last executing test programs: 5m12.680755174s ago: executing program 1 (id=6712): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) 5m12.661753402s ago: executing program 1 (id=6713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 5m11.71685685s ago: executing program 1 (id=6719): openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="01002bbd7000fbdbdf25070000000c0001800800030001000000740001801400020077673200000000000000000000000000080003000200000014"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)="681c3db736ed1f0021870e295de650b90b11cb17cd1027bb96a7ffc50bb55f6be7cd78e58f85efc0e413d5eb5d54edd96b440319000a729797d1842c51ff4acb91fc3efa92f0f2c46828d459f99a75dd5356e02dd5f968b1ebb7e03eb111ebf51c230e69471ed4504fcea517befa9719204b06a6e3f02b4c2be0a887f696cb34bca4a2a7", 0x84}, {&(0x7f0000000600)="bc93bc7ced21a53e81226268301b8a221d083a7bdd4b05656caede43ad7b2a065f0c26", 0x23}], 0x2, &(0x7f0000001400)=[@iv={0xf0, 0x117, 0x2, 0xd7, "354881c72895613c2b6a51a448dd3edb9a9a9929f1100fb976bc751124f0cd8aece005de5958b4662b07abf47c07b9af6877ae3ae1cf963d1c6b87d3d7fddc4a4ace20f7fbec876f9327b013bf5121cce6afd8bb384402b7d54a89d830847602fa8d9a4937ebb76cadbd1424782c5fe3f0714cc4e5c96496d97b196a62a1ddc5dabd549856d5fa4b32a9d7c218d2cd31746483356280b016dec38b4b85b168304edc4e1fe97fc07aaeee57cb6adcbd66419cd52d81b13e6502b80e9444b492b650b42838a51b9159a995f20962e51ff6a39d45713402e2"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}], 0x168, 0x4004094}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m11.399329943s ago: executing program 1 (id=6720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_dev$sg(&(0x7f0000000640), 0x46, 0x20000) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000680)) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10}, 0x47c94) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x6, 0x10}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40000020000000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x0) close(0x3) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m8.09992968s ago: executing program 1 (id=6729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 5m4.73576071s ago: executing program 1 (id=6754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x9, 0x0, 0x26, 0x100000, 0x6, 0x0, 0xfff], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x8000000a78, 0x68ff, 0x5, 0x52, 0x0, 0x25a9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xa000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80, 0x4}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x58001, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0x1, 0xf, 0x3, 0x16, 0x7, 0x3, 0x8, 0x9, 0x6, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0x8, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0xeeee0000, 0x3000, 0x4, 0x5, 0x4, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x0, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m4.395718678s ago: executing program 32 (id=6754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x9, 0x0, 0x26, 0x100000, 0x6, 0x0, 0xfff], 0x4, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x8000000a78, 0x68ff, 0x5, 0x52, 0x0, 0x25a9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xa000, 0xeeee0000, 0x3, 0x8, 0xb, 0xe6, 0x40, 0x9, 0x0, 0x81, 0x80, 0x4}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x58001, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0x1, 0xf, 0x3, 0x16, 0x7, 0x3, 0x8, 0x9, 0x6, 0xf7, 0x97}, {0x2000, 0xdddd0000, 0xe, 0xa0, 0x8, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0xeeee0000, 0x3000, 0x4, 0x5, 0x4, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x0, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m14.976175028s ago: executing program 3 (id=7193): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70) 4m14.817562203s ago: executing program 3 (id=7194): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000004dc0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000300)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#\t>\xd5\\\\\xdc\xaf4\x14\xe1%\x80\xa5\xfc\xe46\xc0\xba\x11\xbf\xae&\xd4\x17\xeaIW\xbf*O\xb6\xf6\xae\xc3;\xa2\xbcD8Z\x9a`\xb7V\xe0\xce\x15e7\x05\x82i\x97\x1c\t\x17h2\x96\xaa\xaa\xb7\xa2\x97\x10\xd8,\x1d\xbc\x0f\r\xa6\x89\xe0\x7f\v\"7F\xd9\xcb\xb0\xe5N\xa3g\t\xb4\x86\xbe\xa8\x14\xc5\xfd\x96\xebi\xecg\xf8\xcaj\am\xb7\xf8B\xaf\x05\xef\xd4R~Aq\xf0\x1bY\b\x00\x00\x00\x00\x00\x00\x00\f+D\v\xa4t\x84\x81Y\xbfI`@\x15W\xe9e\x8a\xf0\xa1L', 0x3a, '\\xW/\xbd),\x93=\xe6\xce\xed\xc9\xb0v\xa4T\x1a \xc6}@.{\'o\x93\xf3\x10\xe0\x05b\xb5h\xb5VB\xac\x87\xff>~\xbe\x7f\xeft\xb7U~*\xbd$\xc4\x18\xf2*\xd1\xe0\xe4\x9c\x1d#\xed,\x91\xf4\xb6\x1b~\xd2e\x86\x90\xd9l\x909\xe3B>\"\x9e\xb9\xbaD\"\xea\xfc\xc5J\x9c\xe5R\xd6\xd43\xa7v\xecQ\xcb\xa5\xaef\xbdi\xd5 \xee\x0e\x9e\x19\xc5!X\x14\xf7.V\xfb/&e\xcdD\xce,\x00t\xd5\x13\xf6\xf3I\x01\xeb\xc1\x89\x90z\xf6\xdf\x1b\x03\x00\x00\x00,\xad\xdb~\xcd0[\xa0\xf2 \xcb\xb4X\xad]\xcba\xbf\x00\xe2MJ\x10\xcf\xac\xeb\xe2~\x81z9:\x92\xd8\xf4>\x89\x19\x1d\x04\xb7\xbfu\x10#\xd8D\x18\x11\xa5]b\xddp\xe3s\xbb.\x92\x0e\x1a', 0x3a, './file1'}, 0x18b) 4m14.598703282s ago: executing program 3 (id=7197): creat(&(0x7f00000000c0)='./file0\x00', 0x20) mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=tcp,p000004e22,version=9p2000,access=client']) 4m14.37415488s ago: executing program 3 (id=7201): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 4m14.118201924s ago: executing program 3 (id=7203): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000018}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0xc0000001}) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x20000, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4}, {0xffffffffffffffff, 0x5000}], 0x2, 0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x1a9001, 0x0) 4m13.037490745s ago: executing program 3 (id=7214): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m12.378894855s ago: executing program 33 (id=7214): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m11.499863745s ago: executing program 5 (id=7438): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 3m11.177409631s ago: executing program 5 (id=7440): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}], 0x54) 3m10.917589349s ago: executing program 5 (id=7443): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003200)={'ip6gre0\x00', &(0x7f0000003180)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x7, 0x14e4ef9d, 0x28, @loopback, @empty, 0x20, 0x8, 0x40, 0x6}}) 3m10.711343953s ago: executing program 5 (id=7447): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 3m10.577081571s ago: executing program 5 (id=7449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @device_b, @device_b}, @sp_mp_confirm={0xf, 0x2, {0x202, @default, {}, @val={0x72, 0x6}, @void}}}}]}, 0x48}}, 0x0) 3m9.340725921s ago: executing program 5 (id=7459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="65572abd7000f9dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 3m8.897242996s ago: executing program 34 (id=7459): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="65572abd7000f9dbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 2m42.529538442s ago: executing program 6 (id=7460): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$sndseq(r0, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x6}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x54) 2m42.380347016s ago: executing program 6 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 2m42.168154595s ago: executing program 6 (id=7610): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 2m42.04903502s ago: executing program 6 (id=7612): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x4, {{0x8, 0x101, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 2m26.828810009s ago: executing program 35 (id=7612): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffff8, 0x202, 0x0, 0x0, 0x2, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x4, {{0x8, 0x101, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 11.270679959s ago: executing program 2 (id=8572): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(0x0, 0x0, 0x400) 11.198453509s ago: executing program 7 (id=8573): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 11.08574846s ago: executing program 7 (id=8574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x20000000002) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2eff781a6e53eac0", "5725789a6199713eb603d88fb817faa0", "8dd5df78", "e2a5ac0251ba57c3"}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)}], 0x1}}], 0x1, 0x8000) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 10.893077713s ago: executing program 7 (id=8575): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x7f, 0xb, 0x3, 0x0, 0xfd}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.59623682s ago: executing program 7 (id=8578): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.211746389s ago: executing program 2 (id=8586): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x7f, 0xb, 0x3, 0x0, 0xfd}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.699333944s ago: executing program 4 (id=8599): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.472295168s ago: executing program 7 (id=8600): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(0x0, 0x0, 0x400) 5.389377789s ago: executing program 2 (id=8601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x20000000002) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2eff781a6e53eac0", "5725789a6199713eb603d88fb817faa0", "8dd5df78", "e2a5ac0251ba57c3"}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0x8000) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 5.329363235s ago: executing program 2 (id=8602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x106, 0x0, 0x0, 0x7dff0000}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="f50a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.861854647s ago: executing program 0 (id=8607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.669064185s ago: executing program 0 (id=8608): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 2.600228763s ago: executing program 0 (id=8609): socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x7f, 0xb, 0x3, 0x0, 0xfd}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.583936825s ago: executing program 4 (id=8610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x20000000002) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2eff781a6e53eac0", "5725789a6199713eb603d88fb817faa0", "8dd5df78", "e2a5ac0251ba57c3"}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0x8000) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 2.463474807s ago: executing program 4 (id=8611): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.32828647s ago: executing program 7 (id=8612): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000e00)={0x0, 0x7, 0x2, "e80e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.208561055s ago: executing program 2 (id=8613): prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$rfkill(r2, &(0x7f0000000000)={0x6, 0x21, 0x2, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy_home_node(&(0x7f0000994000/0x4000)=nil, 0x4000, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) 1.025561251s ago: executing program 4 (id=8614): ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101701) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 577.290134ms ago: executing program 0 (id=8615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1d4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {0x7ffc}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x803, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x68}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x16c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "08bd7601a60a1eb27bedf7ac29400506d90e0222d08bcd1f15fe8aa992dd1178ccce58c6e64996fe82a50fd2e8d8292c6a73c094b5653145997961d20c1111f7795c2ea236e8ce305dd758496a31612ef7de5c12fdc3b4b58b98a5903e7625c3cf20670fa6e0bc7dda910e41e7432d4f037f67276d05c61324b6986655a520dba2b247331db0f68d38c0d90f0a138a0993c77fecbb"}, @NL80211_FTM_RESP_ATTR_LCI={0xc7, 0x2, "60073e0a404aa77413c43f4760c131bf950247ec75db98b732fa96d46e0df2ec16a07835d464305fdf0849b5998106652d08952441194d2d5e4653d096aac7418cc2da85e01323defd7ece8e14769c2c98792edc73606f3f47bbb16ea3aa5558933be8d11b029e5df764bd07a3c609c0c39835cea6f1a730bb1cb080ef96d5894f8f86c09344c4233147bed15bd116a16cb7a57304f1eea53d896775196212e2c2c660acdcb5f9cd049ad9e79013c9c2276cbfd7e64d728ba0f4588ad2ef8c760caeea"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}]}, 0x1d4}}, 0x0) 439.096726ms ago: executing program 0 (id=8616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 251.322154ms ago: executing program 0 (id=8617): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000480)=""/74, 0x4a) 110.928865ms ago: executing program 2 (id=8618): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 99.306382ms ago: executing program 4 (id=8619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x303}, '\x00', "9a3790020d4100", "00000001", "3b8eda4d6920ba22"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x20000000002) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2eff781a6e53eac0", "5725789a6199713eb603d88fb817faa0", "8dd5df78", "e2a5ac0251ba57c3"}, 0x28) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x2, 0x8000) bind$inet(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x2}) 0s ago: executing program 4 (id=8620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(0x0, 0x0, 0x400) kernel console output (not intermixed with test programs): rio class 2 [ 1457.851706][ C1] buffer_io_error: 4 callbacks suppressed [ 1457.851719][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1457.984264][T26317] __loop_clr_fd(loop7) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 1458.739803][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1458.898084][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1458.900801][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.900876][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1458.900912][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1458.903985][ T9] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1458.904016][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.904035][ T9] usb 3-1: Product: syz [ 1458.904050][ T9] usb 3-1: Manufacturer: syz [ 1458.904065][ T9] usb 3-1: SerialNumber: syz [ 1459.231899][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1459.792454][T26357] autofs: Unknown parameter '0x0000000000000000' [ 1459.894613][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 1459.912781][ T9] usb 3-1: USB disconnect, device number 123 [ 1460.110290][T14468] udevd[14468]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1463.899194][T19044] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1464.079207][T19044] usb 6-1: Using ep0 maxpacket: 32 [ 1464.082157][T19044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.082216][T19044] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1464.082242][T19044] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1464.085578][T19044] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1464.085609][T19044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.085631][T19044] usb 6-1: Product: syz [ 1464.085647][T19044] usb 6-1: Manufacturer: syz [ 1464.085663][T19044] usb 6-1: SerialNumber: syz [ 1464.353764][T19044] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1464.806223][T19044] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 1464.812356][T19044] usb 6-1: USB disconnect, device number 2 [ 1464.907630][T14464] udevd[14464]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.106057][T26406] 9p: Bad value for 'rfdno' [ 1467.192122][T26455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7429'. [ 1467.433770][T26461] netlink: 'syz.4.7433': attribute type 2 has an invalid length. [ 1467.609264][ T5621] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1467.731699][T26471] IPv4: Oversized IP packet from 127.202.26.0 [ 1468.467676][T26478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7439'. [ 1469.631225][T26506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7452'. [ 1471.308839][T26529] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7464'. [ 