturer: syz [ 594.185579][T10526] usb 4-1: config 0 descriptor?? [ 595.019683][T10526] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 595.054968][T10526] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 595.131752][T10526] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 595.148708][T10526] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 595.166685][T10526] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 595.190657][T10526] usb 4-1: USB disconnect, device number 44 [ 595.254274][T10928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.884419][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 596.701561][T10526] hid_parser_main: 18 callbacks suppressed [ 596.701581][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.052072][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.059896][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.069123][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.077010][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.084635][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.092136][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.100670][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.122485][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.161102][T10526] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 597.181454][ T5879] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 597.237598][T10526] hid-generic 00A0:0006:0003.0020: hidraw0: HID v0.05 Device [syz1] on syz0 [ 597.374477][ T5948] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 597.402010][ T5879] usb 5-1: config 0 has no interfaces? [ 597.412552][ T5879] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 597.434127][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.463366][ T5879] usb 5-1: config 0 descriptor?? [ 597.565496][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 597.895505][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.924440][ T5948] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 597.933518][ T5948] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 597.941857][ T5948] usb 1-1: Manufacturer: syz [ 597.965066][ T5948] usb 1-1: config 0 descriptor?? [ 598.247669][T10526] usb 1-1: USB disconnect, device number 52 [ 600.039827][ T5872] usb 5-1: USB disconnect, device number 48 [ 602.770391][T11065] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 602.770391][T11065] program syz.1.1139 not setting count and/or reply_len properly [ 603.324420][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 606.344522][ T5944] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 606.354455][ T5879] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 606.534813][ T5944] usb 4-1: Using ep0 maxpacket: 32 [ 606.722450][ T5944] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 606.744839][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 606.775988][ T5879] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.778881][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.056377][ T5864] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 607.061649][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.247907][ T5944] usb 4-1: config 0 descriptor?? [ 607.249074][ T5879] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 607.272305][ T5879] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 607.303735][ T5879] usb 2-1: Manufacturer: syz [ 607.316100][ T5879] usb 2-1: config 0 descriptor?? [ 607.342269][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.378697][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.400273][ T5864] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 607.415305][ T5864] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 607.426831][ T5864] usb 3-1: Manufacturer: syz [ 607.435445][ T5864] usb 3-1: config 0 descriptor?? [ 607.554877][ T5944] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 607.751214][ T5948] usb 2-1: USB disconnect, device number 40 [ 607.781125][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.396848][ T5944] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 608.404165][ T5944] usb 4-1: media controller created [ 608.518301][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.604276][ T5864] uclogic 0003:256C:006D.0021: failed retrieving Huion firmware version: -71 [ 608.623708][ T5864] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 608.636224][ T5864] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71 [ 608.678950][ T5864] usb 3-1: USB disconnect, device number 57 [ 608.692713][ T5944] az6027: usb out operation failed. (-71) [ 608.734758][ T5944] az6027: usb out operation failed. (-71) [ 608.750360][ T5944] stb0899_attach: Driver disabled by Kconfig [ 608.764774][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 608.770972][ T5944] az6027: no front-end attached [ 608.770972][ T5944] [ 608.857472][ T5944] az6027: usb out operation failed. (-71) [ 608.863428][ T5944] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 608.976960][ T5944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 609.009716][ T5944] dvb-usb: schedule remote query interval to 400 msecs. [ 609.021375][ T5944] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 609.273242][T11130] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 609.273242][T11130] program syz.1.1156 not setting count and/or reply_len properly [ 609.760322][ T5944] usb 4-1: USB disconnect, device number 45 [ 609.791068][T11132] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1157'. [ 609.973716][ T5944] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 610.069967][ T5872] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 610.354825][ T5944] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 610.446387][ T5872] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 610.456486][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 610.466546][ T5872] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 610.475717][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 610.494038][ T5872] usb 3-1: Product: syz [ 610.498944][ T5872] usb 3-1: Manufacturer: syz [ 610.503738][ T5872] usb 3-1: SerialNumber: syz [ 610.516149][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.519635][ T5872] usb 3-1: config 0 descriptor?? [ 610.537428][ T5872] usb 3-1: selecting invalid altsetting 0 [ 610.564566][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.734729][ T5944] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 610.754092][ T5944] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 610.917185][ T5944] usb 4-1: Manufacturer: syz [ 610.986754][ T5872] usb 3-1: USB disconnect, device number 58 [ 611.085495][ T5944] usb 4-1: config 0 descriptor?? [ 612.387086][ T5944] uclogic 0003:256C:006D.0022: failed retrieving Huion firmware version: -71 [ 612.425538][ T5944] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 612.537648][T11142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.547571][ T5944] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 612.717120][ T5944] usb 4-1: USB disconnect, device number 46 [ 613.241194][T11152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.268723][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 615.514457][T10526] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 615.735794][T10526] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 615.746683][T10526] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 615.782704][T10526] usb 5-1: config 220 has no interface number 2 [ 615.859037][T10526] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 615.974234][T10526] usb 5-1: config 220 interface 0 has no altsetting 0 [ 616.003171][T10526] usb 5-1: config 220 interface 76 has no altsetting 0 [ 616.021867][T10526] usb 5-1: config 220 interface 1 has no altsetting 0 [ 616.327582][T10526] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 616.359060][T10526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.377984][T10526] usb 5-1: Product: syz [ 616.384955][T10526] usb 5-1: Manufacturer: syz [ 616.389809][T10526] usb 5-1: SerialNumber: syz [ 616.405494][ T30] audit: type=1400 audit(1761233690.460:318): avc: denied { name_bind } for pid=11202 comm="syz.2.1172" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 616.573443][ T30] audit: type=1400 audit(1761233690.620:319): avc: denied { append } for pid=11202 comm="syz.2.1172" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 617.518689][T10526] usb 5-1: selecting invalid altsetting 0 [ 617.599680][T10526] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 617.600757][T11209] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1173'. [ 617.785510][T10526] uvcvideo 5-1:220.0: No valid video chain found. [ 617.867266][T10526] usb 5-1: selecting invalid altsetting 0 [ 617.874576][T10526] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 617.924430][ T5865] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 617.937373][T10526] usb 5-1: USB disconnect, device number 49 [ 618.197436][ T5865] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 618.788405][ T5865] usb 1-1: config 0 interface 0 has no altsetting 0 [ 618.810380][ T5864] hid_parser_main: 4 callbacks suppressed [ 618.810401][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 618.831491][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 618.848661][ T5865] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 619.005307][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.012763][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.043567][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 619.064388][ T5865] usb 1-1: Product: syz [ 619.068612][ T5865] usb 1-1: Manufacturer: syz [ 619.141652][ T5944] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 619.149740][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.254690][ T5865] usb 1-1: SerialNumber: syz [ 619.260001][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.274461][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.284461][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.294221][ T5865] usb 1-1: config 0 descriptor?? [ 619.304634][ T5813] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 619.318965][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.344512][ T5865] usb 1-1: selecting invalid altsetting 0 [ 619.360487][ T5864] hid-generic 00A0:0006:0003.0023: unknown main item tag 0x0 [ 619.390523][ T5864] hid-generic 00A0:0006:0003.0023: hidraw0: HID v0.05 Device [syz1] on syz0 [ 619.519886][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.540969][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.584220][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.609174][ T5865] usb 1-1: USB disconnect, device number 53 [ 619.720546][ T5813] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 619.741644][ T5813] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 619.914406][ T5813] usb 3-1: Manufacturer: syz [ 619.927982][ T5944] usb 4-1: no configurations [ 619.933146][ T5944] usb 4-1: can't read configurations, error -22 [ 619.933895][ T5813] usb 3-1: config 0 descriptor?? [ 620.084437][ T5944] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 620.248753][ T5944] usb 4-1: no configurations [ 620.266114][ T5944] usb 4-1: can't read configurations, error -22 [ 620.280550][ T5944] usb usb4-port1: attempt power cycle [ 620.457398][ T5813] usbhid 3-1:0.0: can't add hid device: -71 [ 620.470378][ T5813] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 620.654428][ T5944] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 620.686279][ T5944] usb 4-1: no configurations [ 620.690973][ T5944] usb 4-1: can't read configurations, error -22 [ 620.776672][ T5813] usb 3-1: USB disconnect, device number 59 [ 620.825113][ T5944] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 620.866443][ T5944] usb 4-1: no configurations [ 620.871069][ T5944] usb 4-1: can't read configurations, error -22 [ 620.914640][ T5944] usb usb4-port1: unable to enumerate USB device [ 621.273800][T11249] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1182'. [ 621.514461][T11246] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1183'. [ 621.639936][ T5813] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 622.135140][ T5813] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 622.174469][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.237649][ T5813] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 622.334417][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 622.438404][ T5813] usb 3-1: Product: syz [ 622.442740][ T5813] usb 3-1: Manufacturer: syz [ 622.452983][ T5813] usb 3-1: SerialNumber: syz [ 622.489851][ T5813] usb 3-1: config 0 descriptor?? [ 622.502891][ T5813] usb 3-1: selecting invalid altsetting 0 [ 623.103859][T10526] usb 3-1: USB disconnect, device number 60 [ 623.928018][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.934981][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.284416][ T5872] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 627.487791][ T5813] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 627.509118][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.534457][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.564071][ T5872] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 627.734990][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 628.370265][ T5872] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 628.582422][ T5872] usb 3-1: Manufacturer: syz [ 628.597959][ T5813] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 628.614665][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.626524][ T5872] usb 3-1: config 0 descriptor?? [ 628.642547][ T5813] usb 1-1: config 0 descriptor?? [ 628.868417][ T5813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 628.981816][T11302] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1196'. [ 629.011450][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 629.047203][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 629.059334][ T5813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 629.067212][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 629.084476][ T5813] usb 1-1: media controller created [ 629.093670][ T5872] usb 3-1: USB disconnect, device number 61 [ 629.126968][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.199339][ T5813] az6027: usb out operation failed. (-71) [ 629.286842][ T5813] az6027: usb out operation failed. (-71) [ 629.311626][ T5813] stb0899_attach: Driver disabled by Kconfig [ 629.339249][ T5813] az6027: no front-end attached [ 629.339249][ T5813] [ 629.398773][ T5813] az6027: usb out operation failed. (-71) [ 629.607680][ T5864] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 629.718569][ T5813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 629.746274][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 629.795202][ T5813] dvb-usb: schedule remote query interval to 400 msecs. [ 629.814438][ T5813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 629.837435][ T5813] usb 1-1: USB disconnect, device number 54 [ 629.845007][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 629.892429][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.949706][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.295393][ T5864] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.310970][ T5864] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.321077][ T5864] usb 4-1: Manufacturer: syz [ 630.348668][T11307] syzkaller0: entered promiscuous mode [ 630.355188][ T5864] usb 4-1: config 0 descriptor?? [ 630.392384][T11307] syzkaller0: entered allmulticast mode [ 630.413998][T11307] syzkaller0: tun_net_xmit 1280 [ 630.419026][T11307] syzkaller0: create flow: hash 2369668310 index 1 [ 630.552892][ T5813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 631.147294][ T5872] usb 4-1: USB disconnect, device number 51 [ 631.171523][T11306] syzkaller0: delete flow: hash 2369668310 index 1 [ 632.121429][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1203'. [ 632.204919][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 633.477542][T11337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.802659][T11356] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 635.898557][T11356] overlayfs: missing 'lowerdir' [ 638.264630][T11388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1219'. [ 640.207399][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 640.440783][T11401] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 640.560825][T11401] overlayfs: missing 'lowerdir' [ 641.004460][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 642.550608][T11415] tipc: Enabled bearer , priority 0 [ 642.619153][T11415] syzkaller0: entered promiscuous mode [ 642.647495][T11415] syzkaller0: entered allmulticast mode [ 642.713197][T11420] tipc: Resetting bearer [ 643.796162][ T5864] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 644.088496][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 644.098967][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.168833][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.285941][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 644.342524][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.575104][ T5864] usb 4-1: config 0 descriptor?? [ 645.246192][ T5864] usbhid 4-1:0.0: can't add hid device: -71 [ 645.252233][ T5864] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 645.792151][ T5864] usb 4-1: USB disconnect, device number 52 [ 645.805211][T11414] tipc: Resetting bearer [ 645.866181][T11414] tipc: Disabling bearer [ 647.712822][T11469] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1237'. [ 647.974398][ T5864] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 648.408536][ T5864] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 648.426998][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 648.440703][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 648.454391][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 648.473622][ T5864] usb 2-1: Product: syz [ 648.483654][ T5864] usb 2-1: Manufacturer: syz [ 648.493897][ T5864] usb 2-1: SerialNumber: syz [ 648.514456][ T5864] usb 2-1: config 0 descriptor?? [ 648.530970][ T5864] usb 2-1: selecting invalid altsetting 0 [ 649.010883][ T5813] usb 2-1: USB disconnect, device number 41 [ 649.549224][T11507] /dev/nullb0: Can't open blockdev [ 649.814627][ T5864] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 650.074478][ T5864] usb 1-1: device descriptor read/64, error -71 [ 650.315051][ T5864] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 650.474419][ T5864] usb 1-1: device descriptor read/64, error -71 [ 650.755086][ T5864] usb usb1-port1: attempt power cycle [ 651.598828][ T5864] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 652.599293][ T5864] usb 1-1: device descriptor read/8, error -71 [ 655.966730][T11552] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 656.145535][T11552] overlayfs: missing 'lowerdir' [ 656.310116][T11565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1262'. [ 657.204394][ T5813] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 658.330971][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 658.385981][ T5813] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 658.395721][ T5813] usb 1-1: config 0 has no interface number 0 [ 658.414896][ T5813] usb 1-1: config 0 interface 184 has no altsetting 0 [ 658.426306][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 658.436484][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.454898][ T5813] usb 1-1: Product: syz [ 658.473235][ T5813] usb 1-1: Manufacturer: syz [ 658.498878][ T5813] usb 1-1: SerialNumber: syz [ 658.511937][ T5813] usb 1-1: config 0 descriptor?? [ 658.524556][ T5813] smsc75xx v1.0.0 [ 658.713435][ T5865] hid_parser_main: 4 callbacks suppressed [ 658.713455][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.733131][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.741191][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.753109][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.761577][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.774560][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 658.776022][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.790997][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.801382][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.811648][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.839998][T11587] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 658.842221][ T5865] hid-generic 00A0:0006:0003.0024: unknown main item tag 0x0 [ 658.900364][T11587] overlayfs: missing 'lowerdir' [ 659.092258][ T5865] hid-generic 00A0:0006:0003.0024: hidraw0: HID v0.05 Device [syz1] on syz0 [ 659.114431][ T5864] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 659.227207][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 659.269524][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 659.552881][ T5864] usb 2-1: config 0 has no interfaces? [ 659.565893][ T5864] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 659.867203][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 659.880138][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 660.429347][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.502213][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 660.520471][ T5864] usb 2-1: config 0 descriptor?? [ 660.531689][ T5813] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 660.668268][ T5813] usb 1-1: USB disconnect, device number 59 [ 663.566009][ T5864] usb 2-1: USB disconnect, device number 42 [ 664.649700][T11629] /dev/nullb0: Can't open blockdev [ 665.034472][ T5813] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 665.179375][ T5813] usb 5-1: device descriptor read/64, error -71 [ 665.496046][ T5813] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 665.634385][ T5813] usb 5-1: device descriptor read/64, error -71 [ 665.724377][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 665.744695][ T5813] usb usb5-port1: attempt power cycle [ 666.094382][ T5813] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 666.125198][ T5813] usb 5-1: device descriptor read/8, error -71 [ 666.406734][ T5813] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 666.435073][ T5813] usb 5-1: device descriptor read/8, error -71 [ 666.554501][ T5813] usb usb5-port1: unable to enumerate USB device [ 666.893769][T11651] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1283'. [ 667.962771][T11670] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 668.122037][T11670] overlayfs: missing 'lowerdir' [ 668.697700][T11674] /dev/nullb0: Can't open blockdev [ 668.964427][T10526] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 669.104459][T10526] usb 3-1: device descriptor read/64, error -71 [ 670.314262][T10526] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 670.469351][T10526] usb 3-1: device descriptor read/64, error -71 [ 670.653768][T10526] usb usb3-port1: attempt power cycle [ 673.734683][ T5879] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 673.910020][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 673.922456][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.941031][ T5879] usb 4-1: Product: syz [ 673.950818][ T5879] usb 4-1: Manufacturer: syz [ 673.959120][ T5879] usb 4-1: SerialNumber: syz [ 673.974704][ T5879] usb 4-1: config 0 descriptor?? [ 674.207355][ T5879] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 675.837859][T11740] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1304'. [ 676.266709][ T5879] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 676.278279][ T5879] usb 4-1: USB disconnect, device number 53 [ 677.724417][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 678.550776][T11762] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1311'. [ 679.560329][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1315'. [ 679.966830][ T5879] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 680.130042][ T5879] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 681.074390][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 681.097152][ T5879] usb 4-1: string descriptor 0 read error: -71 [ 681.104565][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 681.113882][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 681.330893][ T5879] usb 4-1: config 0 descriptor?? [ 681.348383][ T5879] usb 4-1: can't set config #0, error -71 [ 681.876008][ T5879] usb 4-1: USB disconnect, device number 54 [ 682.740801][ T5872] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 682.909121][ T5872] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 682.921499][ T5872] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 682.933536][ T5872] usb 1-1: config 220 has no interface number 2 [ 682.940158][ T5872] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 682.953710][ T5872] usb 1-1: config 220 interface 0 has no altsetting 0 [ 682.962392][ T5872] usb 1-1: config 220 interface 76 has no altsetting 0 [ 682.970293][ T5872] usb 1-1: config 220 interface 1 has no altsetting 0 [ 684.253623][ T5872] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 684.264472][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.275882][ T5872] usb 1-1: Product: syz [ 684.283966][ T5872] usb 1-1: Manufacturer: syz [ 684.297708][ T5872] usb 1-1: SerialNumber: syz [ 684.302797][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1327'. [ 685.174495][ T5872] usb 1-1: selecting invalid altsetting 0 [ 685.354026][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.354861][ T5872] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 685.371185][ T5872] uvcvideo 1-1:220.0: No valid video chain found. [ 685.375156][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.385118][ T5872] usb 1-1: selecting invalid altsetting 0 [ 685.391928][ T5872] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 685.579256][ T5872] usb 1-1: USB disconnect, device number 60 [ 686.848566][ T30] audit: type=1400 audit(1761233760.890:320): avc: denied { firmware_load } for pid=11829 comm="syz.4.1333" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 687.328469][T11832] syz.4.1333 (11832) used greatest stack depth: 17928 bytes left [ 687.449356][ T5879] hid_parser_main: 4 callbacks suppressed [ 687.449375][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.469329][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.477289][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.485905][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.493911][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.502870][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.512011][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.544510][ T5872] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 687.617107][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 687.746273][ T5813] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 687.797924][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 688.026880][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 688.079341][ T5872] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 688.131191][ T5879] hid-generic 00A0:0006:0003.0025: unknown main item tag 0x0 [ 688.208205][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.482534][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 688.492286][ T5879] hid-generic 00A0:0006:0003.0025: hidraw0: HID v0.05 Device [syz1] on syz0 [ 688.515231][ T5813] usb 3-1: config 0 has no interfaces? [ 688.520729][ T5813] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 688.601484][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.632571][ T5872] usb 1-1: config 0 descriptor?? [ 689.625201][ T5813] usb 3-1: config 0 descriptor?? [ 690.012013][ T5872] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 690.490567][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.519858][ T5872] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 690.560127][ T43] usb 3-1: USB disconnect, device number 65 [ 690.568410][ T5872] usb 1-1: media controller created [ 690.774151][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.290924][ T5872] az6027: usb out operation failed. (-71) [ 691.305396][ T5872] az6027: usb out operation failed. (-71) [ 691.313200][T11869] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1341'. [ 691.426098][ T5872] stb0899_attach: Driver disabled by Kconfig [ 691.544690][ T5872] az6027: no front-end attached [ 691.544690][ T5872] [ 691.563327][ T5872] az6027: usb out operation failed. (-71) [ 691.572654][ T5872] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 691.595214][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 692.349509][ T5872] dvb-usb: schedule remote query interval to 400 msecs. [ 692.376917][ T5872] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 692.604155][ T5872] usb 1-1: USB disconnect, device number 61 [ 693.726195][ T5872] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 694.136334][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1351'. [ 695.395643][T11911] tipc: Enabled bearer , priority 0 [ 695.396174][T11911] syzkaller0: entered promiscuous mode [ 695.396187][T11911] syzkaller0: entered allmulticast mode [ 695.400404][T11911] tipc: Resetting bearer [ 695.714357][ T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 696.294352][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 696.300769][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.320863][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.349990][ T43] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 696.372453][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.454135][ T43] usb 5-1: config 0 descriptor?? [ 697.408500][T11910] tipc: Resetting bearer [ 697.453257][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 697.460395][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 697.472703][ T43] usb 5-1: USB disconnect, device number 54 [ 697.495081][T11910] tipc: Disabling bearer [ 697.514773][ T5944] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 697.814062][ T5944] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 698.040104][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 698.052390][ T5944] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 698.061952][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 698.071384][ T5944] usb 4-1: Product: syz [ 698.076703][ T5944] usb 4-1: Manufacturer: syz [ 698.081548][ T5944] usb 4-1: SerialNumber: syz [ 698.093696][ T5944] usb 4-1: config 0 descriptor?? [ 698.247445][ T5944] usb 4-1: selecting invalid altsetting 0 [ 698.378768][ T5944] usb 4-1: USB disconnect, device number 55 [ 699.118983][ T9441] udevd[9441]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.524438][ T5922] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 700.648239][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1372'. [ 700.674356][ T5922] usb 1-1: device descriptor read/64, error -71 [ 701.125194][ T5922] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 701.275374][ T5922] usb 1-1: device descriptor read/64, error -71 [ 701.433189][ T5922] usb usb1-port1: attempt power cycle [ 702.028181][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 702.037334][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 703.179303][ T5922] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 703.331652][T12032] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1381'. [ 703.423319][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.471914][ T5922] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 703.562144][ T5922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 703.610326][ T5922] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 703.631915][ T5922] usb 1-1: Manufacturer: syz [ 703.643665][ T5922] usb 1-1: config 0 descriptor?? [ 705.251718][T12052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1386'. [ 705.970364][ T5872] usb 1-1: USB disconnect, device number 64 [ 706.824397][ T5944] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 707.455576][ T5944] usb 2-1: device descriptor read/64, error -71 [ 708.203189][ T5944] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 710.795098][ T5944] usb 2-1: device descriptor read/64, error -71 [ 710.831406][T12091] syzkaller0: entered promiscuous mode [ 710.904755][ T5944] usb usb2-port1: attempt power cycle [ 710.938892][T12091] syzkaller0: entered allmulticast mode [ 711.067198][ T1154] syzkaller0: tun_net_xmit 48 [ 711.122118][T12095] syzkaller0: tun_net_xmit 1280 [ 711.158034][T12095] syzkaller0: create flow: hash 2369668310 index 1 [ 711.294728][T12090] syzkaller0: delete flow: hash 2369668310 index 1 [ 712.534629][ T5864] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 712.694470][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 712.701155][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.712439][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.723151][ T5864] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 712.732530][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.743631][ T5864] usb 2-1: config 0 descriptor?? [ 713.309651][T12103] tipc: Enabled bearer , priority 0 [ 713.317423][T12107] syzkaller0: entered promiscuous mode [ 713.409737][T12107] syzkaller0: entered allmulticast mode [ 713.588235][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 713.603480][T12102] tipc: Resetting bearer [ 713.625827][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 714.128029][ T5864] usb 2-1: USB disconnect, device number 46 [ 714.497888][T12102] tipc: Disabling bearer [ 716.407170][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 716.457376][ T5872] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 716.735579][ T5872] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 716.744961][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.752968][ T5872] usb 4-1: Product: syz [ 716.777825][ T5872] usb 4-1: Manufacturer: syz [ 716.782894][ T5872] usb 4-1: SerialNumber: syz [ 716.802961][ T5872] usb 4-1: config 0 descriptor?? [ 716.824669][ T5864] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 716.954459][ T5864] usb 1-1: device descriptor read/64, error -71 [ 716.972716][T12161] syzkaller0: entered promiscuous mode [ 716.978472][T12161] syzkaller0: entered allmulticast mode [ 716.994342][ T43] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 717.022114][ T5872] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 717.176970][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 717.186572][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.194722][ T5864] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 717.202395][ T43] usb 5-1: Product: syz [ 717.206718][ T43] usb 5-1: Manufacturer: syz [ 717.211464][ T43] usb 5-1: SerialNumber: syz [ 717.222832][ T43] usb 5-1: config 0 descriptor?? [ 717.356359][ T5864] usb 1-1: device descriptor read/64, error -71 [ 717.440536][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 717.494782][ T5864] usb usb1-port1: attempt power cycle [ 717.836436][ T5864] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 717.875116][ T5864] usb 1-1: device descriptor read/8, error -71 [ 718.134417][ T5864] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 718.155532][ T5864] usb 1-1: device descriptor read/8, error -71 [ 718.275855][ T5864] usb usb1-port1: unable to enumerate USB device [ 718.596758][ T5872] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 718.624063][ T5872] usb 4-1: USB disconnect, device number 56 [ 719.005526][ T43] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 719.024884][ T43] usb 5-1: USB disconnect, device number 55 [ 720.330379][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 720.783245][T12194] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 720.796584][T12194] overlayfs: missing 'lowerdir' [ 720.864359][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 720.870849][ T43] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 720.916349][ T43] usb 4-1: config 0 has no interface number 0 [ 720.922718][ T43] usb 4-1: config 0 interface 184 has no altsetting 0 [ 720.939498][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 720.950829][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.959554][ T43] usb 4-1: Product: syz [ 720.964024][ T43] usb 4-1: Manufacturer: syz [ 720.968927][ T43] usb 4-1: SerialNumber: syz [ 720.985099][ T43] usb 4-1: config 0 descriptor?? [ 720.998185][ T43] smsc75xx v1.0.0 [ 722.494772][ T5879] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 722.577163][T12217] overlayfs: missing 'lowerdir' [ 722.653861][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 722.661386][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 722.665019][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 722.675128][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.684862][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 722.692196][ T5879] usb 5-1: Product: syz [ 722.703284][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 722.709878][ T5879] usb 5-1: Manufacturer: syz [ 722.717785][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 722.722220][ T5879] usb 5-1: SerialNumber: syz [ 722.739783][ T43] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 722.761514][ T5879] usb 5-1: config 0 descriptor?? [ 722.811954][ T43] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 722.828736][ T43] usb 4-1: USB disconnect, device number 57 [ 722.976723][ T5879] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 723.244510][ T5948] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 723.450152][ T5948] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 723.475388][ T5948] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 723.511996][ T5948] usb 2-1: config 220 has no interface number 2 [ 723.520132][ T5948] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 723.543430][ T5948] usb 2-1: config 220 interface 0 has no altsetting 0 [ 723.565677][ T5948] usb 2-1: config 220 interface 76 has no altsetting 0 [ 723.574592][ T5948] usb 2-1: config 220 interface 1 has no altsetting 0 [ 723.584190][ T5948] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 723.593694][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.601975][ T5948] usb 2-1: Product: syz [ 723.607053][ T5948] usb 2-1: Manufacturer: syz [ 723.612930][ T5948] usb 2-1: SerialNumber: syz [ 723.917907][T12239] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 723.988413][T12239] overlayfs: missing 'lowerdir' [ 724.374703][ T5948] usb 2-1: selecting invalid altsetting 0 [ 724.394445][ T5948] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 724.416853][ T5948] uvcvideo 2-1:220.0: No valid video chain found. [ 724.447245][ T5948] usb 2-1: selecting invalid altsetting 0 [ 724.453010][ T5948] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 724.477384][ T5948] usb 2-1: USB disconnect, device number 47 [ 724.582652][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 724.632892][ T5879] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 724.653607][ T5879] usb 5-1: USB disconnect, device number 56 [ 725.512725][ T5948] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 725.684913][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 725.826171][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.075142][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.101232][ T5948] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 726.113856][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.184970][ T5948] usb 1-1: config 0 descriptor?? [ 726.305270][T12278] syzkaller0: entered promiscuous mode [ 726.310819][T12278] syzkaller0: entered allmulticast mode [ 726.464744][ T5813] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 726.715540][ T5948] hid_parser_main: 4 callbacks suppressed [ 726.715564][ T5948] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 726.742647][ T5948] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 726.754333][ T5948] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 726.784890][ T5948] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 726.791733][ T5948] savu 0003:1E7D:2D5A.0026: unknown main item tag 0x0 [ 726.823348][ T5948] savu 0003:1E7D:2D5A.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 727.079947][ T5813] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 727.227750][ T5948] usb 1-1: USB disconnect, device number 69 [ 727.476813][T12293] fido_id[12293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 727.564365][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 727.786589][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 727.798813][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 727.809039][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 727.819134][ T5813] usb 4-1: Product: syz [ 727.824014][ T5813] usb 4-1: Manufacturer: syz [ 727.830529][ T5813] usb 4-1: SerialNumber: syz [ 727.838081][ T5813] usb 4-1: config 0 descriptor?? [ 727.844385][ T5948] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 727.847903][ T5813] usb 4-1: selecting invalid altsetting 0 [ 728.007975][ T5948] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 728.034438][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 728.046806][ T5948] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 728.056369][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 728.065199][ T5948] usb 5-1: Product: syz [ 728.069660][ T5948] usb 5-1: Manufacturer: syz [ 728.078856][ T5948] usb 5-1: SerialNumber: syz [ 728.102377][ T5948] usb 5-1: config 0 descriptor?? [ 728.116425][ T5948] usb 5-1: selecting invalid altsetting 0 [ 728.119403][ T5813] usb 4-1: USB disconnect, device number 58 [ 728.267190][T12305] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1454'. [ 729.374787][ T5872] usb 5-1: USB disconnect, device number 57 [ 731.225996][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 732.994494][T12351] syzkaller0: entered promiscuous mode [ 733.006258][T12351] syzkaller0: entered allmulticast mode [ 733.770961][T12358] kvm: pic: non byte write [ 734.532641][T12385] fuse: Bad value for 'fd' [ 737.556834][T12371] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 737.566540][ T5813] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 737.655303][T12371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 737.704393][T12371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 737.811316][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 737.817753][ T5813] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 737.828353][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.859111][ T5813] usb 1-1: config 0 descriptor?? [ 738.246346][ T5813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 738.402407][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 738.432202][ T5813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 738.495539][ T5879] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 738.542364][ T5813] usb 1-1: media controller created [ 738.653672][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.698123][ T5813] az6027: usb out operation failed. (-71) [ 738.721191][ T5813] az6027: usb out operation failed. (-71) [ 738.729982][ T5813] stb0899_attach: Driver disabled by Kconfig [ 738.737577][ T5879] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 738.747893][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 738.755270][ T5813] az6027: no front-end attached [ 738.755270][ T5813] [ 738.764346][ T5813] az6027: usb out operation failed. (-71) [ 738.770056][ T5813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 738.778776][ T5879] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.789165][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.819565][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 738.834278][ T5879] usb 4-1: Product: syz [ 738.842117][ T5879] usb 4-1: Manufacturer: syz [ 738.853450][ T5879] usb 4-1: SerialNumber: syz [ 738.911740][ T5813] dvb-usb: schedule remote query interval to 400 msecs. [ 738.931020][ T5879] usb 4-1: config 0 descriptor?? [ 738.939877][ T5813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 738.956057][ T5879] usb 4-1: selecting invalid altsetting 0 [ 738.987502][ T5813] usb 1-1: USB