last executing test programs: 6m17.922399767s ago: executing program 2 (id=77): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08070002005800000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008006558000000"], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x13, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8c0) 6m14.088030312s ago: executing program 2 (id=84): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m10.731811138s ago: executing program 2 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$keyring(0x0, &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', r2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x28, 0x4, @thr={&(0x7f0000000740)="9af77ef1ff77e9faa49e8c2fbd3e1536cba8217b88fda7b369a61e3377a55f0e2129cdef9a3908f306875bb3423d36a18dd8b8157298dc5835635f96b5c6ed", &(0x7f00000002c0)}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe2(0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000026c0), 0x0) 6m5.604353175s ago: executing program 2 (id=94): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040800) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0xffffffffffffffff}, {0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400000000000077, 0x7600) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6m3.00344575s ago: executing program 2 (id=99): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 6m0.984477312s ago: executing program 2 (id=104): r0 = socket$inet_udplite(0x2, 0x2, 0x88) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb4b, 0x9, 0x8, 0x2, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064b8a26611b8dc4a3b92ad608a6871751c641c"]}, 0x14d) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25140000000c0007800800020007000000"], 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c000c80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 5m45.519979265s ago: executing program 32 (id=104): r0 = socket$inet_udplite(0x2, 0x2, 0x88) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb4b, 0x9, 0x8, 0x2, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000ffffffff00000000199b6a8994bb02671379b252b4e908f52d8a78ae81a4920053f0432fcd6ab7803c2b343a18dab88938f7f2131caa976ffcf064b8a26611b8dc4a3b92ad608a6871751c641c"]}, 0x14d) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25140000000c0007800800020007000000"], 0x20}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b"], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c000c80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m31.598754959s ago: executing program 4 (id=838): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r2], 0x5c}}, 0x40) 2m30.006930073s ago: executing program 4 (id=849): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000003780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x2b, 0x81, 0x21004040, 0x5, 0xd65b, 0x7c, 0x1850c00, 0x0, 0x0, 0x40, 0x6}}, 0x50) 2m29.317392938s ago: executing program 4 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x0, 0x1a706}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040090}, 0x4000844) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m28.768234754s ago: executing program 4 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2m28.357991618s ago: executing program 4 (id=863): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 2m28.169718029s ago: executing program 4 (id=868): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) 2m13.089879589s ago: executing program 33 (id=868): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) ioctl$NBD_DO_IT(r0, 0xab03) 6.147367586s ago: executing program 5 (id=1915): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x8000, 0x10001, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x8, 0x0, 0x2, [0x71a]}]}}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.088482547s ago: executing program 1 (id=1917): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 5.947252031s ago: executing program 1 (id=1920): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(0x0, 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6f5f9e67baf3aa14, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.793883165s ago: executing program 1 (id=1922): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0x10, 0x1, "eb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x20, 0x4, 0x19, {0x19, 0x11, "32b4746272d0d387eebc9fa6ff822bbd366416df37f296"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a40)={0x20, 0xf, 0x5c, "454cc29f4bef68791f000f7317d4792b8f3d803b744bb63dffb43676c71ae4eb5e9e54aed5ac01ebfe180ec7cf5bdb82e207fb87f286c301884ebcfdb55abdb32a90c01a8111977fdec962201640b5b29066fce69c70c70bb4957b06"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xc}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000680)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3d, 0x9, 0x8}) syz_usb_control_io$lan78xx(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x40, 0xf83ffe5a0602b6e6, 0x6b, {0x6b, 0xc, "21f7e721059dd6ff1a765f1b52779d1f985816adfadf2dda0c55e18b8cf45683cc9685a4972a39955640330836330785f5a5bcca3de89b3d582e00c3a6250876afbade5e29b59155ea6d6990c4b03b7a1a32423dc1eec5d566642ddc44eb1fd75d11a54103346ea037"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 4.336150286s ago: executing program 3 (id=1928): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 4.181305413s ago: executing program 5 (id=1930): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[], 0x6f4}}, 0x0) 3.900051592s ago: executing program 5 (id=1933): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x358}, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 3.862839901s ago: executing program 6 (id=1934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.836200174s ago: executing program 5 (id=1935): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) r1 = open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3.707469291s ago: executing program 5 (id=1938): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/60, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.644713706s ago: executing program 5 (id=1943): sched_setattr(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.64383806s ago: executing program 6 (id=1944): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.258158198s ago: executing program 6 (id=1947): syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 2.152912422s ago: executing program 1 (id=1949): fsopen(0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0xe82e, 0x100) socketpair$unix(0x1, 0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mprotect(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) socket(0x2b, 0x1, 0x1) 2.10849876s ago: executing program 6 (id=1950): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff1107"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0) 1.936597699s ago: executing program 3 (id=1954): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x7e5104, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="420000000100000004000000000000b028b96d02d2f55c032381e40000000000200000001ec0109e384799f6c7330e35f3c757b8bb33b9581f7210bbd3"], 0x24, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x1000}, &(0x7f0000000480)=ANY=[], 0x0, &(0x7f0000000a40)=""/4096) 1.803466071s ago: executing program 1 (id=1956): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005e9eb4104c053800f516010203010902120001000000000904"], 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x8, 0x1}, &(0x7f0000000140)=0x10) 1.091287545s ago: executing program 3 (id=1959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 709.676112ms ago: executing program 3 (id=1967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000020000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000055090100000000009500000000000000181100"/59, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000880)}], 0x3}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 484.724428ms ago: executing program 3 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 407.39368ms ago: executing program 3 (id=1973): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() r2 = socket(0x3, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x11e, 0x1, 0x0, 0x300) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) 297.076598ms ago: executing program 6 (id=1977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 212.31397ms ago: executing program 0 (id=1979): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 179.835436ms ago: executing program 0 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) 148.271415ms ago: executing program 0 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="750a0000000000006111a4000000000018000000000000000000000000000000950000000000000014318aea72f69c22333a691e228d93954189d4ce08d5647026d230a16ddf566b44229de8ec1966a26c764e45053dbc4e0dcb1aff"], &(0x7f0000000000)='GPL\x00'}, 0x94) 68.466022ms ago: executing program 0 (id=1982): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00160c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)={0x40, 0x12, 0x14, "f00cf1ed246fa605f58d2394e1dfc1064e23bb31"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 67.933369ms ago: executing program 0 (id=1983): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00"/11], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x6}}}}}, 0x0) 27.476343ms ago: executing program 0 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.051505ms ago: executing program 1 (id=1985): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "7fefc0", 0x48, 0x11, 0x1, @private2, @local, {[], {0x4e23, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "ebee7c7762616809438d1f149faeccaa5e18d4e6893fd6d1", "da252b4b7609f7a8bbd14dfc52aea525ec033b332dc8d430cf6450ca3bed8c7b"}}}}}}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 0s ago: executing program 6 (id=1986): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 386.892336][ T9] usb 4-1: Manufacturer: syz [ 386.892351][ T9] usb 4-1: SerialNumber: syz [ 386.900989][ T9] usb 4-1: config 0 descriptor?? [ 386.924795][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 386.924828][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 387.541337][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 387.542159][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 388.133461][ T7541] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 388.156062][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 388.318613][ T7541] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 388.318643][ T7541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.318670][ T7541] usb 1-1: Product: syz [ 388.318685][ T7541] usb 1-1: Manufacturer: syz [ 388.318699][ T7541] usb 1-1: SerialNumber: syz [ 388.356406][ T7541] usb 1-1: config 0 descriptor?? [ 388.371703][ T7541] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 388.397607][ T7541] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.398463][ T7541] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 388.398518][ T7541] usb 1-1: media controller created [ 388.400073][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 388.400498][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 388.400981][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 388.401390][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 388.401795][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 388.413555][ T9] usb 4-1: USB disconnect, device number 12 [ 388.484921][ T7541] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.552963][ T7541] DVB: Unable to find symbol mt352_attach() [ 388.615459][ T7541] DVB: Unable to find symbol nxt6000_attach() [ 388.615474][ T7541] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 388.619673][ T7541] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 388.651628][ T7541] dvb-usb: schedule remote query interval to 1000 msecs. [ 388.651654][ T7541] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 388.651664][ T7541] dvb-usb: bulk message failed: -22 (7/0) [ 388.651673][ T7541] dvb-usb: bulk message failed: -22 (7/0) [ 388.683563][ T7541] usb 1-1: USB disconnect, device number 29 [ 388.800733][ T7541] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 389.310534][ T9049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1075'. [ 389.567874][ T9052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.294910][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 390.453583][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 390.455445][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 390.455469][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.455481][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.455494][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 390.455505][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 390.455527][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 390.455539][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.461650][ T9] usb 6-1: config 0 descriptor?? [ 390.583677][ T5802] Bluetooth: hci1: urb ffff888026b11b00 submission failed (90) [ 390.903150][ T31] usb 6-1: USB disconnect, device number 9 [ 391.183347][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 391.333349][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 391.345811][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 391.345844][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.345866][ T9] usb 1-1: Product: syz [ 391.345881][ T9] usb 1-1: Manufacturer: syz [ 391.345895][ T9] usb 1-1: SerialNumber: syz [ 391.387033][ T9] usb 1-1: config 0 descriptor?? [ 391.392312][ T9] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 391.621470][ T9] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 393.113385][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 393.193062][ T7020] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.210060][ T7020] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.211293][ T7020] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.212937][ T7020] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.237642][ T7020] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.303481][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 393.305970][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 393.306004][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.306028][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 393.306053][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 393.306076][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 393.306115][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 393.306139][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.019994][ T5837] usb 1-1: USB disconnect, device number 30 [ 394.260655][ T31] usb 4-1: config 0 descriptor?? [ 394.307513][ T5802] Bluetooth: hci6: urb ffff888034023a00 submission failed (90) [ 394.942979][ T31] usb 4-1: USB disconnect, device number 13 [ 395.345939][ T5802] Bluetooth: hci1: command tx timeout [ 395.891798][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 396.138684][ T9188] veth0_to_team: entered promiscuous mode [ 397.533751][ T5802] Bluetooth: hci1: command tx timeout [ 398.737207][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.737341][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.737552][ T9127] bridge_slave_0: entered allmulticast mode [ 398.747496][ T9127] bridge_slave_0: entered promiscuous mode [ 398.764812][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.769195][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.769410][ T9127] bridge_slave_1: entered allmulticast mode [ 398.789847][ T9127] bridge_slave_1: entered promiscuous mode [ 399.210979][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.226249][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.544162][ T9127] team0: Port device team_slave_0 added [ 399.565590][ T9127] team0: Port device team_slave_1 added [ 399.572551][ T5802] Bluetooth: hci1: command tx timeout [ 400.006115][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.006131][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.006157][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.166152][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.166168][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.166195][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.529376][ T9127] hsr_slave_0: entered promiscuous mode [ 400.530757][ T9127] hsr_slave_1: entered promiscuous mode [ 400.531860][ T9127] debugfs: 'hsr0' already exists in 'hsr' [ 400.531885][ T9127] Cannot create hsr debugfs directory [ 401.236573][ T37] audit: type=1326 audit(1762535867.574:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.236625][ T37] audit: type=1326 audit(1762535867.574:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.251786][ T37] audit: type=1326 audit(1762535867.574:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.251836][ T37] audit: type=1326 audit(1762535867.584:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.251875][ T37] audit: type=1326 audit(1762535867.584:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.322645][ T37] audit: type=1326 audit(1762535867.654:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.360837][ T37] audit: type=1326 