1471.338414][T26529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7464'. [ 1471.558323][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1471.597384][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1471.644585][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1471.648061][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1471.658582][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1471.932194][ T5618] Bluetooth: hci2: command 0x041b tx timeout [ 1472.442682][T17867] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.752562][T26545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7467'. [ 1472.761276][T26544] netlink: 'syz.0.7466': attribute type 1 has an invalid length. [ 1473.471490][T17867] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.851665][ T5621] Bluetooth: hci0: command tx timeout [ 1474.470256][T17867] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.684679][T26565] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7474'. [ 1474.765531][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7475'. [ 1474.932747][T26569] netlink: 'syz.4.7476': attribute type 1 has an invalid length. [ 1474.996864][T26571] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1337 [ 1475.225357][T17867] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.907580][T19046] IPVS: starting estimator thread 0... [ 1475.929382][ T5621] Bluetooth: hci0: command tx timeout [ 1475.999358][T26593] IPVS: using max 9 ests per chain, 21600 per kthread [ 1477.404014][T26530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.404365][T26530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.404799][T26530] bridge_slave_0: entered allmulticast mode [ 1477.408713][T26530] bridge_slave_0: entered promiscuous mode [ 1477.446482][T26530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.446915][T26530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.447654][T26530] bridge_slave_1: entered allmulticast mode [ 1477.477612][T26530] bridge_slave_1: entered promiscuous mode [ 1477.560775][T26638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7502'. [ 1478.009385][ T5621] Bluetooth: hci0: command tx timeout [ 1478.074238][T17867] bridge_slave_1: left allmulticast mode [ 1478.074279][T17867] bridge_slave_1: left promiscuous mode [ 1478.074621][T17867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.214298][T17867] bridge_slave_0: left allmulticast mode [ 1478.214339][T17867] bridge_slave_0: left promiscuous mode [ 1478.214648][T17867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.519941][T17867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.600579][T17867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.621563][T17867] bond0 (unregistering): Released all slaves [ 1479.671813][T26530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1479.763488][T26667] tipc: Enabling of bearer rejected, already enabled [ 1479.809402][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1479.824989][T26530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.062640][T26673] netlink: 'syz.0.7510': attribute type 21 has an invalid length. [ 1480.062664][T26673] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7510'. [ 1480.142648][T26673] netlink: 'syz.0.7510': attribute type 4 has an invalid length. [ 1480.142671][T26673] netlink: 'syz.0.7510': attribute type 5 has an invalid length. [ 1480.142685][T26673] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7510'. [ 1480.149334][ T5621] Bluetooth: hci0: command tx timeout [ 1480.156235][T26530] team0: Port device team_slave_0 added [ 1480.198520][T26530] team0: Port device team_slave_1 added [ 1480.422152][T26530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.422173][T26530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.422203][T26530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.426710][T26530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.426728][T26530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.426756][T26530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.790977][T26675] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1480.791004][T26675] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1480.791027][T26675] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1480.798404][T26675] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1480.841892][T26675] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1481.497272][T26530] hsr_slave_0: entered promiscuous mode [ 1481.509928][T26530] hsr_slave_1: entered promiscuous mode [ 1481.511082][T26530] debugfs: 'hsr0' already exists in 'hsr' [ 1481.511101][T26530] Cannot create hsr debugfs directory [ 1482.050989][ T1027] smbdirect: ib_dev[syz2] removed [ 1482.160064][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1482.789173][T17867] hsr_slave_0: left promiscuous mode [ 1482.834339][T17867] hsr_slave_1: left promiscuous mode [ 1482.835868][T26669] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1482.840970][T17867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.841000][T17867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.956630][T17867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.956653][T17867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.308888][T17867] veth1_macvtap: left promiscuous mode [ 1483.318371][T17867] veth0_macvtap: left promiscuous mode [ 1483.318683][T17867] veth1_vlan: left promiscuous mode [ 1483.319883][T17867] veth0_vlan: left promiscuous mode [ 1484.270106][T17867] team0 (unregistering): Port device team_slave_1 removed [ 1484.333877][T17867] team0 (unregistering): Port device team_slave_0 removed [ 1484.547266][T26694] tipc: Enabling of bearer rejected, failed to enable media [ 1484.783219][T26703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7522'. [ 1484.787901][T26703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7522'. [ 1485.187596][T26705] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1485.187639][T26705] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1485.187682][T26705] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1485.526295][T26705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1486.661949][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1486.662487][T26530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1486.716899][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1486.723013][T26530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1486.753647][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1486.796422][T26530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1486.857900][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1486.872562][T26530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1486.896752][T26530] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1487.218985][T26741] tipc: Enabling of bearer rejected, failed to enable media [ 1487.473663][T17856] smbdirect: ib_dev[syz2] removed [ 1487.566339][T26530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.774902][T26755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7532'. [ 1487.869790][T26530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.936532][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.936729][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.080484][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.080672][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.257109][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.257235][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.807783][T26774] syzkaller1: entered promiscuous mode [ 1490.807803][T26774] syzkaller1: entered allmulticast mode [ 1490.827286][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1490.954632][ T5618] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1491.094881][T26788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1491.959690][T26817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1492.603630][T26841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1493.163952][T26530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1493.316332][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7572'. [ 1493.565307][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1494.083212][T26899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1494.405565][T26530] veth0_vlan: entered promiscuous mode [ 1494.510187][T26530] veth1_vlan: entered promiscuous mode [ 1494.615832][T26530] veth0_macvtap: entered promiscuous mode [ 1494.627660][T26530] veth1_macvtap: entered promiscuous mode [ 1494.669381][ T5765] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1494.675706][T26530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1494.717267][T26530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.845120][ T5765] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.845151][ T5765] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1494.856230][ T5765] usb 3-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 1494.856262][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.856284][ T5765] usb 3-1: Product: syz [ 1494.856300][ T5765] usb 3-1: Manufacturer: syz [ 1494.856315][ T5765] usb 3-1: SerialNumber: syz [ 1494.929323][ T1486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.930330][ T1486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.931089][ T1486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.934345][ T1486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.959186][T19046] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1495.140113][T19046] usb 1-1: Using ep0 maxpacket: 8 [ 1495.150891][T19046] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1495.150921][T19046] usb 1-1: config 0 has no interface number 0 [ 1495.157810][T19046] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1495.157841][T19046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.157862][T19046] usb 1-1: Product: syz [ 1495.157878][T19046] usb 1-1: Manufacturer: syz [ 1495.157890][T19046] usb 1-1: SerialNumber: syz [ 1495.217062][T19046] usb 1-1: config 0 descriptor?? [ 1495.440787][T26927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7592'. [ 1495.462685][T19046] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1495.462774][T19046] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1495.510703][T19046] usb 1-1: USB disconnect, device number 127 [ 1495.953427][T26933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1496.490943][T17866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.490968][T17866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.907959][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.907983][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.131162][T26954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7603'. [ 1497.574445][T16391] usb 3-1: USB disconnect, device number 124 [ 1497.675998][T26975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7611'. [ 1498.231839][T27000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7623'. [ 1498.234163][T27000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7623'. [ 1498.690148][T27016] input: syz1 as /devices/virtual/input/input133 [ 1498.827667][T27019] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7632'. [ 1498.850873][T27019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7632'. [ 1499.465860][T27039] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1499.467669][T27039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1500.067664][T27061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1500.084354][T27061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7651'. [ 1501.439313][ T9557] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1501.609174][ T9557] usb 1-1: Using ep0 maxpacket: 32 [ 1501.635395][T27093] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7663'. [ 1501.672623][ T9557] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.672653][ T9557] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1501.675177][ T9557] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1501.675207][ T9557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.675228][ T9557] usb 1-1: Product: syz [ 1501.675242][ T9557] usb 1-1: Manufacturer: syz [ 1501.675254][ T9557] usb 1-1: SerialNumber: syz [ 1501.712158][ T9557] usb 1-1: config 0 descriptor?? [ 1501.766618][T27094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7663'. [ 1501.769287][ T5618] Bluetooth: hci2: command 0x041b tx timeout [ 1501.945200][ T9557] usb 1-1: USB disconnect, device number 2 [ 1502.336257][ T5621] Bluetooth: hci3: unexpected subevent 0x10 length: 11 > 2 [ 1502.716699][T27110] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1337 [ 1502.754883][T27112] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7672'. [ 1502.757001][T27112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7672'. [ 1502.919494][T16391] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 1503.099016][T16391] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1503.099050][T16391] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1503.099072][T16391] usb 3-1: config 0 has no interface number 0 [ 1503.099115][T16391] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1503.099140][T16391] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1503.099165][T16391] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1503.099206][T16391] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1503.099230][T16391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.206880][T16391] usb 3-1: config 0 descriptor?? [ 1503.471276][T16391] usb 3-1: USB disconnect, device number 125 [ 1504.075874][T27146] __nla_validate_parse: 2 callbacks suppressed [ 1504.075897][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1504.183648][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7688'. [ 1504.183676][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7688'. [ 1504.258120][T27152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1504.263972][T27152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1505.498273][T27184] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7701'. [ 1505.500193][T27184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7701'. [ 1505.949231][T19046] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1505.949507][T27204] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1337 [ 1506.103774][T19046] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.103840][T19046] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1506.103867][T19046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.165578][T19046] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1506.566438][T27223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1506.585602][T27223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1506.979260][ T32] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1507.149195][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 1507.152559][ T32] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1507.152588][ T32] usb 1-1: config 0 has no interface number 0 [ 1507.156596][ T32] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1507.156627][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.156647][ T32] usb 1-1: Product: syz [ 1507.156662][ T32] usb 1-1: Manufacturer: syz [ 1507.156677][ T32] usb 1-1: SerialNumber: syz [ 1507.166618][ T32] usb 1-1: config 0 descriptor?? [ 1507.173595][ T32] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1507.225447][T19046] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1507.428493][T19046] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1507.428521][T19046] stv0680 3-1:4.0: last error: 86, command = 0x32 [ 1507.511257][T19046] usb 3-1: USB disconnect, device number 126 [ 1507.687055][ T32] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1507.886898][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1507.918678][ T32] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1507.950662][ T32] usb 1-1: USB disconnect, device number 3 [ 1507.975150][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1508.001400][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1508.008671][ T32] quatech2 1-1:0.51: device disconnected [ 1508.203265][ T37] audit: type=1326 audit(1779153008.034:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.208961][ T37] audit: type=1326 audit(1779153008.034:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.214085][ T37] audit: type=1326 audit(1779153008.034:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.214141][ T37] audit: type=1326 audit(1779153008.034:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.214849][ T37] audit: type=1326 audit(1779153008.044:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.215150][ T37] audit: type=1326 audit(1779153008.044:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.215439][ T37] audit: type=1326 audit(1779153008.044:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27270 comm="syz.2.7722" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fba2ce59 code=0x7ffc0000 [ 1508.284815][T27274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7724'. [ 1509.169295][ T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1509.327597][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1509.327620][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.343396][ T32] usb 1-1: config 0 descriptor?? [ 1509.362960][ T32] cp210x 1-1:0.0: cp210x converter detected [ 1509.765008][ T32] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1509.766039][ T32] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 1509.781662][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1509.968832][T13713] usb 1-1: USB disconnect, device number 4 [ 1509.997832][T13713] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1510.001499][T13713] cp210x 1-1:0.0: device disconnected [ 1510.227606][T27317] __nla_validate_parse: 3 callbacks suppressed [ 1510.227627][T27317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7741'. [ 1510.253644][ T5621] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1510.318264][T27321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7742'. [ 1510.319929][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7742'. [ 1510.996202][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1511.160217][T27342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1511.161464][T27342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7752'. [ 1511.313414][ T5621] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 1511.430998][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7757'. [ 1511.560694][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7759'. [ 1511.879147][T13713] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1512.034223][T13713] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.034270][T13713] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1512.034285][T13713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.051276][T13713] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1512.457741][T27366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7762'. [ 1512.469137][T27366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7762'. [ 1512.769140][T16391] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1512.919161][T16391] usb 3-1: Using ep0 maxpacket: 8 [ 1512.933486][T16391] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1512.937198][T16391] usb 3-1: config 4 has an invalid interface number: 213 but max is 0 [ 1512.937227][T16391] usb 3-1: config 4 has no interface number 0 [ 1512.937276][T16391] usb 3-1: config 4 interface 213 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1512.937304][T16391] usb 3-1: config 4 interface 213 has no altsetting 0 [ 1512.988089][T16391] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=70.0b [ 1512.988123][T16391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.988145][T16391] usb 3-1: Product: syz [ 1512.988160][T16391] usb 3-1: Manufacturer: syz [ 1512.988174][T16391] usb 3-1: SerialNumber: syz [ 1513.328475][T16391] ushc 3-1:4.213: probe with driver ushc failed with error -71 [ 1513.339619][T13713] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 1513.345461][T13713] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1513.345483][T13713] stv0680 1-1:4.0: last error: 86, command = 0x78 [ 1513.378027][T13713] usb 1-1: USB disconnect, device number 5 [ 1513.587345][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1513.669372][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1513.674474][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1513.675723][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1513.676923][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1513.755483][T16391] usb 3-1: USB disconnect, device number 127 [ 1514.379268][T13713] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1514.530639][T13713] usb 3-1: Using ep0 maxpacket: 16 [ 1514.532669][T13713] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1514.532690][T13713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1514.534600][T13713] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1514.534618][T13713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.534630][T13713] usb 3-1: Product: syz [ 1514.534639][T13713] usb 3-1: Manufacturer: syz [ 1514.534647][T13713] usb 3-1: SerialNumber: syz [ 1514.627770][T13713] usb 3-1: config 0 descriptor?? [ 1514.656326][T13713] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1514.656350][T13713] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1515.269598][T13713] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1515.272189][T13713] em28xx 3-1:0.0: Config register raw data: 0xe8 [ 1515.272212][T13713] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1515.272229][T13713] em28xx 3-1:0.0: No AC97 audio processor [ 1515.353548][ T5621] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1515.833927][T27415] __nla_validate_parse: 4 callbacks suppressed [ 1515.833951][T27415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7779'. [ 1515.930600][ T5618] Bluetooth: hci1: command tx timeout [ 1516.137072][ T9] usb 3-1: USB disconnect, device number 2 [ 1516.376844][T27420] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7781'. [ 1516.394516][T27420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7781'. [ 1517.144118][T27377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.144464][T27377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.144814][T27377] bridge_slave_0: entered allmulticast mode [ 1517.166824][T27436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1517.184908][T27377] bridge_slave_0: entered promiscuous mode [ 1517.193101][T27377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.193361][T27377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.193570][T27377] bridge_slave_1: entered allmulticast mode [ 1517.195813][T27377] bridge_slave_1: entered promiscuous mode [ 1517.332983][T27377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.347949][T27377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.412079][T27441] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7789'. [ 1517.439541][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7789'. [ 1517.482084][T27377] team0: Port device team_slave_0 added [ 1517.491706][T27377] team0: Port device team_slave_1 added [ 1517.565051][T27377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.565071][T27377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.565102][T27377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.569673][T27377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.569689][T27377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.569714][T27377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.742359][T27377] hsr_slave_0: entered promiscuous mode [ 1517.743820][T27377] hsr_slave_1: entered promiscuous mode [ 1517.744967][T27377] debugfs: 'hsr0' already exists in 'hsr' [ 1517.744986][T27377] Cannot create hsr debugfs directory [ 1517.947340][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 1518.010590][ T5618] Bluetooth: hci1: command tx timeout [ 1518.247367][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7795'. [ 1518.259983][ T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1518.454403][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1518.454434][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.496503][T27457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7797'. [ 1518.510361][T27457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7797'. [ 1518.522051][ T32] usb 1-1: config 0 descriptor?? [ 1518.543412][ T32] cp210x 1-1:0.0: cp210x converter detected [ 1518.932100][ T32] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1518.932641][ T32] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1518.932697][ T32] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1519.090562][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1519.114179][ T32] usb 1-1: USB disconnect, device number 6 [ 1519.138104][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1519.148525][ T32] cp210x 1-1:0.0: device disconnected [ 1519.357900][T27377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1519.359311][ T9557] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1519.383672][T27377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1519.384938][T27377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1519.424114][T27377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1519.425263][T27377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1519.509592][ T9557] usb 3-1: Using ep0 maxpacket: 16 [ 1519.553347][ T9557] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1519.553382][ T9557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.553398][ T9557] usb 3-1: Product: syz [ 1519.553406][ T9557] usb 3-1: Manufacturer: syz [ 1519.553414][ T9557] usb 3-1: SerialNumber: syz [ 1519.561597][T27377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1519.565536][T27377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1519.566579][ T9557] usb 3-1: config 0 descriptor?? [ 1519.611070][ T9557] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1519.638804][T27377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1519.837839][ T9] usb 3-1: USB disconnect, device number 3 [ 1520.057612][T27487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7806'. [ 1520.093186][ T5621] Bluetooth: hci1: command tx timeout [ 1520.182553][T27377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.252922][T27377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.301875][ T1486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.302032][ T1486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.325061][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.325211][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.740056][ T5775] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1520.890770][ T5775] usb 1-1: Using ep0 maxpacket: 32 [ 1520.903730][ T5775] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1520.903761][ T5775] usb 1-1: config 0 has no interface number 0 [ 1520.932618][ T5775] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1520.932652][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.932674][ T5775] usb 1-1: Product: syz [ 1520.932690][ T5775] usb 1-1: Manufacturer: syz [ 1520.932706][ T5775] usb 1-1: SerialNumber: syz [ 1520.974090][T27510] __nla_validate_parse: 2 callbacks suppressed [ 1520.974111][T27510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1520.976045][T27510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7814'. [ 1521.008715][ T5775] usb 1-1: config 0 descriptor?? [ 1521.024111][ T5775] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1521.080575][ T9557] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1521.234042][ T9557] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.234107][ T9557] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1521.234131][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.277114][ T9557] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1521.300470][ T5775] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1521.335668][ T5621] Bluetooth: hci3: unexpected event for opcode 0x0804 [ 1521.380476][ T5775] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1521.471058][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1521.484504][ T5765] usb 1-1: USB disconnect, device number 7 [ 1521.516634][ T5765] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1521.545724][ T5765] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1521.547964][ T5765] quatech2 1-1:0.51: device disconnected [ 1521.805514][T27377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1522.172544][ T5621] Bluetooth: hci1: command tx timeout [ 1522.207819][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7819'. [ 1522.335281][ T9557] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1522.335310][ T9557] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1522.335836][ T9557] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1522.335856][ T9557] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1522.417894][ T9557] usb 3-1: USB disconnect, device number 4 [ 1522.517595][T27541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7822'. [ 1522.761795][T27377] veth0_vlan: entered promiscuous mode [ 1522.852139][T27377] veth1_vlan: entered promiscuous mode [ 1523.089062][T27377] veth0_macvtap: entered promiscuous mode [ 1523.103989][T27377] veth1_macvtap: entered promiscuous mode [ 1523.228165][T27377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.251605][T27377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1523.283231][T17867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.285705][T17867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.319942][T17867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.325681][T17867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1523.477971][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1523.686928][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 1523.698558][ T32] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1523.698588][ T32] usb 3-1: config 0 has no interface number 0 [ 1523.722578][ T32] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1523.722610][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.722632][ T32] usb 3-1: Product: syz [ 1523.722648][ T32] usb 3-1: Manufacturer: syz [ 1523.722663][ T32] usb 3-1: SerialNumber: syz [ 1523.778132][ T32] usb 3-1: config 0 descriptor?? [ 1523.800047][ T32] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1523.900736][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7828'. [ 1524.174670][ T32] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1524.205173][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1524.289434][ T32] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1524.365238][ T32] usb 3-1: USB disconnect, device number 5 [ 1524.520759][ T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1524.575210][ T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1524.592905][ T32] quatech2 3-1:0.51: device disconnected [ 1525.138739][T27558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1525.279719][T21298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.279743][T21298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.380293][ T5621] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1525.380594][ T5621] Bluetooth: hci3: Injecting HCI hardware error event [ 1525.386201][ T5618] Bluetooth: hci3: hardware error 0x00 [ 1525.741654][T17866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.741678][T17866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.869235][ T5775] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1526.019157][ T5775] usb 3-1: Using ep0 maxpacket: 16 [ 1526.021806][ T5775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.021834][ T5775] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.054576][ T5775] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1526.054609][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.054629][ T5775] usb 3-1: Product: syz [ 1526.054643][ T5775] usb 3-1: Manufacturer: syz [ 1526.054658][ T5775] usb 3-1: SerialNumber: syz [ 1526.075286][T27569] netlink: 'syz.7.7765': attribute type 9 has an invalid length. [ 1526.075307][T27569] netlink: 'syz.7.7765': attribute type 1 has an invalid length. [ 1526.146183][ T5775] usb 