disconnect, device number 70 [ 739.122873][ T5813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 739.202540][ T5948] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 739.324500][T12459] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1485'. [ 739.340122][ T5944] usb 4-1: USB disconnect, device number 59 [ 739.462752][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 739.471949][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 739.478874][ T5948] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 739.534686][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.581878][ T5948] usb 5-1: config 0 descriptor?? [ 740.111588][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 740.118394][ T5948] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 740.121274][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 740.267054][ T5948] usb 5-1: USB disconnect, device number 58 [ 740.517474][T12471] syzkaller0: entered promiscuous mode [ 740.533171][T12471] syzkaller0: entered allmulticast mode [ 740.590018][T12471] syzkaller0: create flow: hash 534119493 index 1 [ 740.634115][T12469] syzkaller0: delete flow: hash 534119493 index 1 [ 740.664422][ T5944] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 740.850390][ T5944] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 740.863727][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 740.874551][ T5944] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 740.883881][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 740.905022][ T5944] usb 4-1: Product: syz [ 740.909324][ T5944] usb 4-1: Manufacturer: syz [ 740.914008][ T5944] usb 4-1: SerialNumber: syz [ 740.970108][ T5944] usb 4-1: config 0 descriptor?? [ 740.984178][ T5944] usb 4-1: selecting invalid altsetting 0 [ 741.329186][ T5944] usb 4-1: USB disconnect, device number 60 [ 742.644327][ T5922] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 742.807109][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 742.828021][ T5922] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 742.838851][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.896858][ T5922] usb 4-1: config 0 descriptor?? [ 743.164468][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 743.246034][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.312295][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 743.470072][ T5922] usb 4-1: media controller created [ 743.501363][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.556894][ T5922] az6027: usb out operation failed. (-71) [ 743.567327][ T5922] az6027: usb out operation failed. (-71) [ 743.573103][ T5922] stb0899_attach: Driver disabled by Kconfig [ 743.580156][ T5922] az6027: no front-end attached [ 743.580156][ T5922] [ 743.601993][ T5922] az6027: usb out operation failed. (-71) [ 743.609030][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 743.647150][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 743.672982][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 743.680057][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 743.720977][ T5922] usb 4-1: USB disconnect, device number 61 [ 743.901462][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 744.933494][T12489] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 744.943584][T12489] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 744.956077][T12489] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 749.866742][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.875208][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.898493][ T5922] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 752.159533][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.173664][ T5922] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 752.305995][T12535] tipc: Enabled bearer , priority 0 [ 752.318237][T12535] tipc: Resetting bearer [ 752.322784][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.405515][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 752.430109][T12543] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 752.430109][T12543] program syz.4.1509 not setting count and/or reply_len properly [ 752.746333][ T5922] usb 2-1: config 0 descriptor?? [ 752.756533][ T5922] pwc: Askey VC010 type 2 USB webcam detected. [ 752.907174][ T5922] pwc: send_video_command error -71 [ 752.920634][ T5922] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 752.954648][ T5922] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 753.106208][ T5922] usb 2-1: USB disconnect, device number 48 [ 753.117821][ T5948] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 753.374495][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 753.599753][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.626399][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.646854][ T5948] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 753.656191][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.688301][ T5948] usb 3-1: config 0 descriptor?? [ 754.547461][ T5948] usbhid 3-1:0.0: can't add hid device: -71 [ 754.553978][ T5948] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 754.565105][ T5948] usb 3-1: USB disconnect, device number 66 [ 754.582979][T12533] tipc: Disabling bearer [ 754.915681][ T5879] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 755.717628][ T5879] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 756.106494][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.158086][ T5879] usb 1-1: Product: syz [ 756.162303][ T5879] usb 1-1: Manufacturer: syz [ 756.189709][ T5879] usb 1-1: SerialNumber: syz [ 756.247208][ T5879] usb 1-1: config 0 descriptor?? [ 756.466388][ T5879] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 756.871139][ T5948] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 756.953069][T12603] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 756.973024][T12603] overlayfs: missing 'lowerdir' [ 757.020206][ T43] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 757.045709][ T5948] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 757.056455][ T5948] usb 2-1: config 0 interface 0 has no altsetting 0 [ 757.067598][ T5948] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 757.077164][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 757.085528][ T5948] usb 2-1: Product: syz [ 757.089992][ T5948] usb 2-1: Manufacturer: syz [ 757.095089][ T5948] usb 2-1: SerialNumber: syz [ 757.101730][ T5948] usb 2-1: config 0 descriptor?? [ 757.175882][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.188730][ T5948] usb 2-1: selecting invalid altsetting 0 [ 757.217626][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 757.255814][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.285137][ T43] usb 3-1: config 0 descriptor?? [ 757.302226][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 757.446911][ T5948] usb 2-1: USB disconnect, device number 49 [ 757.717603][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 757.756716][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 757.772221][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 757.782563][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 757.792865][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 757.894328][ T5872] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 758.003718][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 758.010603][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 758.017603][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 758.025140][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 758.031909][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 758.039365][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 758.039937][ T5879] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 758.047685][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 758.065924][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 758.072982][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 758.081880][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 758.100074][ T43] pwc: Registered as video103. [ 758.107953][ T5879] usb 1-1: USB disconnect, device number 71 [ 758.177483][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.196950][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 758.223443][ T5872] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 758.242223][ T43] usb 3-1: USB disconnect, device number 67 [ 758.259022][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.287993][ T5872] usb 5-1: config 0 descriptor?? [ 758.305915][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 758.782203][T12624] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 758.886329][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 758.894265][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 758.975517][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 758.995427][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 759.003569][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 759.980410][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 760.355516][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 760.400117][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 760.423122][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 760.434668][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 760.449338][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 760.642806][T12650] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1533'. [ 760.652939][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 760.654907][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 761.135154][T12652] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1532'. [ 761.153125][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 761.164711][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 761.182426][ T5872] pwc: Registered as video103. [ 761.191861][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21 [ 761.232178][ T5872] usb 5-1: USB disconnect, device number 59 [ 761.517384][ T30] audit: type=1400 audit(1761233835.570:321): avc: denied { setopt } for pid=12656 comm="syz.2.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 764.554330][ T43] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 765.064285][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 765.616545][ T43] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 765.632540][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.664012][ T43] usb 3-1: config 0 descriptor?? [ 767.872380][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 767.891089][ T43] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 767.914258][ T43] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 767.933564][T12717] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 768.028115][T12717] overlayfs: missing 'lowerdir' [ 768.192623][T12718] syzkaller0: entered promiscuous mode [ 768.885555][T12718] syzkaller0: entered allmulticast mode [ 768.988146][ T50] syzkaller0: tun_net_xmit 48 [ 771.662874][T12751] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 771.695935][T12751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 771.729611][T12751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 772.914303][ T5948] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 773.802050][ T5948] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 773.819912][ T5948] usb 4-1: config 0 interface 0 has no altsetting 0 [ 773.839606][ T5948] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 774.675050][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 774.728383][ T5948] usb 4-1: Product: syz [ 774.734296][ T5948] usb 4-1: Manufacturer: syz [ 774.738898][ T5948] usb 4-1: SerialNumber: syz [ 774.759463][ T5948] usb 4-1: config 0 descriptor?? [ 774.780702][T12791] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 774.813316][ T5948] usb 4-1: can't set config #0, error -71 [ 774.845329][ T5948] usb 4-1: USB disconnect, device number 62 [ 774.886097][T12791] overlayfs: missing 'lowerdir' [ 779.934828][T12849] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1583'. [ 780.820351][T12852] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 780.916842][T12852] overlayfs: missing 'lowerdir' [ 782.994849][ T5922] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 783.670262][T12893] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1592'. [ 784.000085][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 784.025360][ T5922] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 784.034315][T12208] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 784.058635][ T5922] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 784.081471][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.161872][ T5922] usb 4-1: Product: syz [ 784.167417][ T5922] usb 4-1: Manufacturer: syz [ 784.182426][ T5922] usb 4-1: SerialNumber: syz [ 784.274348][T12208] usb 1-1: Using ep0 maxpacket: 32 [ 784.285715][T12208] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 784.295323][T12208] usb 1-1: config 0 has no interface number 0 [ 784.304570][T12208] usb 1-1: config 0 interface 184 has no altsetting 0 [ 784.391094][T12208] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 784.424882][T12208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.434272][T12208] usb 1-1: Product: syz [ 784.438822][T12208] usb 1-1: Manufacturer: syz [ 784.499339][T12208] usb 1-1: SerialNumber: syz [ 784.621871][T12208] usb 1-1: config 0 descriptor?? [ 784.772371][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.783256][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.575110][T12208] smsc75xx v1.0.0 [ 785.739658][ T5948] usb 4-1: USB disconnect, device number 63 [ 785.844678][ T5872] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 785.995644][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.006790][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.017562][ T5872] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 786.027190][ T5872] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 786.035831][ T5872] usb 2-1: Manufacturer: syz [ 786.042929][ T5872] usb 2-1: config 0 descriptor?? [ 786.048153][ T5879] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 786.218037][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.229517][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.243119][ T5879] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 786.253555][ T5879] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 786.263001][ T5879] usb 5-1: Manufacturer: syz [ 786.279202][ T5879] usb 5-1: config 0 descriptor?? [ 786.594872][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 786.650873][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 786.681021][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 