3-1: 0:2 : does not exist [ 1526.356828][ T5775] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1526.435443][ T5775] usb 3-1: USB disconnect, device number 6 [ 1526.606247][T27259] udevd[27259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.099192][T22340] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1527.302835][T22340] usb 1-1: Using ep0 maxpacket: 32 [ 1527.304416][T22340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.304436][T22340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.304460][T22340] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1527.304474][T22340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.314402][T22340] usb 1-1: config 0 descriptor?? [ 1527.333365][T22340] hub 1-1:0.0: USB hub found [ 1527.526802][T22340] hub 1-1:0.0: 1 port detected [ 1527.689239][ T5618] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1527.924614][T27588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7839'. [ 1528.147921][T22340] hub 1-1:0.0: activate --> -90 [ 1529.242527][T22340] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 1529.479476][ T5000] usb 1-1: USB disconnect, device number 8 [ 1529.880204][T27611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7848'. [ 1530.409248][ T5775] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1530.559458][ T5775] usb 3-1: Using ep0 maxpacket: 16 [ 1530.561402][ T5775] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1530.561423][ T5775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1530.563184][ T5775] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1530.563203][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.563215][ T5775] usb 3-1: Product: syz [ 1530.563224][ T5775] usb 3-1: Manufacturer: syz [ 1530.563233][ T5775] usb 3-1: SerialNumber: syz [ 1530.568870][ T5775] usb 3-1: config 0 descriptor?? [ 1530.581990][ T5775] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1530.582022][ T5775] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1530.609262][ T32] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1530.761051][ T32] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1530.761084][ T32] usb 1-1: config 1 has no interface number 0 [ 1530.761162][ T32] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1530.761187][ T32] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1530.761202][ T32] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.763864][ T32] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1530.763884][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.763897][ T32] usb 1-1: Product: syz [ 1530.763906][ T32] usb 1-1: Manufacturer: syz [ 1530.763925][ T32] usb 1-1: SerialNumber: syz [ 1530.787479][T27619] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1531.015506][T27619] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1531.238928][ T5775] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1531.265176][ T5775] em28xx 3-1:0.0: Config register raw data: 0xe8 [ 1531.265242][ T5775] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1531.265253][ T5775] em28xx 3-1:0.0: No AC97 audio processor [ 1531.497816][ T32] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1531.518071][ C1] sierra_net 1-1:1.7 wwan0: : unexpected notification bd! [ 1531.674016][ T32] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1531.674506][ T32] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1531.676214][ T32] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1531.676240][ T32] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1531.713001][ T5775] usb 3-1: USB disconnect, device number 7 [ 1531.746410][ T32] usb 1-1: USB disconnect, device number 9 [ 1531.768448][ T32] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1531.981576][ T32] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1532.156395][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1532.488456][T27647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7865'. [ 1532.599173][ T5000] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1532.706077][T27658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7868'. [ 1532.759153][ T5000] usb 3-1: Using ep0 maxpacket: 32 [ 1532.761789][ T5000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.761823][ T5000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.761862][ T5000] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1532.761886][ T5000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.816157][ T5000] usb 3-1: config 0 descriptor?? [ 1532.830126][ T5000] hub 3-1:0.0: USB hub found [ 1533.026220][ T5000] hub 3-1:0.0: 1 port detected [ 1533.599989][T16391] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1533.634885][ T9] hub 3-1:0.0: activate --> -90 [ 1533.759570][T16391] usb 1-1: Using ep0 maxpacket: 16 [ 1533.763477][T16391] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1533.763499][T16391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1533.798242][T16391] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1533.798263][T16391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.798318][T16391] usb 1-1: Product: syz [ 1533.798328][T16391] usb 1-1: Manufacturer: syz [ 1533.798336][T16391] usb 1-1: SerialNumber: syz [ 1533.833490][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1533.834799][ T5775] usb 3-1: USB disconnect, device number 8 [ 1533.835064][ T1486] usb 3-1: Failed to suspend device, error -19 [ 1533.897198][T16391] usb 1-1: config 0 descriptor?? [ 1533.921519][T16391] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1533.921544][T16391] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1534.034334][T27671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7874'. [ 1534.291000][T27677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7877'. [ 1534.524165][T16391] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1534.524827][T16391] em28xx 1-1:0.0: Config register raw data: 0xe8 [ 1534.524840][T16391] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 1534.524850][T16391] em28xx 1-1:0.0: No AC97 audio processor [ 1534.699911][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1534.889886][ T9] usb 3-1: device descriptor read/64, error -71 [ 1534.944288][T16391] usb 1-1: USB disconnect, device number 10 [ 1535.044232][T27689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7883'. [ 1535.150693][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1535.290382][ T9] usb 3-1: device descriptor read/64, error -71 [ 1535.400616][ T9] usb usb3-port1: attempt power cycle [ 1535.571212][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7886'. [ 1535.739237][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1535.803015][ T9] usb 3-1: device descriptor read/8, error -71 [ 1535.943279][T27707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7892'. [ 1536.049371][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1536.069907][ T9] usb 3-1: device descriptor read/8, error -71 [ 1536.125057][T27713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1536.179814][ T9] usb usb3-port1: unable to enumerate USB device [ 1537.542457][T27728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'. [ 1537.650969][T27732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7904'. [ 1537.970463][T16391] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1538.059420][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1538.127565][T16391] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1538.127599][T16391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.127620][T16391] usb 3-1: Product: syz [ 1538.127636][T16391] usb 3-1: Manufacturer: syz [ 1538.127651][T16391] usb 3-1: SerialNumber: syz [ 1538.136608][T16391] usb 3-1: config 0 descriptor?? [ 1538.187758][T16391] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1538.219242][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1538.223351][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.223378][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1538.229367][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1538.229394][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.230172][ T9] usb 1-1: Product: syz [ 1538.230189][ T9] usb 1-1: Manufacturer: syz [ 1538.230204][ T9] usb 1-1: SerialNumber: syz [ 1538.349672][ T9] usb 1-1: 0:2 : does not exist [ 1538.526843][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1538.876888][ T9] usb 1-1: USB disconnect, device number 11 [ 1539.203531][T26973] udevd[26973]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1539.352046][T27750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7911'. [ 1539.745937][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7913'. [ 1540.429425][T27770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7920'. [ 1540.748029][T27778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7924'. [ 1541.811922][T16391] gspca_stk1135: reg_w 0x19 err -71 [ 1541.812963][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.812971][T16391] gspca_stk1135: Sensor write failed [ 1541.812990][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.812995][T16391] gspca_stk1135: Sensor write failed [ 1541.813012][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813018][T16391] gspca_stk1135: Sensor read failed [ 1541.813035][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813041][T16391] gspca_stk1135: Sensor read failed [ 1541.813045][T16391] gspca_stk1135: Detected sensor type unknown (0x0) [ 1541.813066][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813072][T16391] gspca_stk1135: Sensor read failed [ 1541.813089][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813094][T16391] gspca_stk1135: Sensor read failed [ 1541.813111][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813116][T16391] gspca_stk1135: Sensor write failed [ 1541.813134][T16391] gspca_stk1135: serial bus timeout: status=0x00 [ 1541.813139][T16391] gspca_stk1135: Sensor write failed [ 1541.813198][T16391] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1541.934409][T16391] usb 3-1: USB disconnect, device number 13 [ 1542.629549][T27795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7929'. [ 1543.155146][T27805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7933'. [ 1543.892978][T27816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7938'. [ 1544.289242][T22340] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1544.471964][T22340] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1544.471999][T22340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.499889][T22340] usb 3-1: config 0 descriptor?? [ 1544.517344][T22340] cp210x 3-1:0.0: cp210x converter detected [ 1544.617701][T27826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7943'. [ 1544.723393][T22340] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1545.388758][T27839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7948'. [ 1545.763332][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7952'. [ 1546.278572][T27860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7958'. [ 1547.047593][T19046] usb 3-1: USB disconnect, device number 14 [ 1547.084211][T19046] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1547.105522][T19046] cp210x 3-1:0.0: device disconnected [ 1547.356236][ T5618] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1548.115580][T27883] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7969'. [ 1548.115603][T27883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7969'. [ 1548.118001][T27883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7969'. [ 1548.443274][ T5618] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1548.843757][T27904] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7979'. [ 1548.843792][T27904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7979'. [ 1548.845288][T27904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7979'. [ 1549.257104][ T5618] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1549.756394][T27922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1549.756431][T27922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1549.756447][T27922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1549.758037][T27922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7988'. [ 1551.458595][T27948] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1551.458629][T27948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1551.458645][T27948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1551.462585][T27948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1551.555733][T27951] netlink: 568 bytes leftover after parsing attributes in process `syz.0.7999'. [ 1551.576309][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8000'. [ 1551.713877][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.713984][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.059377][ T9557] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1552.223554][ T9557] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1552.223587][ T9557] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.237509][ T9557] usb 1-1: config 0 descriptor?? [ 1552.270509][ T9557] cp210x 1-1:0.0: cp210x converter detected [ 1552.498557][ T9557] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1553.850185][T19046] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1553.999183][T19046] usb 3-1: device descriptor read/64, error -71 [ 1554.239193][T19046] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1554.371158][T19046] usb 3-1: device descriptor read/64, error -71 [ 1554.479668][T19046] usb usb3-port1: attempt power cycle [ 1554.825206][T19046] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1554.841068][T19046] usb 3-1: device descriptor read/8, error -71 [ 1554.874520][ T32] usb 1-1: USB disconnect, device number 12 [ 1554.924902][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1554.925834][ T32] cp210x 1-1:0.0: device disconnected [ 1555.079261][T19046] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1555.100112][T19046] usb 3-1: device descriptor read/8, error -71 [ 1555.103690][T28031] __nla_validate_parse: 16 callbacks suppressed [ 1555.103703][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8036'. [ 1555.209688][T19046] usb usb3-port1: unable to enumerate USB device [ 1555.254302][T28035] netlink: 568 bytes leftover after parsing attributes in process `syz.4.8038'. [ 1556.094768][T28054] netlink: 568 bytes leftover after parsing attributes in process `syz.4.8047'. [ 1556.249183][ T32] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1556.305317][T28060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8050'. [ 1556.306275][T28060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8050'. [ 1556.431171][ T32] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.431203][ T32] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1556.431245][ T32] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1556.431260][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.205061][ T5618] Bluetooth: hci2: ISO packet for unknown connection handle 2827 [ 1557.570356][T28077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8056'. [ 1557.735426][T28083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8059'. [ 1557.736428][T28083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8059'. [ 1558.379295][ T9557] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1558.557786][ T9557] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1558.557820][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.569251][ T9557] usb 3-1: config 0 descriptor?? [ 1558.576801][ T9557] cp210x 3-1:0.0: cp210x converter detected [ 1558.648631][T28101] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8068'. [ 1558.704219][T28101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8068'. [ 1558.786310][ T9557] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1559.041090][ T9557] usb 1-1: USB disconnect, device number 13 [ 1559.297030][ T5618] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1560.474337][T28137] __nla_validate_parse: 2 callbacks suppressed [ 1560.474360][T28137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8084'. [ 1560.839232][ T5000] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1560.865276][T28143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1560.866987][T28143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1560.999459][ T5000] usb 1-1: Using ep0 maxpacket: 8 [ 1561.002082][ T5000] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1561.004578][ T5000] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1561.004596][ T5000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.004608][ T5000] usb 1-1: Product: syz [ 1561.004617][ T5000] usb 1-1: Manufacturer: syz [ 1561.004639][ T5000] usb 1-1: SerialNumber: syz [ 1561.012579][ T5000] usb 1-1: config 0 descriptor?? [ 1561.024376][ T5000] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1561.222840][T16391] usb 3-1: USB disconnect, device number 19 [ 1561.410715][T16391] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1561.412301][T16391] cp210x 3-1:0.0: device disconnected [ 1561.757116][T28158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8093'. [ 1562.080647][T28165] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8096'. [ 1562.084387][T28165] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8096'. [ 1562.344952][ T9557] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1562.521830][ T9557] usb 3-1: Using ep0 maxpacket: 32 [ 1562.537429][ T9557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.537458][ T9557] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1562.545814][ T9557] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1562.545841][ T9557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.545861][ T9557] usb 3-1: Product: syz [ 1562.545874][ T9557] usb 3-1: Manufacturer: syz [ 1562.545943][ T9557] usb 3-1: SerialNumber: syz [ 1562.594930][ T9557] usb 3-1: config 0 descriptor?? [ 1562.835311][ T32] usb 3-1: USB disconnect, device number 20 [ 1563.130455][ T5000] gspca_zc3xx: reg_r err -32 [ 1563.519136][T28182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8103'. [ 1563.730527][ T5000] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1563.730637][ T5000] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1563.919434][T28190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8106'. [ 1564.933060][ T32] usb 1-1: USB disconnect, device number 14 [ 1565.379261][ T32] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1565.548592][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1565.548614][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.583178][ T32] usb 1-1: config 0 descriptor?? [ 1565.597369][ T32] cp210x 1-1:0.0: cp210x converter detected [ 1565.698590][T28211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8115'. [ 1565.805769][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1566.326918][T28222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1566.468126][T28227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1566.716558][T28231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8124'. [ 1567.318539][T28246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8131'. [ 1567.477640][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8133'. [ 1568.239639][T19046] usb 1-1: USB disconnect, device number 15 [ 1568.399114][T13713] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1568.404454][T19046] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1568.432188][T19046] cp210x 1-1:0.0: device disconnected [ 1568.621429][T13713] usb 3-1: Using ep0 maxpacket: 16 [ 1568.636906][T13713] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.636935][T13713] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1568.672973][T13713] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1568.673016][T13713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.673036][T13713] usb 3-1: Product: syz [ 1568.673051][T13713] usb 3-1: Manufacturer: syz [ 1568.673067][T13713] usb 3-1: SerialNumber: syz [ 1568.675012][T28269] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8140'. [ 1568.802530][T13713] usb 3-1: 0:2 : does not exist [ 1569.030927][T13713] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1569.587796][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8142'. [ 1569.802163][T13713] usb 3-1: USB disconnect, device number 21 [ 1570.079640][T27259] udevd[27259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1571.131733][T28297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8150'. [ 1571.779504][ T5618] Bluetooth: Unexpected start frame (len 10) [ 1571.979188][ T5775] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1572.129228][ T5775] usb 1-1: Using ep0 maxpacket: 16 [ 1572.131662][ T5775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.131688][ T5775] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1572.134824][ T5775] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1572.134857][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.134878][ T5775] usb 1-1: Product: syz [ 1572.134888][ T5775] usb 1-1: Manufacturer: syz [ 1572.134896][ T5775] usb 1-1: SerialNumber: syz [ 1572.157312][ T5775] usb 1-1: 0:2 : does not exist [ 1572.159694][T19046] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1572.349217][T19046] usb 3-1: Using ep0 maxpacket: 8 [ 1572.353177][T19046] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1572.353197][T19046] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1572.356270][T19046] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1572.356290][T19046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.356305][T19046] usb 3-1: Product: syz [ 1572.356358][T19046] usb 3-1: Manufacturer: syz [ 1572.356368][T19046] usb 3-1: SerialNumber: syz [ 1572.375274][T19046] usb 3-1: config 0 descriptor?? [ 1572.383914][ T5775] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1572.482800][ T5775] usb 1-1: USB disconnect, device number 16 [ 1572.553664][T27259] udevd[27259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1572.791773][ T5775] usb 3-1: USB disconnect, device number 22 [ 1572.837571][T28321] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8161'. [ 1573.174709][T28331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8165'. [ 1573.174826][T28331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8165'. [ 1573.319267][T28334] netlink: 568 bytes leftover after parsing attributes in process `syz.0.8166'. [ 1573.739584][ T9557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1573.771210][T28342] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8170'. [ 1573.908320][ T9557] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.908381][ T9557] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1573.908405][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.958685][ T9557] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1574.220113][T28354] netlink: 556 bytes leftover after parsing attributes in process `syz.4.8175'. [ 1574.270356][T19046] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1574.419243][T19046] usb 1-1: Using ep0 maxpacket: 16 [ 1574.421460][T19046] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.421489][T19046] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1574.423790][T19046] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1574.423820][T19046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.423842][T19046] usb 1-1: Product: syz [ 1574.423856][T19046] usb 1-1: Manufacturer: syz [ 1574.423866][T19046] usb 1-1: SerialNumber: syz [ 1574.441810][T19046] usb 1-1: 0:2 : does not exist [ 1574.677394][T19046] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1574.726097][T19046] usb 1-1: USB disconnect, device number 17 [ 1574.778169][T27259] udevd[27259]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.973529][ T9557] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 1575.104615][T28363] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8180'. [ 1575.177003][ T9557] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1575.177031][ T9557] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 1575.203013][ T9557] usb 3-1: USB disconnect, device number 23 [ 1575.475387][T28373] netlink: 556 bytes leftover after parsing attributes in process `syz.7.8185'. [ 1575.681621][T28381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8189'. [ 1575.850954][T19046] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1576.005249][T19046] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1576.005285][T19046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.038535][T19046] usb 1-1: config 0 descriptor?? [ 1576.045584][T19046] cp210x 1-1:0.0: cp210x converter detected [ 1576.149220][ T9557] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1576.206006][T28402] __nla_validate_parse: 1 callbacks suppressed [ 1576.206022][T28402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8199'. [ 1576.275240][T19046] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1576.313494][ T9557] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1576.313526][ T9557] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1576.313548][ T9557] usb 3-1: config 0 has no interface number 0 [ 1576.313591][ T9557] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1576.313634][ T9557] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1576.313658][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.378549][ T9557] usb 3-1: config 0 descriptor?? [ 1576.593871][T16391] usb 3-1: USB disconnect, device number 24 [ 1576.962115][T28415] netlink: 556 bytes leftover after parsing attributes in process `syz.4.8205'. [ 1577.173858][T28421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8208'. [ 1578.231444][T28434] netlink: 556 bytes leftover after parsing attributes in process `syz.2.8214'. [ 1578.519323][T13713] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1578.540668][ T32] usb 1-1: USB disconnect, device number 18 [ 1578.574025][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1578.576274][ T32] cp210x 1-1:0.0: device disconnected [ 1578.623165][T28438] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1578.669251][T13713] usb 3-1: Using ep0 maxpacket: 32 [ 1578.671987][T13713] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1578.672016][T13713] usb 3-1: config 0 has no interface number 0 [ 1578.672068][T13713] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1578.675966][T13713] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1578.675997][T13713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.676020][T13713] usb 3-1: Product: syz [ 1578.676036][T13713] usb 3-1: Manufacturer: syz [ 1578.676051][T13713] usb 3-1: SerialNumber: syz [ 1578.758293][T13713] usb 3-1: config 0 descriptor?? [ 1579.377352][T13713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1579.377385][T13713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1580.185961][T13713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1580.186004][T13713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1580.186025][T13713] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1580.186369][T13713] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1580.239285][T13713] usb 3-1: USB disconnect, device number 25 [ 1580.306585][T28459] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8225'. [ 1580.951473][T28479] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8235'. [ 1581.092500][T28483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8237'. [ 1581.131732][ T9557] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1581.287583][ T9557] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1581.287620][ T9557] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1581.287643][ T9557] usb 3-1: Product: syz [ 1581.287659][ T9557] usb 3-1: Manufacturer: syz [ 1581.287675][ T9557] usb 3-1: SerialNumber: syz [ 1581.316415][ T9557] usb 3-1: config 0 descriptor?? [ 1581.337432][ T9557] ch341 3-1:0.0: ch341-uart converter detected [ 1581.530215][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1581.710779][ T9] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1581.710801][ T9] usb 1-1: config 1 has no interface number 0 [ 1581.710829][ T9] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1581.710844][ T9] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1581.710860][ T9] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.717427][ T9] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1581.717459][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.718063][ T9] usb 1-1: Product: syz [ 1581.718080][ T9] usb 1-1: Manufacturer: syz [ 1581.718093][ T9] usb 1-1: SerialNumber: syz [ 1581.745407][T28490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1581.987803][T28490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1582.144994][ T9557] usb 3-1: failed to send control message: -71 [ 1582.145062][ T9557] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1582.219513][ T9557] usb 3-1: USB disconnect, device number 26 [ 1582.238244][ T9557] ch341 3-1:0.0: device disconnected [ 1582.441575][ T9] usb 1-1: Incompatible driver and firmware versions [ 1582.463052][ T9] usb 1-1: USB disconnect, device number 19 [ 1582.708529][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1583.604937][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8259'. [ 1584.069792][T16391] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1584.189096][ T9557] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1584.224867][T16391] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1584.224896][T16391] usb 1-1: config 1 has no interface number 0 [ 1584.224941][T16391] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1584.224957][T16391] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1584.224973][T16391] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.290104][T16391] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1584.290126][T16391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.290139][T16391] usb 1-1: Product: syz [ 1584.290148][T16391] usb 1-1: Manufacturer: syz [ 1584.290156][T16391] usb 1-1: SerialNumber: syz [ 1584.301644][T28534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1584.353362][ T9557] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1584.353385][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.384171][ T9557] usb 3-1: config 0 descriptor?? [ 1584.413001][ T9557] cp210x 3-1:0.0: cp210x converter detected [ 1584.519175][T28534] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1584.616776][ T9557] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1584.924447][T16391] usb 1-1: Incompatible driver and firmware versions [ 1584.941019][T16391] usb 1-1: USB disconnect, device number 20 [ 1585.178092][T28550] fuse: fd is not a fuse device [ 1585.466293][T28554] netlink: 'syz.0.8271': attribute type 1 has an invalid length. [ 1586.704398][ T5618] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1586.967613][T16391] usb 3-1: USB disconnect, device number 27 [ 1586.992351][T16391] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1586.997946][T16391] cp210x 3-1:0.0: device disconnected [ 1587.399388][T16391] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1587.475005][ T5618] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1587.549185][T16391] usb 3-1: Using ep0 maxpacket: 32 [ 1587.552753][T16391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.552783][T16391] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1587.555472][T16391] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1587.555503][T16391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.555525][T16391] usb 3-1: Product: syz [ 1587.555541][T16391] usb 3-1: Manufacturer: syz [ 1587.555556][T16391] usb 3-1: SerialNumber: syz [ 1587.576675][T16391] usb 3-1: config 0 descriptor?? [ 1587.794659][ T9557] usb 3-1: USB disconnect, device number 28 [ 1587.899163][T16391] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1588.052766][T16391] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1588.052916][T16391] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1588.052936][T16391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.073862][T16391] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1588.919175][ T9557] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1589.072145][ T9557] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1589.072181][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.083729][ T9557] usb 3-1: config 0 descriptor?? [ 1589.093413][ T9557] cp210x 3-1:0.0: cp210x converter detected [ 1589.130836][T16391] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1589.130862][T16391] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1589.132585][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 1589.133120][T16391] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 1589.133140][T16391] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 1589.161942][T16391] usb 1-1: USB disconnect, device number 21 [ 1589.308883][ T9557] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1589.969256][T13713] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1590.135736][T13713] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1590.135757][T13713] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1590.135770][T13713] usb 1-1: Product: syz [ 1590.135779][T13713] usb 1-1: Manufacturer: syz [ 1590.135787][T13713] usb 1-1: SerialNumber: syz [ 1590.172877][T13713] usb 1-1: config 0 descriptor?? [ 1590.184686][T13713] ch341 1-1:0.0: ch341-uart converter detected [ 1590.378246][T13713] usb 1-1: failed to receive control message: -32 [ 1590.378321][T13713] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -32 [ 1591.676775][T16391] usb 3-1: USB disconnect, device number 29 [ 1591.716749][T16391] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1591.723391][T16391] cp210x 3-1:0.0: device disconnected [ 1592.099319][T16391] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1592.250196][T16391] usb 3-1: Using ep0 maxpacket: 32 [ 1592.259954][T16391] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1592.259984][T16391] usb 3-1: config 0 has no interface number 0 [ 1592.260037][T16391] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1592.270015][T16391] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1592.270043][T16391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.270062][T16391] usb 3-1: Product: syz [ 1592.270076][T16391] usb 3-1: Manufacturer: syz [ 1592.270090][T16391] usb 3-1: SerialNumber: syz [ 1592.327913][T16391] usb 3-1: config 0 descriptor?? [ 1592.753601][ T9] usb 1-1: USB disconnect, device number 22 [ 1592.762875][ T9] ch341 1-1:0.0: device disconnected [ 1592.827476][ T5618] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 1592.939977][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1592.940001][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1593.546875][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1593.546908][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1593.546927][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1593.547251][T16391] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1593.587346][T16391] usb 3-1: USB disconnect, device number 30 [ 1594.140647][ T5618] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1594.315129][T16391] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1594.474905][T16391] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1594.474942][T16391] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1594.474963][T16391] usb 1-1: Product: syz [ 1594.474978][T16391] usb 1-1: Manufacturer: syz [ 1594.474993][T16391] usb 1-1: SerialNumber: syz [ 1594.486802][T16391] usb 1-1: config 0 descriptor?? [ 1594.520466][T16391] ch341 1-1:0.0: ch341-uart converter detected [ 1594.549226][T13713] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1594.719159][T16391] usb 1-1: failed to receive control message: -32 [ 1594.719226][T16391] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1594.725689][T13713] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1594.725724][T13713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.767283][T13713] usb 3-1: config 0 descriptor?? [ 1594.999911][T13713] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1595.200965][T13713] [drm:udl_init] *ERROR* Selecting channel failed [ 1595.268652][T13713] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1595.268681][T13713] [drm] Initialized udl on minor 2 [ 1595.294294][T13713] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1595.294810][T13713] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1595.357067][T13713] usb 3-1: USB disconnect, device number 31 [ 1595.358019][T19046] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1595.383959][T19046] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1595.384212][T19046] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1597.207576][T13713] usb 1-1: USB disconnect, device number 23 [ 1597.231325][T13713] ch341 1-1:0.0: device disconnected [ 1597.550190][T19044] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1597.679575][T13713] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1597.700485][T19044] usb 3-1: Using ep0 maxpacket: 16 [ 1597.702929][T19044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1597.705541][T19044] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1597.705570][T19044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.705583][T19044] usb 3-1: Product: syz [ 1597.705591][T19044] usb 3-1: Manufacturer: syz [ 1597.705608][T19044] usb 3-1: SerialNumber: syz [ 1597.758355][T19044] usb 3-1: config 0 descriptor?? [ 1597.769332][T19044] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1597.769365][T19044] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1597.839558][T13713] usb 1-1: Using ep0 maxpacket: 32 [ 1597.841536][T13713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.841615][T13713] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1597.841640][T13713] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1597.841655][T13713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.848051][T13713] usb 1-1: config 0 descriptor?? [ 1598.380297][T19044] em28xx 3-1:0.0: chip ID is em2874 [ 1599.013310][T19044] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1599.013521][T19044] em28xx 3-1:0.0: board has no eeprom [ 1599.058700][T28766] em28xx 3-1:0.0: write to i2c device at 0x0 failed with unknown error (status=1) [ 1599.319136][T19044] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1599.319171][T19044] em28xx 3-1:0.0: dvb set to bulk mode. [ 1599.322526][T19046] em28xx 3-1:0.0: Binding DVB extension [ 1599.337094][T19044] usb 3-1: USB disconnect, device number 32 [ 1599.348323][T19044] em28xx 3-1:0.0: Disconnecting em28xx [ 1599.428896][T19046] em28xx 3-1:0.0: Registering input extension [ 1599.550740][T19046] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1599.550764][T19046] Registered IR keymap rc-empty [ 1599.632489][T19046] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1599.644509][T19046] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input135 [ 1599.966348][T19046] em28xx 3-1:0.0: Input extension successfully initialized [ 1599.967241][T19044] em28xx 3-1:0.0: Closing input extension [ 1600.362803][T19046] usb 1-1: USB disconnect, device number 24 [ 1600.539043][T19044] em28xx 3-1:0.0: Freeing device [ 1600.869317][T19044] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1601.029110][T19044] usb 3-1: Using ep0 maxpacket: 8 [ 1601.031280][T19044] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1601.031328][T19044] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1601.031343][T19044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.042151][T19044] usb 3-1: config 0 descriptor?? [ 1601.468140][T19044] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1601.756182][T16391] usb 3-1: USB disconnect, device number 33 [ 1602.639226][T19046] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1602.809042][T19046] usb 3-1: Using ep0 maxpacket: 32 [ 1602.844887][T19046] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.844916][T19046] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.844951][T19046] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1602.844973][T19046] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.902795][T19046] usb 3-1: config 0 descriptor?? [ 1606.081222][ T5000] usb 3-1: USB disconnect, device number 34 [ 1606.351935][T19046] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1606.645615][T19046] usb 1-1: Using ep0 maxpacket: 16 [ 1606.685394][T19046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1606.731263][T19046] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1606.731297][T19046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.731319][T19046] usb 1-1: Product: syz [ 1606.731333][T19046] usb 1-1: Manufacturer: syz [ 1606.731348][T19046] usb 1-1: SerialNumber: syz [ 1606.841712][T19046] usb 1-1: config 0 descriptor?? [ 1606.852640][T19046] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1606.852677][T19046] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1607.582392][T19046] em28xx 1-1:0.0: chip ID is em2874 [ 1608.513471][T19046] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1608.513504][T19046] em28xx 1-1:0.0: board has no eeprom [ 1609.498088][ T5618] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1609.498339][ T5618] CPU: 1 UID: 0 PID: 5618 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1609.498375][ T5618] Tainted: [L]=SOFTLOCKUP [ 1609.498382][ T5618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1609.498396][ T5618] Workqueue: hci1 hci_rx_work [ 1609.498433][ T5618] Call Trace: [ 1609.498442][ T5618] [ 1609.498451][ T5618] dump_stack_lvl+0xe8/0x150 [ 1609.498481][ T5618] sysfs_create_dir_ns+0x271/0x2a0 [ 1609.498510][ T5618] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1609.498534][ T5618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1609.498566][ T5618] ? rt_spin_unlock+0x160/0x200 [ 1609.498592][ T5618] kobject_add_internal+0x631/0xd10 [ 1609.498626][ T5618] kobject_add+0x163/0x240 [ 1609.498651][ T5618] ? __pfx_kobject_add+0x10/0x10 [ 1609.498681][ T5618] ? get_device_parent+0x370/0x3a0 [ 1609.498710][ T5618] device_add+0x408/0xb90 [ 1609.498738][ T5618] hci_conn_add_sysfs+0xd5/0x210 [ 1609.498766][ T5618] le_conn_complete_evt+0x10e6/0x16b0 [ 1609.498820][ T5618] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1609.498851][ T5618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1609.498880][ T5618] ? lockdep_hardirqs_on+0x7a/0x110 [ 1609.498911][ T5618] ? skb_pull_data+0xfb/0x200 [ 1609.498934][ T5618] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1609.498967][ T5618] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1609.499000][ T5618] hci_event_packet+0x659/0xef0 [ 1609.499034][ T5618] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1609.499056][ T5618] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1609.499083][ T5618] ? __pfx_hci_event_packet+0x10/0x10 [ 1609.499108][ T5618] ? rt_spin_unlock+0x14f/0x200 [ 1609.499142][ T5618] ? hci_send_to_monitor+0xe2/0x590 [ 1609.499165][ T5618] hci_rx_work+0x3ee/0x1040 [ 1609.499200][ T5618] ? process_one_work+0x8be/0x1630 [ 1609.499228][ T5618] process_one_work+0x98b/0x1630 [ 1609.499278][ T5618] ? __pfx_process_one_work+0x10/0x10 [ 1609.499304][ T5618] ? do_raw_spin_lock+0x12b/0x2f0 [ 1609.499353][ T5618] worker_thread+0xb49/0x1140 [ 1609.499393][ T5618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1609.499435][ T5618] kthread+0x389/0x470 [ 1609.499458][ T5618] ? __pfx_worker_thread+0x10/0x10 [ 1609.499485][ T5618] ? __pfx_kthread+0x10/0x10 [ 1609.499509][ T5618] ret_from_fork+0x514/0xb70 [ 1609.499536][ T5618] ? __pfx_ret_from_fork+0x10/0x10 [ 1609.499561][ T5618] ? __switch_to+0xc79/0x1410 [ 1609.499584][ T5618] ? __pfx_kthread+0x10/0x10 [ 1609.499607][ T5618] ret_from_fork_asm+0x1a/0x30 [ 1609.499654][ T5618] [ 1609.523707][ T5618] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1609.523832][ T5618] Bluetooth: hci1: failed to register connection device [ 1609.548647][T28852] em28xx 1-1:0.0: writing to i2c device at 0x0 failed (error=-5) [ 1609.610787][T19046] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1609.610819][T19046] em28xx 1-1:0.0: dvb set to bulk mode. [ 1609.889068][ T5775] em28xx 1-1:0.0: Binding DVB extension [ 1610.004400][T19046] usb 1-1: USB disconnect, device number 25 [ 1610.007030][T19046] em28xx 1-1:0.0: Disconnecting em28xx [ 1610.066063][T28875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1610.846068][ T5775] em28xx 1-1:0.0: Registering input extension [ 1611.149071][ T5775] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1611.149092][ T5775] Registered IR keymap rc-empty [ 1611.150442][ T5775] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1611.271488][ T5775] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input136 [ 1611.274688][ T5775] em28xx 1-1:0.0: Input extension successfully initialized [ 1611.274754][T19046] em28xx 1-1:0.0: Closing input extension [ 1611.572604][ T9557] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1611.811643][ T9557] usb 3-1: Using ep0 maxpacket: 32 [ 1611.814429][ T9557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.814456][ T9557] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1611.817505][ T9557] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1611.817534][ T9557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.817555][ T9557] usb 3-1: Product: syz [ 1611.817570][ T9557] usb 3-1: Manufacturer: syz [ 1611.817585][ T9557] usb 3-1: SerialNumber: syz [ 1611.956831][ T9557] usb 3-1: config 0 descriptor?? [ 1612.165222][ T9557] usb 3-1: USB disconnect, device number 35 [ 1613.160327][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.160441][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.293550][ T9557] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1614.778247][ T9557] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1614.778279][ T9557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.964043][T19046] em28xx 1-1:0.0: Freeing device [ 1614.995015][ T9557] usb 3-1: config 0 descriptor?? [ 1615.608548][ T9557] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1615.816349][ T9557] [drm:udl_init] *ERROR* Selecting channel failed [ 1617.294793][ T9557] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1617.294819][ T9557] [drm] Initialized udl on minor 2 [ 1617.328783][ T9557] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1617.337245][ T9557] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1617.441382][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1617.512522][ T9557] usb 3-1: USB disconnect, device number 36 [ 1617.685980][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1617.886254][T16391] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1618.312411][T16391] usb 1-1: Using ep0 maxpacket: 32 [ 1618.317788][T16391] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.317818][T16391] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1618.345282][T16391] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1618.345314][T16391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.345337][T16391] usb 1-1: Product: syz [ 1618.345352][T16391] usb 1-1: Manufacturer: syz [ 1618.345368][T16391] usb 1-1: SerialNumber: syz [ 1618.402771][T16391] usb 1-1: config 0 descriptor?? [ 1618.692820][ T9557] usb 1-1: USB disconnect, device number 26 [ 1623.448431][T16391] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1623.600126][T16391] usb 3-1: Using ep0 maxpacket: 32 [ 1623.614416][T16391] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1623.614446][T16391] usb 3-1: config 0 has no interface number 0 [ 1623.614507][T16391] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1623.617938][T16391] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1623.617968][T16391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.617989][T16391] usb 3-1: Product: syz [ 1623.660615][T16391] usb 3-1: Manufacturer: syz [ 1623.660639][T16391] usb 3-1: SerialNumber: syz [ 1623.681710][T16391] usb 3-1: config 0 descriptor?? [ 1624.156833][T28959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8441'. [ 1624.304571][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1624.304607][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1624.514087][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 1624.514121][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 1624.514142][T16391] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1624.514478][T16391] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1625.300481][ T32] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1625.477312][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 1625.479504][ T32] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1625.479524][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.485386][ T32] usb 1-1: config 0 descriptor?? [ 1625.525966][ T32] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1626.213509][T16391] usb 3-1: USB disconnect, device number 37 [ 1626.586740][T16391] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1626.768250][T16391] usb 3-1: Using ep0 maxpacket: 32 [ 1626.770484][T16391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.770541][T16391] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1626.770587][T16391] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1626.770610][T16391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.777763][T16391] usb 3-1: config 0 descriptor?? [ 1626.801995][T16391] hub 3-1:0.0: bad descriptor, ignoring hub [ 1626.802035][T16391] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1626.805910][T16391] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1628.480652][T29002] fuse: fd is not a fuse device [ 1628.540205][ T32] gspca_vc032x: reg_r err -71 [ 1628.540224][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540236][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540246][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540256][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540267][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540276][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540286][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540296][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540307][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540317][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540327][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540337][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540347][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540356][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540366][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540377][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540387][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 1628.540397][ T32] gspca_vc032x: Unknown sensor... [ 1628.540500][ T32] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1628.672897][ T32] usb 1-1: USB disconnect, device number 27 [ 1629.435343][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1629.585193][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1629.588269][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1629.588509][ T9] usb 1-1: config 0 has no interface number 0 [ 1629.588564][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1629.591108][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1629.591138][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.591160][ T9] usb 1-1: Product: syz [ 1629.591176][ T9] usb 1-1: Manufacturer: syz [ 1629.591191][ T9] usb 1-1: SerialNumber: syz [ 1629.610079][ T9] usb 1-1: config 0 descriptor?? [ 1630.221669][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1630.221704][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1630.247872][T19044] usb 3-1: USB disconnect, device number 38 [ 1630.429011][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1630.429046][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1630.429064][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1630.429082][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1630.429414][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 1630.564747][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 1630.689815][T19044] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1630.889605][T19044] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1630.889644][T19044] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1630.889673][T19044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1630.892026][T19044] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1630.892056][T19044] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1630.892077][T19044] usb 3-1: Product: syz [ 1630.892092][T19044] usb 3-1: Manufacturer: syz [ 1630.892107][T19044] usb 3-1: SerialNumber: syz [ 1630.959158][T19044] usb 3-1: config 0 descriptor?? [ 1630.962595][T29032] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1630.990500][T19044] usb 3-1: selecting invalid altsetting 0 [ 1631.200023][T29032] usb 3-1: BOGUS urb xfer, pipe 0 != type 1 [ 1632.206672][ T9] usb 1-1: USB disconnect, device number 28 [ 1632.376337][ T5621] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1632.376370][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1632.376405][ T5621] Tainted: [L]=SOFTLOCKUP [ 1632.376413][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1632.376426][ T5621] Workqueue: hci4 hci_rx_work [ 1632.376459][ T5621] Call Trace: [ 1632.376469][ T5621] [ 1632.376480][ T5621] dump_stack_lvl+0xe8/0x150 [ 1632.376510][ T5621] sysfs_create_dir_ns+0x271/0x2a0 [ 1632.376549][ T5621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1632.376578][ T5621] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1632.376614][ T5621] ? rt_spin_unlock+0x160/0x200 [ 1632.376642][ T5621] kobject_add_internal+0x631/0xd10 [ 1632.376687][ T5621] kobject_add+0x163/0x240 [ 1632.376721][ T5621] ? __pfx_kobject_add+0x10/0x10 [ 1632.376754][ T5621] ? get_device_parent+0x370/0x3a0 [ 1632.376786][ T5621] device_add+0x408/0xb90 [ 1632.376818][ T5621] hci_conn_add_sysfs+0xd5/0x210 [ 1632.376849][ T5621] le_conn_complete_evt+0x10e6/0x16b0 [ 1632.376891][ T5621] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1632.376924][ T5621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1632.376955][ T5621] ? lockdep_hardirqs_on+0x7a/0x110 [ 1632.376989][ T5621] ? skb_pull_data+0xfb/0x200 [ 1632.377015][ T5621] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1632.377051][ T5621] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1632.377089][ T5621] hci_event_packet+0x659/0xef0 [ 1632.377124][ T5621] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1632.377147][ T5621] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1632.377175][ T5621] ? __pfx_hci_event_packet+0x10/0x10 [ 1632.377201][ T5621] ? rt_spin_unlock+0x14f/0x200 [ 1632.377236][ T5621] ? hci_send_to_monitor+0xe2/0x590 [ 1632.377262][ T5621] hci_rx_work+0x3ee/0x1040 [ 1632.377303][ T5621] ? process_one_work+0x8be/0x1630 [ 1632.377332][ T5621] process_one_work+0x98b/0x1630 [ 1632.377388][ T5621] ? __pfx_process_one_work+0x10/0x10 [ 1632.377414][ T5621] ? do_raw_spin_lock+0x12b/0x2f0 [ 1632.377467][ T5621] worker_thread+0xb49/0x1140 [ 1632.377509][ T5621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1632.377555][ T5621] kthread+0x389/0x470 [ 1632.377580][ T5621] ? __pfx_worker_thread+0x10/0x10 [ 1632.377610][ T5621] ? __pfx_kthread+0x10/0x10 [ 1632.377636][ T5621] ret_from_fork+0x514/0xb70 [ 1632.377676][ T5621] ? __pfx_ret_from_fork+0x10/0x10 [ 1632.377704][ T5621] ? __switch_to+0xc79/0x1410 [ 1632.377730][ T5621] ? __pfx_kthread+0x10/0x10 [ 1632.377762][ T5621] ret_from_fork_asm+0x1a/0x30 [ 1632.377810][ T5621] [ 1632.377962][ T5621] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1632.378005][ T5621] Bluetooth: hci4: failed to register connection device [ 1633.126770][ T5621] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 1633.421280][ T32] usb 3-1: USB disconnect, device number 39 [ 1633.476875][T19046] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1633.633166][T19046] usb 1-1: Using ep0 maxpacket: 8 [ 1633.636228][T19046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1633.636280][T19046] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1633.636305][T19046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1633.639859][T19046] usb 1-1: config 0 descriptor?? [ 1633.913157][ T32] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1634.072568][T19046] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1634.075326][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 1634.092742][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1634.092928][ T32] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1634.092955][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.135625][ T32] usb 3-1: config 0 descriptor?? [ 1634.297407][ T9] usb 1-1: USB disconnect, device number 29 [ 1634.549951][ T32] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1634.754529][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -1 [ 1634.763543][ T9] usb 3-1: USB disconnect, device number 40 [ 1635.073900][T16391] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1635.226624][T16391] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1635.226662][T16391] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1635.226679][T16391] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1635.229071][T16391] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1635.229100][T16391] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1635.229113][T16391] usb 1-1: Product: syz [ 1635.229121][T16391] usb 1-1: Manufacturer: syz [ 1635.229130][T16391] usb 1-1: SerialNumber: syz [ 1635.236444][T16391] usb 1-1: config 0 descriptor?? [ 1635.305390][T29082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1635.345205][T16391] usb 1-1: selecting invalid altsetting 0 [ 1635.419756][ T5621] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 1635.597770][T29082] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 1635.601683][T16391] usb 1-1: USB disconnect, device number 30 [ 1635.793020][T28912] udevd[28912]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1636.206820][ T5621] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 1636.571756][T19046] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1636.699206][ T5621] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 1636.721895][T19046] usb 1-1: Using ep0 maxpacket: 8 [ 1636.726425][T19046] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1636.726457][T19046] usb 1-1: config 0 has no interface number 0 [ 1636.729604][T19046] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1636.729637][T19046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.729659][T19046] usb 1-1: Product: syz [ 1636.729675][T19046] usb 1-1: Manufacturer: syz [ 1636.729691][T19046] usb 1-1: SerialNumber: syz [ 1636.788595][T19046] usb 1-1: config 0 descriptor?? [ 1636.999567][T19046] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1636.999671][T19046] uvcvideo 1-1:0.31: No valid video chain found. [ 1637.019726][T19046] usb 1-1: USB disconnect, device number 31 [ 1637.081625][T19044] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1637.121776][ T5621] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1637.122182][ T5621] Bluetooth: hci4: Injecting HCI hardware error event [ 1637.139990][ T5618] Bluetooth: hci4: hardware error 0x00 [ 1637.274475][T19044] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1637.274506][T19044] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1637.274523][T19044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1637.276990][T19044] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1637.277013][T19044] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1637.277025][T19044] usb 3-1: Product: syz [ 1637.277035][T19044] usb 3-1: Manufacturer: syz [ 1637.277043][T19044] usb 3-1: SerialNumber: syz [ 1637.345019][T19044] usb 3-1: config 0 descriptor?? [ 1637.350888][T29134] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1637.375481][T19044] usb 3-1: selecting invalid altsetting 0 [ 1637.578098][ T9] usb 3-1: USB disconnect, device number 41 [ 1638.431015][ T32] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1638.581110][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 1638.583111][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.583145][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1638.586636][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1638.586666][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.586684][ T32] usb 3-1: Product: syz [ 1638.586699][ T32] usb 3-1: Manufacturer: syz [ 1638.586714][ T32] usb 3-1: SerialNumber: syz [ 1638.597231][ T32] usb 3-1: config 0 descriptor?? [ 1639.079499][T29163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1639.168474][T29163] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1639.175519][T29163] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1639.186296][T29163] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1639.188696][T29163] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1639.440378][ T5618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1640.728644][T29164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.729009][T29164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.729316][T29164] bridge_slave_0: entered allmulticast mode [ 1640.847972][T29164] bridge_slave_0: entered promiscuous mode [ 1640.858800][ T5618] Bluetooth: hci1: command 0x0406 tx timeout [ 1640.862351][T29164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.862637][T29164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.862976][T29164] bridge_slave_1: entered allmulticast mode [ 1640.866599][T29164] bridge_slave_1: entered promiscuous mode [ 1641.224068][ T5000] usb 3-1: USB disconnect, device number 42 [ 1641.370565][ T5621] Bluetooth: hci5: command tx timeout [ 1641.405633][T29164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.420962][T29164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.469655][T29164] team0: Port device team_slave_0 added [ 1641.473177][T29164] team0: Port device team_slave_1 added [ 1641.507738][T29164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.507750][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.507767][T29164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1641.511947][T29164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1641.511961][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.511986][T29164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.611984][ T5000] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1641.658096][T29164] hsr_slave_0: entered promiscuous mode [ 1641.660458][T29164] hsr_slave_1: entered promiscuous mode [ 1641.662292][T29164] debugfs: 'hsr0' already exists in 'hsr' [ 1641.662318][T29164] Cannot create hsr debugfs directory [ 1641.763443][ T5000] usb 3-1: Using ep0 maxpacket: 32 [ 1641.770911][ T5000] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1641.770955][ T5000] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1641.770969][ T5000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.784838][ T5000] usb 3-1: config 0 descriptor?? [ 1641.820751][ T5000] hub 3-1:0.0: bad descriptor, ignoring hub [ 1641.820777][ T5000] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1641.831045][ T5000] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1642.451593][T29164] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.186674][T29164] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.449512][ T5621] Bluetooth: hci5: command tx timeout [ 1644.070308][T29164] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.834401][T29164] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.362090][ T9] usb 3-1: USB disconnect, device number 43 [ 1645.527428][ T5621] Bluetooth: hci5: command tx timeout [ 1645.907867][T22340] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1645.935473][T29164] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1645.960923][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.961976][T29164] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1646.009159][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1646.010963][T29164] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1646.057129][T22340] usb 3-1: Using ep0 maxpacket: 16 [ 1646.059634][T22340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1646.064044][T22340] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1646.064073][T22340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.064093][T22340] usb 3-1: Product: syz [ 1646.064107][T22340] usb 3-1: Manufacturer: syz [ 1646.064121][T22340] usb 3-1: SerialNumber: syz [ 1646.073755][T22340] usb 3-1: config 0 descriptor?? [ 1646.075349][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1646.081397][T29164] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1646.089096][T22340] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1646.089128][T22340] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1646.203781][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1646.287014][T19046] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1646.426938][T19046] usb 1-1: device descriptor read/64, error -71 [ 1646.458820][T29164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.534681][T29164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.555003][T28291] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.555103][T28291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.575399][T28286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.575553][T28286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.677223][T19046] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1646.735922][T22340] em28xx 3-1:0.0: chip ID is em2874 [ 1646.809851][T19046] usb 1-1: device descriptor read/64, error -71 [ 1646.917268][T19046] usb usb1-port1: attempt power cycle [ 1647.256680][T19046] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1647.279247][T19046] usb 1-1: device descriptor read/8, error -71 [ 1647.371151][T22340] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1647.371188][T22340] em28xx 3-1:0.0: board has no eeprom [ 1647.430594][T29164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.527772][T19046] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1647.547145][T19046] usb 1-1: device descriptor read/8, error -71 [ 1647.606228][ T5621] Bluetooth: hci5: command tx timeout [ 1647.660675][T19046] usb usb1-port1: unable to enumerate USB device [ 1647.672705][T22340] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1647.672738][T22340] em28xx 3-1:0.0: dvb set to bulk mode. [ 1647.687920][ T9] em28xx 3-1:0.0: Binding DVB extension [ 1647.710812][T22340] usb 3-1: USB disconnect, device number 44 [ 1647.723058][T22340] em28xx 3-1:0.0: Disconnecting em28xx [ 1647.822607][ T9] em28xx 3-1:0.0: Registering input extension [ 1647.926228][ T9] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1647.926252][ T9] Registered IR keymap rc-empty [ 1647.955581][ T9] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1647.992524][ T9] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input137 [ 1648.022165][ T9] em28xx 3-1:0.0: Input extension successfully initialized [ 1648.022234][T22340] em28xx 3-1:0.0: Closing input extension [ 1648.045007][T29164] veth0_vlan: entered promiscuous mode [ 1648.104315][T29164] veth1_vlan: entered promiscuous mode [ 1648.204348][T22340] em28xx 3-1:0.0: Freeing device [ 1648.353931][T29164] veth0_macvtap: entered promiscuous mode [ 1648.445049][T29164] veth1_macvtap: entered promiscuous mode [ 1648.536995][T29164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.601911][T29164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.628598][T12573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.628889][T12573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.628934][T12573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.628972][T12573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.755788][T16391] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1648.927375][T16391] usb 3-1: Using ep0 maxpacket: 32 [ 1648.930200][T16391] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1648.930251][T16391] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1648.930275][T16391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.028740][T16391] usb 3-1: config 0 descriptor?? [ 1649.054020][T16391] hub 3-1:0.0: bad descriptor, ignoring hub [ 1649.054063][T16391] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1649.080534][T16391] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1650.307714][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.307736][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.528262][T12573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.528286][T12573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.534752][T16391] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1650.684754][T16391] usb 1-1: Using ep0 maxpacket: 16 [ 1650.687469][T16391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1650.691160][T16391] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1650.691189][T16391] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.691209][T16391] usb 1-1: Product: syz [ 1650.691224][T16391] usb 1-1: Manufacturer: syz [ 1650.691238][T16391] usb 1-1: SerialNumber: syz [ 1650.751790][T16391] usb 1-1: config 0 descriptor?? [ 1650.764382][T16391] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1650.774239][T16391] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1651.383476][T16391] em28xx 1-1:0.0: chip ID is em2874 [ 1652.005934][T16391] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1652.005970][T16391] em28xx 1-1:0.0: board has no eeprom [ 1652.294244][T16391] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1652.294278][T16391] em28xx 1-1:0.0: dvb set to bulk mode. [ 1652.294846][ T5000] em28xx 1-1:0.0: Binding DVB extension [ 1652.330912][T16391] usb 1-1: USB disconnect, device number 36 [ 1652.342189][T16391] em28xx 1-1:0.0: Disconnecting em28xx [ 1652.354088][ T5000] em28xx 1-1:0.0: Registering input extension [ 1652.415734][ T5000] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1652.415759][ T5000] Registered IR keymap rc-empty [ 1652.417687][ T5000] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1652.430186][ T5000] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input138 [ 1652.439862][ T5000] em28xx 1-1:0.0: Input extension successfully initialized [ 1652.442968][T16391] em28xx 1-1:0.0: Closing input extension [ 1652.628712][T16391] em28xx 1-1:0.0: Freeing device [ 1652.641735][T19046] usb 3-1: USB disconnect, device number 45 [ 1653.773135][T22340] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1653.923072][T22340] usb 1-1: Using ep0 maxpacket: 16 [ 1653.925066][T22340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.925113][T22340] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1653.928008][T22340] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1653.928040][T22340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.928062][T22340] usb 1-1: Product: syz [ 1653.928077][T22340] usb 1-1: Manufacturer: syz [ 1653.928092][T22340] usb 1-1: SerialNumber: syz [ 1653.949018][T22340] usb 1-1: config 0 descriptor?? [ 1654.444908][ T5765] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1654.606103][ T5765] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.606135][ T5765] usb 5-1: config 0 has no interfaces? [ 1654.606169][ T5765] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1654.606194][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.610957][ T5765] usb 5-1: config 0 descriptor?? [ 1654.672794][T22340] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1654.876898][T22340] usb 3-1: Using ep0 maxpacket: 32 [ 1654.891865][T22340] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1654.891898][T22340] usb 3-1: config 0 has no interface number 0 [ 1654.891948][T22340] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1654.931751][T22340] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1654.931786][T22340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.931799][T22340] usb 3-1: Product: syz [ 1654.931807][T22340] usb 3-1: Manufacturer: syz [ 1654.931816][T22340] usb 3-1: SerialNumber: syz [ 1654.959411][T22340] usb 3-1: config 0 descriptor?? [ 1655.385611][T22340] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1655.385646][T22340] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1655.385667][T22340] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1655.386015][T22340] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1656.556483][ T5765] usb 1-1: USB disconnect, device number 37 [ 1657.142312][ T5000] usb 5-1: USB disconnect, device number 12 [ 1657.524631][T19044] usb 3-1: USB disconnect, device number 46 [ 1659.832312][ T38] INFO: task syz.6.7612:26976 blocked for more than 143 seconds. [ 1659.832335][ T38] Tainted: G L syzkaller #0 [ 1659.832342][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1659.832348][ T38] task:syz.6.7612 state:D stack:24824 pid:26976 tgid:26976 ppid:26530 task_flags:0x400040 flags:0x00080003 [ 1659.832381][ T38] Call Trace: [ 1659.832386][ T38] [ 1659.832397][ T38] __schedule+0x16f9/0x5500 [ 1659.832432][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1659.832451][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1659.832466][ T38] ? __pfx___schedule+0x10/0x10 [ 1659.832495][ T38] ? schedule+0x90/0x360 [ 1659.832511][ T38] schedule+0x164/0x360 [ 1659.832527][ T38] fuse_chan_send+0x1057/0x1aa0 [ 1659.832550][ T38] ? __pfx_fuse_chan_send+0x10/0x10 [ 1659.832566][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1659.832587][ T38] ? pid_nr_ns+0xd4/0x150 [ 1659.832603][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1659.832621][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 1659.832637][ T38] ? __fuse_simple_request+0x7a/0xb0 [ 1659.832654][ T38] fuse_flush+0x677/0x8b0 [ 1659.832672][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1659.832689][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1659.832714][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1659.832729][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1659.832743][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1659.832756][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1659.832770][ T38] filp_flush+0xc0/0x190 [ 1659.832788][ T38] filp_close+0x1d/0x40 [ 1659.832803][ T38] __se_sys_close_range+0x3d7/0x900 [ 1659.832825][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1659.832846][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.832859][ T38] do_syscall_64+0x15f/0xf80 [ 1659.832875][ T38] ? trace_irq_disable+0x3b/0x140 [ 1659.832892][ T38] ? clear_bhb_loop+0x40/0x90 [ 1659.832907][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.832919][ T38] RIP: 0033:0x7eff9491ce59 [ 1659.832931][ T38] RSP: 002b:00007ffea3ed9168 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1659.832944][ T38] RAX: ffffffffffffffda RBX: 00007ffea3ed9250 RCX: 00007eff9491ce59 [ 1659.832954][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1659.832961][ T38] RBP: 000000000016d77f R08: 0000000000000001 R09: 0000000000000000 [ 1659.832969][ T38] R10: 0000001b2d920000 R11: 0000000000000246 R12: 00007ffea3ed9290 [ 1659.832977][ T38] R13: 00007eff94b9609c R14: 000000000016d84c R15: 00007eff94b96090 [ 1659.832996][ T38] [ 1659.833015][ T38] [ 1659.833015][ T38] Showing all locks held in the system: [ 1659.833022][ T38] 1 lock held by khungtaskd/38: [ 1659.833030][ T38] #0: ffffffff8e1ca240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1659.833086][ T38] 2 locks held by getty/5370: [ 1659.833093][ T38] #0: ffff88803652c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1659.833123][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1659.833164][ T38] 6 locks held by kworker/1:3/19044: [ 1659.833171][ T38] #0: ffff88801ab09938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1659.833203][ T38] #1: ffffc9000fb1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1659.833236][ T38] #2: ffff88802a084210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1659.833264][ T38] #3: ffff88802a0a2658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 1659.833291][ T38] #4: ffff888028abc358 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 1659.833319][ T38] #5: ffffffff8ee41e20 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 1659.833347][ T38] 3 locks held by kworker/1:4/19046: [ 1659.833354][ T38] #0: ffff88813fe12938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1659.833385][ T38] #1: ffffc9000fb4fc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1659.833418][ T38] #2: ffff888029dce210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1659.833454][ T38] [ 1659.833458][ T38] ============================================= [ 1659.833458][ T38] [ 1659.833464][ T38] NMI backtrace for cpu 0 [ 1659.833480][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.833497][ T38] Tainted: [L]=SOFTLOCKUP [ 1659.833502][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1659.833509][ T38] Call Trace: [ 1659.833514][ T38] [ 1659.833519][ T38] dump_stack_lvl+0xe8/0x150 [ 1659.833535][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1659.833549][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1659.833564][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1659.833579][ T38] sys_info+0x135/0x170 [ 1659.833597][ T38] watchdog+0xfd3/0x1030 [ 1659.833618][ T38] ? watchdog+0x1c9/0x1030 [ 1659.833637][ T38] kthread+0x389/0x470 [ 1659.833650][ T38] ? __pfx_watchdog+0x10/0x10 [ 1659.833665][ T38] ? __pfx_kthread+0x10/0x10 [ 1659.833677][ T38] ret_from_fork+0x514/0xb70 [ 1659.833693][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1659.833707][ T38] ? __switch_to+0xc79/0x1410 [ 1659.833720][ T38] ? __pfx_kthread+0x10/0x10 [ 1659.833733][ T38] ret_from_fork_asm+0x1a/0x30 [ 1659.833755][ T38] [ 1659.833775][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1659.833815][ C1] NMI backtrace for cpu 1 [ 1659.833833][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.833857][ C1] Tainted: [L]=SOFTLOCKUP [ 1659.833863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1659.833873][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1659.833898][ C1] Code: fb 69 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 6e 13 00 fb f4 4c cb 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1659.833913][ C1] RSP: 0018:ffffc900001e7e20 EFLAGS: 00000242 [ 1659.833928][ C1] RAX: 0000000000c2cbe5 RBX: ffffffff8199f6da RCX: 0000000080000001 [ 1659.833942][ C1] RDX: 0000000000000001 RSI: ffffffff8d754f7a RDI: ffffffff8baa8560 [ 1659.833954][ C1] RBP: ffffc900001e7f10 R08: ffff8880b8733d5b R09: 1ffff110170e67ab [ 1659.833967][ C1] R10: dffffc0000000000 R11: ffffed10170e67ac R12: 0000000000000001 [ 1659.833979][ C1] R13: 1ffff11003b5bb88 R14: 0000000000000001 R15: 1ffff11003b5bb88 [ 1659.833991][ C1] FS: 0000000000000000(0000) GS:ffff888125dab000(0000) knlGS:0000000000000000 [ 1659.834006][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1659.834018][ C1] CR2: 00007fc4a3885fc0 CR3: 000000005d354000 CR4: 00000000003526f0 [ 1659.834036][ C1] Call Trace: [ 1659.834043][ C1] [ 1659.834049][ C1] default_idle+0x9/0x20 [ 1659.834073][ C1] default_idle_call+0x72/0xb0 [ 1659.834088][ C1] do_idle+0x36a/0x5f0 [ 1659.834112][ C1] ? __pfx_do_idle+0x10/0x10 [ 1659.834133][ C1] ? do_idle+0x10/0x5f0 [ 1659.834155][ C1] cpu_startup_entry+0x43/0x60 [ 1659.834175][ C1] start_secondary+0x101/0x110 [ 1659.834203][ C1] common_startup_64+0x13e/0x157 [ 1659.834241][ C1] [ 1659.834799][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1659.834811][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1659.834827][ T38] Tainted: [L]=SOFTLOCKUP [ 1659.834832][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1659.834839][ T38] Call Trace: [ 1659.834844][ T38] [ 1659.834849][ T38] vpanic+0x56c/0xa60 [ 1659.834866][ T38] ? __pfx___schedule+0x10/0x10 [ 1659.834880][ T38] ? __pfx_vpanic+0x10/0x10 [ 1659.834901][ T38] panic+0xc5/0xd0 [ 1659.834916][ T38] ? __pfx_panic+0x10/0x10 [ 1659.834932][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1659.834951][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1659.834966][ T38] watchdog+0x102c/0x1030 [ 1659.834986][ T38] ? watchdog+0x1c9/0x1030 [ 1659.835004][ T38] kthread+0x389/0x470 [ 1659.835016][ T38] ? __pfx_watchdog+0x10/0x10 [ 1659.835031][ T38] ? __pfx_kthread+0x10/0x10 [ 1659.835044][ T38] ret_from_fork+0x514/0xb70 [ 1659.835059][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1659.835072][ T38] ? __switch_to+0xc79/0x1410 [ 1659.835085][ T38] ? __pfx_kthread+0x10/0x10 [ 1659.835098][ T38] ret_from_fork_asm+0x1a/0x30 [ 1659.835123][ T38] [ 1659.835530][ T38] Kernel Offset: disabled