786.693793][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 786.807502][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 786.822262][ T5872] usb 2-1: USB disconnect, device number 50 [ 786.832396][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 786.851137][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 786.864310][T12208] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 786.874935][T12208] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 786.887167][T12208] usb 1-1: USB disconnect, device number 72 [ 786.905757][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 786.914130][ T5879] uclogic 0003:256C:006D.0027: failed retrieving Huion firmware version: -71 [ 786.927431][ T5879] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 786.940445][ T5879] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 786.955427][ T5879] usb 5-1: USB disconnect, device number 60 [ 787.844390][T12208] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 788.384257][T12208] usb 1-1: Using ep0 maxpacket: 32 [ 788.500332][T12208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.513138][T12208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.523780][T12208] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 789.044301][T12208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.060915][T12208] usb 1-1: config 0 descriptor?? [ 789.434449][ T5864] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 789.510702][T12208] usbhid 1-1:0.0: can't add hid device: -71 [ 789.520129][T12208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 789.530590][ T5872] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 789.532978][T12208] usb 1-1: USB disconnect, device number 73 [ 789.633165][ T5864] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 789.645336][ T5864] usb 5-1: config 0 interface 0 has no altsetting 0 [ 789.723793][ T5864] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 789.734766][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 789.744856][ T5864] usb 5-1: Product: syz [ 789.767398][ T5864] usb 5-1: Manufacturer: syz [ 789.772019][ T5864] usb 5-1: SerialNumber: syz [ 789.785348][ T5864] usb 5-1: config 0 descriptor?? [ 789.795126][ T5864] usb 5-1: selecting invalid altsetting 0 [ 789.835857][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.867078][T12950] syzkaller0: entered promiscuous mode [ 789.874872][T12950] syzkaller0: entered allmulticast mode [ 789.881591][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.909127][ T5872] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 789.933068][ T5872] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 789.942496][ T5872] usb 2-1: Manufacturer: syz [ 789.951869][ T5872] usb 2-1: config 0 descriptor?? [ 790.020676][T12208] usb 5-1: USB disconnect, device number 61 [ 790.164345][ T5879] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 790.884297][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 790.895905][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.909522][ T5872] usbhid 2-1:0.0: can't add hid device: -71 [ 790.924747][ T5872] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 790.938006][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.051172][ T5872] usb 2-1: USB disconnect, device number 51 [ 791.058132][ T5879] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 791.078971][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.121099][ T5879] usb 4-1: config 0 descriptor?? [ 791.384629][ T5813] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 791.894295][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 791.914300][ T5813] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 791.932539][ T5813] usb 5-1: config 0 has no interface number 0 [ 791.939027][ T5813] usb 5-1: config 0 interface 184 has no altsetting 0 [ 791.948866][ T5879] usbhid 4-1:0.0: can't add hid device: -71 [ 791.956361][ T5879] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 791.965980][ T5813] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 791.985231][ T5879] usb 4-1: USB disconnect, device number 64 [ 791.991254][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.094127][ T5813] usb 5-1: Product: syz [ 792.099982][ T5813] usb 5-1: Manufacturer: syz [ 792.105577][ T5813] usb 5-1: SerialNumber: syz [ 792.120260][ T5813] usb 5-1: config 0 descriptor?? [ 792.132314][ T5813] smsc75xx v1.0.0 [ 793.581384][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 793.593099][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 793.603675][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 793.638034][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 793.657945][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 793.675795][ T5813] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 793.697764][ T5813] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 793.859281][ T5813] usb 5-1: USB disconnect, device number 62 [ 794.165991][ T5944] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 794.177375][ T5864] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 794.462968][ T5864] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 794.481362][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 794.487159][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 794.496318][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.507835][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.518511][ T5864] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 794.529529][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 794.616904][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 794.626106][ T5864] usb 2-1: Product: syz [ 794.630278][ T5864] usb 2-1: Manufacturer: syz [ 794.637537][ T5944] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 794.647275][ T5864] usb 2-1: SerialNumber: syz [ 794.653741][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.662847][ T5864] usb 2-1: config 0 descriptor?? [ 794.674768][ T5944] usb 1-1: config 0 descriptor?? [ 794.687146][ T5864] usb 2-1: selecting invalid altsetting 0 [ 794.979603][ T5864] usb 2-1: USB disconnect, device number 52 [ 795.328084][ T5944] usbhid 1-1:0.0: can't add hid device: -71 [ 795.339209][ T5944] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 795.342859][T13072] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 795.369767][ T5944] usb 1-1: USB disconnect, device number 74 [ 795.419928][T13072] overlayfs: missing 'lowerdir' [ 795.895287][ T5944] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 795.930340][ T5813] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 796.104256][ T5944] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 796.123161][ T5944] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 796.144782][ T5944] usb 4-1: config 220 has no interface number 2 [ 796.154503][ T5944] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 796.169700][ T5944] usb 4-1: config 220 interface 0 has no altsetting 0 [ 796.185133][ T5944] usb 4-1: config 220 interface 76 has no altsetting 0 [ 796.188670][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.192015][ T5944] usb 4-1: config 220 interface 1 has no altsetting 0 [ 796.212121][ T5944] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 796.222456][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.230678][ T5944] usb 4-1: Product: syz [ 796.232283][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.235119][ T5944] usb 4-1: Manufacturer: syz [ 796.249448][ T5944] usb 4-1: SerialNumber: syz [ 796.268836][ T5813] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 796.293367][ T5813] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 796.306867][ T5813] usb 2-1: Manufacturer: syz [ 796.325200][ T5813] usb 2-1: config 0 descriptor?? [ 796.589540][ T5944] usb 4-1: selecting invalid altsetting 0 [ 796.673246][ T5944] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 796.714473][ T5944] uvcvideo 4-1:220.0: No valid video chain found. [ 796.741320][ T5944] usb 4-1: selecting invalid altsetting 0 [ 796.747239][ T5944] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 796.763219][ T5944] usb 4-1: USB disconnect, device number 65 [ 796.974586][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 796.980796][ T5813] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 797.014634][ T5879] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 797.052456][ T5813] usb 2-1: USB disconnect, device number 53 [ 797.315046][ T5879] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 797.375094][ T5879] usb 1-1: config 0 interface 0 has no altsetting 0 [ 797.516388][ T5879] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 797.532978][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 797.535705][T13110] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 797.542382][ T5879] usb 1-1: Product: syz [ 797.563074][ T5879] usb 1-1: Manufacturer: syz [ 797.568054][ T5879] usb 1-1: SerialNumber: syz [ 797.577851][ T5879] usb 1-1: config 0 descriptor?? [ 797.597621][ T5879] usb 1-1: selecting invalid altsetting 0 [ 797.637389][T13110] overlayfs: missing 'lowerdir' [ 798.239858][ T5944] usb 1-1: USB disconnect, device number 75 [ 801.464303][ T5879] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 802.594394][ T5872] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 802.615787][ T5879] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 802.884522][ T5872] usb 5-1: device descriptor read/64, error -71 [ 803.011151][ T5879] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 803.024018][ T5879] usb 1-1: config 220 has no interface number 2 [ 803.160382][ T5879] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 803.174932][ T5879] usb 1-1: config 220 interface 0 has no altsetting 0 [ 803.182088][ T5879] usb 1-1: config 220 interface 76 has no altsetting 0 [ 803.189108][ T5879] usb 1-1: config 220 interface 1 has no altsetting 0 [ 803.202140][ T5879] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 803.211843][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.232092][ T5879] usb 1-1: Product: syz [ 803.237301][ T5879] usb 1-1: Manufacturer: syz [ 803.241897][ T5879] usb 1-1: SerialNumber: syz [ 803.267898][ T5872] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 803.395009][ T5879] usb 1-1: selecting invalid altsetting 0 [ 803.875555][ T5872] usb 5-1: device descriptor read/64, error -71 [ 803.882326][ T5879] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 804.038690][ T5872] usb usb5-port1: attempt power cycle [ 804.658837][ T5879] uvcvideo 1-1:220.0: No valid video chain found. [ 804.683804][ T5879] usb 1-1: selecting invalid altsetting 0 [ 804.689978][ T5879] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 804.703648][ T5879] usb 1-1: USB disconnect, device number 76 [ 806.432889][T13190] warning: `syz.0.1664' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 807.742348][T13211] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 807.756439][T13211] overlayfs: missing 'lowerdir' [ 808.313920][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.320352][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.588364][ T5922] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 809.889281][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.999601][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.257278][ T5922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 810.281093][ T5922] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 810.438451][ T5922] usb 1-1: Manufacturer: syz [ 810.490722][ T5922] usb 1-1: config 0 descriptor?? [ 811.648253][ T5922] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71 [ 811.658450][ T5922] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 811.711997][ T5922] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 811.811434][ T5922] usb 1-1: USB disconnect, device number 77 [ 812.504116][T13270] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1681'. [ 812.694021][ T5865] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 813.767796][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.823886][ T5865] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.832947][ T5865] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.850789][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.878281][ T5865] usb 5-1: config 0 descriptor?? [ 814.192176][ T5922] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 814.254566][ T5865] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 814.386231][ T5922] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 814.397015][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 814.406671][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 814.408485][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 814.418246][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.421034][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 814.431908][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.431936][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 814.440486][ T5922] usb 1-1: Product: syz [ 814.450584][ T5865] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 814.463679][ T5922] usb 1-1: Manufacturer: syz [ 814.481978][ T5922] usb 1-1: SerialNumber: syz [ 814.489257][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.490054][ T5922] usb 1-1: config 0 descriptor?? [ 814.519490][ T5922] usb 1-1: selecting invalid altsetting 0 [ 814.525910][ T5865] usb 4-1: config 0 descriptor?? [ 814.565964][T13292] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 814.598023][T13292] overlayfs: missing 'lowerdir' [ 814.634301][ T5864] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 814.758669][ T5922] usb 1-1: USB disconnect, device number 78 [ 814.785916][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.796978][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.810123][ T5864] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 814.822058][ T5864] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 814.831694][ T5864] usb 2-1: Manufacturer: syz [ 814.847759][ T5864] usb 2-1: config 0 descriptor?? [ 815.151973][T12208] usb 5-1: USB disconnect, device number 66 [ 815.159611][ T5865] usbhid 4-1:0.0: can't add hid device: -71 [ 815.167601][ T5865] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 815.196159][ T5865] usb 4-1: USB disconnect, device number 66 [ 815.360915][T13297] kvm: pic: non byte write [ 815.986816][ T5864] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71 [ 816.052153][ T5864] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 816.061071][ T5864] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71 [ 816.071042][ T5864] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 816.081271][ T5864] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71 [ 816.109853][ T5864] usb 2-1: USB disconnect, device number 54 [ 816.274363][ T5865] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 818.225238][ T5865] usb 1-1: device descriptor read/64, error -71 [ 819.775325][T13342] syz.3.1701 uses obsolete (PF_INET,SOCK_PACKET) [ 819.785843][ T30] audit: type=1400 audit(1761233893.840:322): avc: denied { ioctl } for pid=13336 comm="syz.3.1701" path="socket:[40986]" dev="sockfs" ino=40986 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 820.539251][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 820.585476][T13343] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 820.585476][T13343] program syz.0.1698 not setting count and/or reply_len properly [ 820.776348][T13339] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1700'. [ 821.214283][T13347] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 821.267195][T13347] overlayfs: missing 'lowerdir' [ 823.734270][ T5922] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 823.814306][T12208] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 823.885700][ T5922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.895918][ T5922] usb 2-1: config 0 has no interfaces? [ 823.902868][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 823.912106][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.920510][ T5922] usb 2-1: Product: syz [ 823.924773][ T5922] usb 2-1: Manufacturer: syz [ 823.929396][ T5922] usb 2-1: SerialNumber: syz [ 823.935685][ T5922] usb 2-1: config 0 descriptor?? [ 823.965405][T12208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.976600][T12208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.987511][T12208] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 823.996603][T12208] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 824.004646][T12208] usb 1-1: Manufacturer: syz [ 824.019529][T12208] usb 1-1: config 0 descriptor?? [ 825.253465][T13406] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 825.296770][T12208] uclogic 0003:256C:006D.002A: failed retrieving string descriptor #200: -71 [ 825.298990][T13406] overlayfs: missing 'lowerdir' [ 825.325343][T12208] uclogic 0003:256C:006D.002A: failed retrieving pen parameters: -71 [ 825.333524][T12208] uclogic 0003:256C:006D.002A: failed probing pen v2 parameters: -71 [ 825.479310][T12208] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 825.487167][T12208] uclogic 0003:256C:006D.002A: probe with driver uclogic failed with error -71 [ 825.907170][T12208] usb 1-1: USB disconnect, device number 81 [ 826.253487][T12208] usb 2-1: USB disconnect, device number 55 [ 827.214305][ T5872] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 827.781585][T13433] usb usb5: usbfs: process 13433 (syz.4.1728) did not claim interface 0 before use [ 827.887650][ T5872] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 827.896492][ T5872] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 827.928105][ T5872] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 827.938498][ T5872] usb 2-1: config 220 has no interface number 2 [ 827.945751][ T5872] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 827.958932][ T5872] usb 2-1: config 220 interface 0 has no altsetting 0 [ 827.965727][ T5872] usb 2-1: config 220 interface 76 has no altsetting 0 [ 827.972580][ T5872] usb 2-1: config 220 interface 1 has no altsetting 0 [ 827.981470][ T5872] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 828.685551][ T43] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 828.990868][ T43] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 828.995426][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.003042][ T43] usb 3-1: USB disconnect, device number 68 [ 829.151047][ T5872] usb 2-1: Product: syz [ 829.155558][ T5872] usb 2-1: Manufacturer: syz [ 829.160209][ T5872] usb 2-1: SerialNumber: syz [ 829.394859][T12208] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 829.426324][ T5872] usb 2-1: selecting invalid altsetting 0 [ 829.465789][ T5872] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 829.497916][ T5872] uvcvideo 2-1:220.0: No valid video chain found. [ 829.504825][T13453] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1731'. [ 829.565838][T12208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.569795][ T5872] usb 2-1: selecting invalid altsetting 0 [ 829.583260][ T5872] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 829.599215][ T5872] usb 2-1: USB disconnect, device number 56 [ 829.647262][T12208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.693327][T12208] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 829.702753][T12208] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 829.715311][T12208] usb 4-1: Manufacturer: syz [ 829.746165][T12208] usb 4-1: config 0 descriptor?? [ 830.264786][ T30] audit: type=1400 audit(1761233904.310:323): avc: denied { create } for pid=13460 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 830.296821][T13461] ieee802154 phy0 wpan0: encryption failed: -22 [ 830.360152][ T30] audit: type=1400 audit(1761233904.350:324): avc: denied { write } for pid=13460 comm="syz.1.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 830.599529][T12208] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #200: -71 [ 830.661288][T12208] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 830.768086][T12208] uclogic 0003:256C:006D.002B: failed probing pen v2 parameters: -71 [ 830.796955][T12208] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 830.824275][T12208] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 830.891137][T12208] usb 4-1: USB disconnect, device number 67 [ 831.409920][ T43] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 831.595569][ T43] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 832.421852][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.463306][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 832.475402][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 832.492781][ T43] usb 2-1: Product: syz [ 832.594769][ T43] usb 2-1: Manufacturer: syz [ 832.599409][ T43] usb 2-1: SerialNumber: syz [ 832.615247][ T43] usb 2-1: config 0 descriptor?? [ 833.001148][ T43] usb 2-1: selecting invalid altsetting 0 [ 833.657251][ T5872] usb 2-1: USB disconnect, device number 57 [ 834.216092][T13496] usb usb5: usbfs: process 13496 (syz.0.1745) did not claim interface 0 before use [ 836.619564][T13523] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.044246][ T5872] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 837.565903][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.576178][ T5872] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 837.619804][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.919586][ T5872] usb 1-1: config 0 descriptor?? [ 837.979553][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 839.143227][ T30] audit: type=1400 audit(1761233912.290:325): avc: denied { ioctl } for pid=13534 comm="syz.3.1757" path="socket:[41649]" dev="sockfs" ino=41649 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 839.358280][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 839.435320][T13545] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 839.435320][T13545] program syz.2.1758 not setting count and/or reply_len properly [ 839.798142][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 839.825473][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 839.851311][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 839.859408][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 839.871508][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 839.881999][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 839.893284][ T5872] pwc: recv_control_msg error -32 req 02 val 2100 [ 839.906140][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 839.913732][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 839.924337][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 839.931156][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 839.938502][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 839.949059][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 839.957951][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 839.967775][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 839.978597][ T5872] pwc: Registered as video103. [ 840.095612][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 840.499800][ T5872] usb 1-1: USB disconnect, device number 82 [ 842.697043][ T5872] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 843.270724][T13592] usb usb5: usbfs: process 13592 (syz.0.1770) did not claim interface 0 before use [ 843.406152][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 843.415012][ T5872] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 843.431066][T13599] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1769'. [ 843.506162][ T5872] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 843.522488][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.566540][ T5872] usb 3-1: Product: syz [ 843.577980][ T5872] usb 3-1: Manufacturer: syz [ 843.589205][ T5872] usb 3-1: SerialNumber: syz [ 843.662369][ T5892] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 843.867364][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.904909][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.074231][ T5872] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 844.118801][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.128370][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.981919][ T5892] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 844.991427][ T5892] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 845.003359][ T5892] usb 4-1: Manufacturer: syz [ 845.015391][ T5892] usb 4-1: config 0 descriptor?? [ 845.259683][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.298639][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.351734][ T5872] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 845.395420][ T5872] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 845.403515][ T5872] usb 1-1: Manufacturer: syz [ 846.165023][ T5892] uclogic 0003:256C:006D.002C: failed retrieving string descriptor #200: -71 [ 846.408067][ T5892] uclogic 0003:256C:006D.002C: failed retrieving pen parameters: -71 [ 846.450748][ T5872] usb 1-1: config 0 descriptor?? [ 846.511779][ T5892] uclogic 0003:256C:006D.002C: failed probing pen v2 parameters: -71 [ 846.517981][ T5948] usb 3-1: USB disconnect, device number 69 [ 846.560089][ T5892] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 846.578687][ T5892] uclogic 0003:256C:006D.002C: probe with driver uclogic failed with error -71 [ 846.613578][ T5892] usb 4-1: USB disconnect, device number 68 [ 846.755726][ T5872] usbhid 1-1:0.0: can't add hid device: -71 [ 846.761676][ T5872] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 846.821519][ T5872] usb 1-1: USB disconnect, device number 83 [ 847.314035][T13641] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.824586][ T5922] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 847.995081][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 848.036794][ T5922] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 848.128169][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.172927][ T5922] usb 4-1: config 0 descriptor?? [ 848.704465][ T5872] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 848.712968][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 848.778801][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 848.868013][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 848.884521][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 848.925507][ T5922] usb 4-1: media controller created [ 848.932828][ T5872] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 848.973946][ T5872] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 849.350516][T13667] usb usb5: usbfs: process 13667 (syz.0.1786) did not claim interface 0 before use [ 849.441471][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.452742][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 849.461154][ T5872] usb 2-1: Product: syz [ 849.497905][ T5872] usb 2-1: Manufacturer: syz [ 849.535624][ T5872] usb 2-1: SerialNumber: syz [ 849.566376][ T5922] az6027: usb out operation failed. (-71) [ 849.579993][ T5922] az6027: usb out operation failed. (-71) [ 849.585797][ T5922] stb0899_attach: Driver disabled by Kconfig [ 849.591933][ T5922] az6027: no front-end attached [ 849.591933][ T5922] [ 849.600049][ T5922] az6027: usb out operation failed. (-71) [ 849.609524][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 849.630886][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 849.655417][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 849.665985][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 849.728679][ T5922] usb 4-1: USB disconnect, device number 69 [ 849.796790][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 850.060479][ T30] audit: type=1400 audit(1761233924.110:326): avc: denied { accept } for pid=13676 comm="syz.3.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 851.337198][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.451670][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.593049][T13683] syzkaller0: entered promiscuous mode [ 851.604322][ T5892] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 851.623281][ T5865] usb 2-1: USB disconnect, device number 58 [ 852.254205][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 852.443441][ T5892] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 852.457722][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.458582][T13683] syzkaller0: entered allmulticast mode [ 852.485573][ T5892] usb 3-1: config 0 descriptor?? [ 853.916750][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 853.992883][ T5892] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 854.027091][ T5892] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 854.160915][ T5922] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 854.334479][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 854.386546][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.484271][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.495775][ T5922] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 854.510190][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.526556][ T5922] usb 1-1: config 0 descriptor?? [ 855.123937][ T5922] usbhid 1-1:0.0: can't add hid device: -71 [ 855.130000][ T5922] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 855.163436][ T5922] usb 1-1: USB disconnect, device number 84 [ 855.654276][ T5922] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 855.924369][ T5865] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 856.554223][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 856.563201][ T5922] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 856.572384][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.582013][ T5922] usb 2-1: config 0 descriptor?? [ 856.594246][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 856.616782][ T5865] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 856.636052][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.664832][ T5865] usb 4-1: config 0 descriptor?? [ 856.741908][ T30] audit: type=1400 audit(1761233930.780:327): avc: denied { append } for pid=13743 comm="syz.0.1801" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 856.885394][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 856.895832][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 856.929052][ T5865] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 856.936073][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 856.937578][T13753] ieee802154 phy0 wpan0: encryption failed: -22 [ 856.943205][ T5922] usb 2-1: media controller created [ 856.951798][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 857.061701][T13754] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1802'. [ 857.081698][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 857.164242][ T5865] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 857.164440][ T5922] az6027: usb out operation failed. (-71) [ 857.212250][ T5865] usb 4-1: media controller created [ 857.381504][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 858.506896][ T5922] az6027: usb out operation failed. (-71) [ 858.512650][ T5922] stb0899_attach: Driver disabled by Kconfig [ 858.519123][ T5922] az6027: no front-end attached [ 858.519123][ T5922] [ 858.526867][ T5922] az6027: usb out operation failed. (-71) [ 858.533133][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 858.541089][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 858.553116][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 858.558524][T13765] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1805'. [ 858.569055][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 858.571907][ T5922] usb 2-1: USB disconnect, device number 59 [ 858.644283][ T5865] az6027: usb out operation failed. (-71) [ 858.658654][ T5865] az6027: usb out operation failed. (-71) [ 859.745492][ T5865] stb0899_attach: Driver disabled by Kconfig [ 859.751525][ T5865] az6027: no front-end attached [ 859.751525][ T5865] [ 859.776177][ T5865] az6027: usb out operation failed. (-71) [ 859.793572][ T5865] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 859.985604][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 860.115866][ T5865] dvb-usb: schedule remote query interval to 400 msecs. [ 860.232315][ T5865] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 860.234050][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 860.245393][ T5865] usb 4-1: USB disconnect, device number 70 [ 861.362863][ T5865] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 863.905654][T13800] usb usb5: usbfs: process 13800 (syz.1.1815) did not claim interface 0 before use [ 866.254561][ T5864] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 866.664371][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 866.816764][ T5864] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 866.884814][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.985895][ T5864] usb 2-1: config 0 descriptor?? [ 867.661248][ T5864] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 867.786858][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 867.816361][ T5864] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 867.843054][ T5864] usb 2-1: media controller created [ 867.962388][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.079700][ T5864] az6027: usb out operation failed. (-71) [ 868.086105][ T5864] az6027: usb out operation failed. (-71) [ 868.091880][ T5864] stb0899_attach: Driver disabled by Kconfig [ 868.099523][ T5864] az6027: no front-end attached [ 868.099523][ T5864] [ 868.107283][ T5864] az6027: usb out operation failed. (-71) [ 868.117351][ T5864] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 868.129478][ T5864] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 868.203443][T13833] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 868.203443][T13833] program syz.3.1823 not setting count and/or reply_len properly [ 868.597268][ T5864] dvb-usb: schedule remote query interval to 400 msecs. [ 868.611087][ T5864] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 868.629779][ T5864] usb 2-1: USB disconnect, device number 60 [ 868.681281][ T5864] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 869.664898][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.671573][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.901341][T13838] usb usb5: usbfs: process 13838 (syz.3.1824) did not claim interface 0 before use [ 871.309873][T13859] syzkaller0: entered promiscuous mode [ 871.507100][T13859] syzkaller0: entered allmulticast mode [ 872.371798][T13862] syzkaller0: create flow: hash 1342444380 index 1 [ 872.865156][T13857] syzkaller0: delete flow: hash 1342444380 index 1 [ 873.916451][T13888] usb usb5: usbfs: process 13888 (syz.2.1837) did not claim interface 0 before use [ 874.048502][ T5922] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 874.225682][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 874.232519][ T5922] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 874.241924][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.252928][ T5922] usb 4-1: config 0 descriptor?? [ 874.509151][ T5922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 874.528563][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 874.562694][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 874.570386][ T5922] usb 4-1: media controller created [ 874.591975][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.711678][ T5922] az6027: usb out operation failed. (-71) [ 874.733398][ T5922] az6027: usb out operation failed. (-71) [ 874.759199][ T5922] stb0899_attach: Driver disabled by Kconfig [ 874.784410][ T5922] az6027: no front-end attached [ 874.784410][ T5922] [ 874.800510][ T5922] az6027: usb out operation failed. (-71) [ 874.812949][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 874.843646][ T5922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 874.889231][ T5922] dvb-usb: schedule remote query interval to 400 msecs. [ 874.904206][ T5922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 874.926146][ T5922] usb 4-1: USB disconnect, device number 71 [ 874.950603][ T5922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 877.301072][T13922] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1843'. [ 877.754338][ T5922] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 877.904700][ T5922] usb 1-1: device descriptor read/64, error -71 [ 878.184249][ T5922] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 878.404276][ T5948] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 878.469008][ T5922] usb 1-1: device descriptor read/64, error -71 [ 879.401952][ T5922] usb usb1-port1: attempt power cycle [ 879.545554][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.556957][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.572457][ T5948] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 879.581703][ T5948] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 879.589858][ T5948] usb 2-1: Manufacturer: syz [ 879.624684][ T5948] usb 2-1: config 0 descriptor?? [ 879.784424][ T5922] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 880.074262][ T5922] usb 1-1: device descriptor read/8, error -71 [ 880.324210][ T5922] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 880.355036][ T5922] usb 1-1: device descriptor read/8, error -71 [ 880.434205][ T5872] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 880.464868][ T5922] usb usb1-port1: unable to enumerate USB device [ 880.585826][ T5872] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 880.607902][ T5872] usb 5-1: config 0 interface 0 has no altsetting 0 [ 880.623507][ T5872] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 880.639662][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 880.664244][ T5872] usb 5-1: Product: syz [ 880.673922][ T5872] usb 5-1: Manufacturer: syz [ 880.694172][ T5872] usb 5-1: SerialNumber: syz [ 880.713068][ T5872] usb 5-1: config 0 descriptor?? [ 880.715802][ T5948] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 880.733002][ T5948] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 880.741163][ T5948] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 880.749293][ T5948] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 880.758125][ T5948] uclogic 0003:256C:006D.002D: probe with driver uclogic failed with error -71 [ 880.780688][ T5948] usb 2-1: USB disconnect, device number 61 [ 880.781995][ T5872] usb 5-1: selecting invalid altsetting 0 [ 881.371502][ T5872] usb 5-1: USB disconnect, device number 67 [ 882.294278][ T5872] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 882.347925][T13966] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 882.359645][T13966] overlayfs: missing 'lowerdir' [ 882.477238][ T5872] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 882.486518][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.874977][ T5872] usb 5-1: Product: syz [ 882.879863][ T5872] usb 5-1: Manufacturer: syz [ 882.885097][ T5872] usb 5-1: SerialNumber: syz [ 882.899743][ T5872] usb 5-1: config 0 descriptor?? [ 883.138509][ T5872] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 883.184264][ T5864] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 883.955536][ T5864] usb 1-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 883.983892][ T5864] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 884.016556][ T5864] usb 1-1: config 220 interface 0 has no altsetting 0 [ 884.027782][ T5864] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 884.125100][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.134284][ T5864] usb 1-1: Product: syz [ 884.138492][ T5864] usb 1-1: Manufacturer: syz [ 884.143237][ T5864] usb 1-1: SerialNumber: syz [ 884.264189][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 885.333089][ T5872] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 885.413435][ T5872] usb 5-1: USB disconnect, device number 68 [ 885.636795][ T5864] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 885.729513][ T5864] uvcvideo 1-1:220.0: No valid video chain found. [ 885.760727][ T5864] usb 1-1: USB disconnect, device number 89 [ 885.863664][T13994] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1867'. [ 887.854320][T14019] usb usb5: usbfs: process 14019 (syz.3.1876) did not claim interface 0 before use [ 888.006342][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 888.015317][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1875'. [ 889.454747][T14030] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 889.497348][T14030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 889.511248][T14030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 889.593035][T14041] syzkaller0: entered promiscuous mode [ 889.598643][T14041] syzkaller0: entered allmulticast mode [ 895.816454][T14102] syzkaller0: entered promiscuous mode [ 895.968739][T14102] syzkaller0: entered allmulticast mode [ 895.983514][ T9954] syzkaller0: tun_net_xmit 48 [ 895.992645][T14102] syzkaller0: create flow: hash 4000256941 index 1 [ 896.831800][T14125] usb usb5: usbfs: process 14125 (syz.4.1896) did not claim interface 0 before use [ 897.425841][T14100] syzkaller0: delete flow: hash 4000256941 index 1 [ 898.189539][ T5864] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 898.354580][ T5864] usb 1-1: device descriptor read/64, error -71 [ 898.684184][ T5864] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 898.846894][T14149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 898.846894][T14149] program syz.1.1901 not setting count and/or reply_len properly [ 898.914782][ T5864] usb 1-1: device descriptor read/64, error -71 [ 899.258867][ T5864] usb usb1-port1: attempt power cycle [ 899.614482][ T5864] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 899.648130][ T5864] usb 1-1: device descriptor read/8, error -71 [ 899.839346][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 899.935903][ T5864] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 900.000232][ T5864] usb 1-1: device descriptor read/8, error -71 [ 900.129432][ T5864] usb usb1-port1: unable to enumerate USB device [ 902.053350][T14155] syzkaller0: entered promiscuous mode [ 902.058909][T14155] syzkaller0: entered allmulticast mode [ 902.059599][ T30] audit: type=1400 audit(1761233976.060:328): avc: denied { getopt } for pid=14156 comm="syz.0.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 902.406280][T14165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14165 comm=syz.4.1905 [ 902.704433][ T5864] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 902.722392][ T5865] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 902.895371][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 902.910681][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.944722][ T5865] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 903.071805][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.082493][ T5865] usb 5-1: config 0 interface 0 has no altsetting 0 [ 903.122427][ T5864] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 903.139883][ T5865] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 903.174181][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.184224][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 903.192392][ T5865] usb 5-1: Product: syz [ 903.211685][ T5864] usb 2-1: config 0 descriptor?? [ 903.220982][ T5865] usb 5-1: Manufacturer: syz [ 903.232167][T14182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14182 comm=syz.3.1909 [ 903.233835][ T5865] usb 5-1: SerialNumber: syz [ 903.305491][ T5865] usb 5-1: config 0 descriptor?? [ 903.352949][T14185] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 903.437479][ T5865] usb 5-1: selecting invalid altsetting 0 [ 903.504184][ T5813] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 904.598867][ T5865] usb 5-1: USB disconnect, device number 69 [ 904.645706][ T5813] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 904.667348][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.685795][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 904.703719][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 904.740627][ T5813] usb 4-1: Product: syz [ 904.750665][ T5813] usb 4-1: Manufacturer: syz [ 904.769429][ T5813] usb 4-1: SerialNumber: syz [ 904.783808][ T5813] usb 4-1: config 0 descriptor?? [ 904.828494][ T5813] usb 4-1: selecting invalid altsetting 0 [ 904.957615][ T5864] usbhid 2-1:0.0: can't add hid device: -71 [ 904.965696][ T5864] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 904.983466][ T5864] usb 2-1: USB disconnect, device number 62 [ 905.069789][ T5813] usb 4-1: USB disconnect, device number 72 [ 905.374809][ T5865] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 905.514276][ T5865] usb 1-1: device descriptor read/64, error -71 [ 905.784846][ T5865] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 906.132862][ T5865] usb 1-1: device descriptor read/64, error -71 [ 906.533172][T14244] usb usb5: usbfs: process 14244 (syz.3.1919) did not claim interface 0 before use [ 906.651991][ T5865] usb usb1-port1: attempt power cycle [ 907.014212][ T5865] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 908.118155][ T5865] usb 1-1: device descriptor read/8, error -71 [ 908.720764][T14257] usb usb5: usbfs: process 14257 (syz.1.1922) did not claim interface 0 before use [ 912.119313][T14299] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1928'. [ 915.730369][ T5892] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 915.784181][ T5892] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 915.901053][ T5892] usb 3-1: USB disconnect, device number 70 [ 916.273710][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'. [ 916.298481][T14348] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 916.298481][T14348] program syz.3.1937 not setting count and/or reply_len properly [ 919.594536][T14376] usb usb5: usbfs: process 14376 (syz.4.1946) did not claim interface 0 before use [ 919.843827][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 920.024743][ T5865] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 921.199161][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 921.227036][ T5865] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 921.300180][ T5865] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 921.324767][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.355349][ T5865] usb 3-1: Product: syz [ 921.359562][ T5865] usb 3-1: Manufacturer: syz [ 921.373083][ T5865] usb 3-1: SerialNumber: syz [ 921.651875][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'. [ 921.660895][T14401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1953'. [ 921.999565][ T5922] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 922.155447][ T5922] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 922.195256][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.205172][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.269061][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 924.501161][ T5922] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 925.115726][ T5922] usb 2-1: config 220 interface 0 has no altsetting 0 [ 925.232348][ T5922] usb 2-1: string descriptor 0 read error: -71 [ 925.354287][ T5922] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 925.363534][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.375336][ T5922] usb 2-1: can't set config #220, error -71 [ 925.382723][ T5922] usb 2-1: USB disconnect, device number 63 [ 925.464803][T14420] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 925.464803][T14420] program syz.0.1956 not setting count and/or reply_len properly [ 926.018917][ T5948] usb 3-1: USB disconnect, device number 71 [ 986.817248][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.823534][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1039.164035][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1039.171005][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5808/1:b..l [ 1039.179276][ C0] rcu: (detected by 0, t=10503 jiffies, g=62873, q=831 ncpus=2) [ 1039.186984][ C0] task:syz-executor state:R running task stack:23816 pid:5808 tgid:5808 ppid:5803 task_flags:0x400140 flags:0x00080001 [ 1039.200975][ C0] Call Trace: [ 1039.204250][ C0] [ 1039.207176][ C0] __schedule+0x1190/0x5de0 [ 1039.211696][ C0] ? __pfx___schedule+0x10/0x10 [ 1039.216545][ C0] ? __lock_acquire+0x622/0x1c90 [ 1039.221491][ C0] preempt_schedule_irq+0x51/0x90 [ 1039.226510][ C0] irqentry_exit+0x36/0x90 [ 1039.230922][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.236891][ C0] RIP: 0010:lock_release+0xa/0x2f0 [ 1039.241991][ C0] Code: 8b 4c 24 18 4c 8b 54 24 10 44 8b 5c 24 0c eb 8c 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 <41> 54 49 89 f4 53 48 89 fb 48 83 ec 18 65 48 8b 05 49 6c 08 12 48 [ 1039.261586][ C0] RSP: 0018:ffffc90003197a28 EFLAGS: 00000202 [ 1039.267647][ C0] RAX: 0000000000000001 RBX: ffffc90003197f00 RCX: ffffc90003198001 [ 1039.275608][ C0] RDX: 0000000000000000 RSI: ffffffff816c1914 RDI: ffffffff8e3c4460 [ 1039.283568][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1039.291528][ C0] R10: 0000000000000000 R11: 0000000000013b1a R12: ffffc90003197b08 [ 1039.299487][ C0] R13: ffffc90003197ab8 R14: ffffc90003197f00 R15: ffffc90003197aec [ 1039.307456][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1039.312658][ C0] unwind_next_frame+0x3f9/0x20a0 [ 1039.317674][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1039.322956][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1039.329108][ C0] arch_stack_walk+0x94/0x100 [ 1039.333783][ C0] ? __x64_sys_unlink+0xb0/0x110 [ 1039.338716][ C0] stack_trace_save+0x8e/0xc0 [ 1039.343390][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1039.348756][ C0] ? find_held_lock+0x2b/0x80 [ 1039.353430][ C0] ? __might_fault+0xe3/0x190 [ 1039.358104][ C0] ? __might_fault+0x13b/0x190 [ 1039.362866][ C0] kasan_save_stack+0x33/0x60 [ 1039.367531][ C0] ? kasan_save_stack+0x33/0x60 [ 1039.372370][ C0] ? kasan_save_track+0x14/0x30 [ 1039.377210][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1039.382224][ C0] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1039.387853][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1039.393165][ C0] kasan_save_track+0x14/0x30 [ 1039.397834][ C0] __kasan_slab_alloc+0x89/0x90 [ 1039.402676][ C0] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1039.408130][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1039.413413][ C0] ? getname_flags.part.0+0x4c/0x550 [ 1039.418694][ C0] getname_flags.part.0+0x4c/0x550 [ 1039.423806][ C0] __x64_sys_unlink+0xb0/0x110 [ 1039.428563][ C0] do_syscall_64+0xcd/0xfa0 [ 1039.433071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.438955][ C0] RIP: 0033:0x7f3eb2d8e577 [ 1039.443361][ C0] RSP: 002b:00007ffc5fe278b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1039.451763][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3eb2d8e577 [ 1039.459722][ C0] RDX: 00007ffc5fe278e0 RSI: 00007ffc5fe27970 RDI: 00007ffc5fe27970 [ 1039.467681][ C0] RBP: 00007ffc5fe27970 R08: 0000000000000000 R09: 0000000000000000 [ 1039.475642][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc5fe28a00 [ 1039.483604][ C0] R13: 00007f3eb2e11d7d R14: 00000000000e2154 R15: 00007ffc5fe28a40 [ 1039.491581][ C0] [ 1039.494588][ C0] rcu: rcu_preempt kthread starved for 10143 jiffies! g62873 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1039.505768][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1039.515725][ C0] rcu: RCU grace-period kthread stack dump: [ 1039.521590][ C0] task:rcu_preempt state:R running task stack:28520 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1039.535032][ C0] Call Trace: [ 1039.538286][ C0] [ 1039.541191][ C0] __schedule+0x1190/0x5de0 [ 1039.545676][ C0] ? __pfx___schedule+0x10/0x10 [ 1039.550502][ C0] ? find_held_lock+0x2b/0x80 [ 1039.555151][ C0] ? schedule+0x2d7/0x3a0 [ 1039.559456][ C0] schedule+0xe7/0x3a0 [ 1039.563499][ C0] schedule_timeout+0x123/0x290 [ 1039.568322][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1039.573670][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1039.578948][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1039.584738][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 1039.590182][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 1039.594916][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1039.600178][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1039.605364][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1039.610271][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1039.615093][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1039.620885][ C0] rcu_gp_kthread+0x26d/0x380 [ 1039.625530][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1039.630697][ C0] ? rcu_is_watching+0x12/0xc0 [ 1039.635431][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1039.640606][ C0] ? __kthread_parkme+0x19e/0x250 [ 1039.645603][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1039.650768][ C0] kthread+0x3c5/0x780 [ 1039.654806][ C0] ? __pfx_kthread+0x10/0x10 [ 1039.659376][ C0] ? rcu_is_watching+0x12/0xc0 [ 1039.664113][ C0] ? __pfx_kthread+0x10/0x10 [ 1039.668671][ C0] ret_from_fork+0x675/0x7d0 [ 1039.673239][ C0] ? __pfx_kthread+0x10/0x10 [ 1039.677797][ C0] ret_from_fork_asm+0x1a/0x30 [ 1039.682544][ C0] [ 1039.685535][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1039.691835][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1039.700738][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1039.710760][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 1039.716020][ C0] Code: ea 3c 8e e8 c2 0d 37 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 73 78 ff 11 e8 5e 73 be 09 48 c7 c3 a8 [ 1039.735602][ C0] RSP: 0018:ffffc900000076b0 EFLAGS: 00000297 [ 1039.741635][ C0] RAX: 0000000000000000 RBX: ffffffff8e3c4460 RCX: 0000000000000002 [ 1039.749575][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e3c4460 [ 1039.757516][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1039.765461][ C0] R10: 0000000000000000 R11: 000000000005d9b3 R12: 0000000000000000 [ 1039.773408][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1039.781350][ C0] FS: 0000000000000000(0000) GS:ffff888124a0b000(0000) knlGS:0000000000000000 [ 1039.790251][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1039.796805][ C0] CR2: 0000000000000000 CR3: 000000006ea9e000 CR4: 00000000003526f0 [ 1039.804747][ C0] Call Trace: [ 1039.807997][ C0] [ 1039.810810][ C0] lock_acquire+0x2cd/0x350 [ 1039.815284][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1039.820453][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1039.826578][ C0] unwind_next_frame+0xd1/0x20a0 [ 1039.831485][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1039.836564][ C0] ? __hrtimer_run_queues+0x202/0xad0 [ 1039.841906][ C0] ? handle_softirqs+0x219/0x8e0 [ 1039.846814][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1039.852951][ C0] arch_stack_walk+0x94/0x100 [ 1039.857598][ C0] ? __hrtimer_run_queues+0x202/0xad0 [ 1039.862940][ C0] stack_trace_save+0x8e/0xc0 [ 1039.867587][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1039.872941][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1039.877853][ C0] kasan_save_stack+0x33/0x60 [ 1039.882513][ C0] ? kasan_save_stack+0x33/0x60 [ 1039.887332][ C0] ? kasan_save_track+0x14/0x30 [ 1039.892149][ C0] ? __kasan_save_free_info+0x3b/0x60 [ 1039.897502][ C0] ? __kasan_slab_free+0x5f/0x80 [ 1039.902406][ C0] ? kmem_cache_free+0x2d4/0x6c0 [ 1039.907311][ C0] ? skb_free_head+0x1b7/0x210 [ 1039.912050][ C0] ? skb_release_data+0x795/0x9e0 [ 1039.917046][ C0] ? consume_skb+0xbf/0x100 [ 1039.921530][ C0] ? mac80211_hwsim_tx_frame+0x1f9/0x2a0 [ 1039.927134][ C0] ? mac80211_hwsim_beacon_tx+0x595/0xa40 [ 1039.932824][ C0] ? __iterate_interfaces+0x2e5/0x650 [ 1039.938166][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1039.945337][ C0] ? mac80211_hwsim_beacon+0x105/0x1b0 [ 1039.950762][ C0] ? __hrtimer_run_queues+0x202/0xad0 [ 1039.956119][ C0] kasan_save_track+0x14/0x30 [ 1039.960766][ C0] __kasan_save_free_info+0x3b/0x60 [ 1039.965947][ C0] __kasan_slab_free+0x5f/0x80 [ 1039.970690][ C0] kmem_cache_free+0x2d4/0x6c0 [ 1039.975681][ C0] ? skb_free_head+0x1b7/0x210 [ 1039.980420][ C0] ? skb_free_head+0x1b7/0x210 [ 1039.985165][ C0] skb_free_head+0x1b7/0x210 [ 1039.989730][ C0] skb_release_data+0x795/0x9e0 [ 1039.994554][ C0] consume_skb+0xbf/0x100 [ 1039.998856][ C0] mac80211_hwsim_tx_frame+0x1f9/0x2a0 [ 1040.004298][ C0] mac80211_hwsim_beacon_tx+0x595/0xa40 [ 1040.009820][ C0] __iterate_interfaces+0x2e5/0x650 [ 1040.014992][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1040.021031][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1040.027071][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1040.032846][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1040.039843][ C0] mac80211_hwsim_beacon+0x105/0x1b0 [ 1040.045100][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1040.050282][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1040.055972][ C0] ? read_tsc+0x9/0x20 [ 1040.060016][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1040.065101][ C0] handle_softirqs+0x219/0x8e0 [ 1040.069840][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1040.075271][ C0] __irq_exit_rcu+0x109/0x170 [ 1040.079921][ C0] irq_exit_rcu+0x9/0x30 [ 1040.084135][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1040.089742][ C0] [ 1040.092659][ C0] [ 1040.095563][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1040.101516][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1040.107121][ C0] Code: 17 6d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 e5 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1040.126699][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1040.132734][ C0] RAX: 0000000003601593 RBX: 0000000000000000 RCX: ffffffff8b6042a9 [ 1040.140683][ C0] RDX: 0000000000000000 RSI: ffffffff8da2a18c RDI: ffffffff8bf06cc0 [ 1040.148624][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1040.156564][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1040.164505][ C0] R13: ffffffff8e097a00 R14: ffffffff9081f4d0 R15: 0000000000000000 [ 1040.172446][ C0] ? ct_kernel_exit+0x139/0x190 [ 1040.177283][ C0] default_idle+0x13/0x20 [ 1040.181580][ C0] default_idle_call+0x6c/0xb0 [ 1040.186311][ C0] do_idle+0x38d/0x500 [ 1040.190367][ C0] ? __pfx_do_idle+0x10/0x10 [ 1040.194931][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1040.200100][ C0] cpu_startup_entry+0x4f/0x60 [ 1040.204835][ C0] rest_init+0x16b/0x2b0 [ 1040.209048][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1040.214307][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1040.219823][ C0] start_kernel+0x3f6/0x4e0 [ 1040.224300][ C0] x86_64_start_reservations+0x18/0x30 [ 1040.229730][ C0] x86_64_start_kernel+0x130/0x190 [ 1040.234812][ C0] common_startup_64+0x13e/0x148 [ 1040.239725][ C0] [ 1043.420009][ T1296] ieee802154 phy0 wpan0: encryption failed: -22