audit(1762535867.694:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.360891][ T37] audit: type=1326 audit(1762535867.694:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.361177][ T37] audit: type=1326 audit(1762535867.694:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.441654][ T37] audit: type=1326 audit(1762535867.704:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9303 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7219f6c9 code=0x7ffc0000 [ 401.579007][ T9309] netlink: 'syz.5.1186': attribute type 1 has an invalid length. [ 401.623332][ T5802] Bluetooth: hci1: command tx timeout [ 401.880581][ T9311] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 401.881980][ T9311] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 402.244743][ T9309] bond1: (slave gretap1): making interface the new active one [ 402.276507][ T9309] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 402.603352][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.705170][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.846502][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.911874][ T9314] macvlan2: entered promiscuous mode [ 402.911902][ T9314] macvlan2: entered allmulticast mode [ 402.912943][ T9314] bond1: entered promiscuous mode [ 402.912960][ T9314] gretap1: entered promiscuous mode [ 402.936504][ T9314] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 403.114572][ T9314] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 403.156593][ T9314] bond1: left promiscuous mode [ 403.156617][ T9314] gretap1: left promiscuous mode [ 404.162461][ T9127] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 404.202982][ T9127] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.251139][ T9127] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.280632][ T9127] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.546560][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.576378][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.595416][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.595630][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.629695][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.630327][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.015371][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 405.120909][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.011386][ T9127] veth0_vlan: entered promiscuous mode [ 406.031609][ T9127] veth1_vlan: entered promiscuous mode [ 406.112249][ T9127] veth0_macvtap: entered promiscuous mode [ 406.153539][ T9127] veth1_macvtap: entered promiscuous mode [ 406.246061][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.398452][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.416009][ T6572] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.416731][ T6572] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.421304][ T6572] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.445600][ T6572] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.713471][ T5947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.713491][ T5947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.794472][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.794492][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.094584][ T7541] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 407.393821][ T7541] usb 1-1: Using ep0 maxpacket: 16 [ 407.401287][ T7541] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 407.401308][ T7541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.409583][ T7541] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 407.409613][ T7541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.409632][ T7541] usb 1-1: Product: syz [ 407.409647][ T7541] usb 1-1: Manufacturer: syz [ 407.409661][ T7541] usb 1-1: SerialNumber: syz [ 407.421179][ T7541] usb 1-1: config 0 descriptor?? [ 407.450549][ T7541] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 407.450582][ T7541] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 407.533657][ T11] block nbd4: Possible stuck request ffff8880248f5080: control (read@0,4096B). Runtime 30 seconds [ 407.713446][ T5900] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 407.863696][ T5900] usb 7-1: Using ep0 maxpacket: 32 [ 407.865387][ T5900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 407.867223][ T5900] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 407.867239][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.867250][ T5900] usb 7-1: Product: syz [ 407.867261][ T5900] usb 7-1: Manufacturer: syz [ 407.867268][ T5900] usb 7-1: SerialNumber: syz [ 407.871981][ T5900] usb 7-1: config 0 descriptor?? [ 408.150075][ T7541] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 408.161059][ T7541] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 408.252501][ T5900] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 408.259811][ T5900] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 408.386145][ T5900] usb 7-1: USB disconnect, device number 2 [ 409.196616][ T7541] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc5be5 [ 409.244276][ T990] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 409.399981][ T7541] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 409.400320][ T7541] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 409.400665][ T7541] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 409.400955][ T7541] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 409.401280][ T7541] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 409.401580][ T7541] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 409.403416][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 409.414562][ T7541] usb 1-1: USB disconnect, device number 31 [ 409.463600][ T990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 409.466652][ T990] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 409.466668][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.466678][ T990] usb 7-1: Product: syz [ 409.466686][ T990] usb 7-1: Manufacturer: syz [ 409.466693][ T990] usb 7-1: SerialNumber: syz [ 409.485571][ T990] usb 7-1: config 0 descriptor?? [ 409.489266][ T990] gs_usb 7-1:0.0: Required endpoints not found [ 409.823617][ T6261] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 409.993311][ T6261] usb 6-1: Using ep0 maxpacket: 32 [ 409.998352][ T6261] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 409.998382][ T6261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.031506][ T6261] usb 6-1: config 0 descriptor?? [ 410.250008][ T6261] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 410.272768][ T6261] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 410.301046][ T6261] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 410.301113][ T6261] usb 6-1: media controller created [ 410.364536][ T6261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.513829][ T6261] az6027: usb out operation failed. (-71) [ 410.514985][ T6261] az6027: usb out operation failed. (-71) [ 410.515001][ T6261] stb0899_attach: Driver disabled by Kconfig [ 410.515012][ T6261] az6027: no front-end attached [ 410.515012][ T6261] [ 410.515428][ T6261] az6027: usb out operation failed. (-71) [ 410.515442][ T6261] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 410.520631][ T6261] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7 [ 410.612399][ T6261] dvb-usb: schedule remote query interval to 400 msecs. [ 410.612422][ T6261] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 410.636461][ T6261] usb 6-1: USB disconnect, device number 10 [ 410.666499][ T7020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.670514][ T7020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.671443][ T7020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.672409][ T7020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.673118][ T7020] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.865157][ T6261] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 411.518102][ T6002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.742576][ T9529] syzkaller1: entered promiscuous mode [ 411.742599][ T9529] syzkaller1: entered allmulticast mode [ 411.996727][ T9] usb 7-1: USB disconnect, device number 3 [ 412.202499][ T6002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.386417][ T5900] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 412.534021][ T5900] usb 4-1: device descriptor read/64, error -71 [ 412.672539][ T6002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.743913][ T7020] Bluetooth: hci4: command tx timeout [ 412.773443][ T5900] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 412.833422][ T6261] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 412.914080][ T5900] usb 4-1: device descriptor read/64, error -71 [ 412.968056][ T6002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.996456][ T6261] usb 6-1: config 0 has an invalid interface number: 243 but max is 0 [ 412.996485][ T6261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.996506][ T6261] usb 6-1: config 0 has no interface number 0 [ 412.996530][ T6261] usb 6-1: too many endpoints for config 0 interface 243 altsetting 246: 130, using maximum allowed: 30 [ 412.996553][ T6261] usb 6-1: config 0 interface 243 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 130 [ 412.996569][ T6261] usb 6-1: config 0 interface 243 has no altsetting 0 [ 412.996587][ T6261] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 412.996600][ T6261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.001619][ T6261] usb 6-1: config 0 descriptor?? [ 413.023913][ T5900] usb usb4-port1: attempt power cycle [ 413.043375][ T990] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 413.196885][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 413.216615][ T6261] ath6kl: Failed to submit usb control message: -71 [ 413.216664][ T6261] ath6kl: unable to send the bmi data to the device: -71 [ 413.216679][ T6261] ath6kl: Unable to send get target info: -71 [ 413.216730][ T990] usb 1-1: config 0 interface 0 has no altsetting 0 [ 413.218697][ T6261] ath6kl: Failed to init ath6kl core: -71 [ 413.219256][ T6261] ath6kl_usb 6-1:0.243: probe with driver ath6kl_usb failed with error -71 [ 413.264341][ T990] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 413.264371][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.264391][ T990] usb 1-1: Product: syz [ 413.264404][ T990] usb 1-1: Manufacturer: syz [ 413.264419][ T990] usb 1-1: SerialNumber: syz [ 413.270175][ T990] usb 1-1: config 0 descriptor?? [ 413.282386][ T990] gs_usb 1-1:0.0: Required endpoints not found [ 413.308909][ T6261] usb 6-1: USB disconnect, device number 11 [ 413.355788][ T9518] chnl_net:caif_netlink_parms(): no params data found [ 413.363549][ T5900] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 413.384100][ T5900] usb 4-1: device descriptor read/8, error -71 [ 413.623446][ T5900] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 413.645679][ T5900] usb 4-1: device descriptor read/8, error -71 [ 413.675364][ T9518] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.675757][ T9518] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.675934][ T9518] bridge_slave_0: entered allmulticast mode [ 413.677443][ T9518] bridge_slave_0: entered promiscuous mode [ 413.680370][ T9518] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.680577][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.680761][ T9518] bridge_slave_1: entered allmulticast mode [ 413.682780][ T9518] bridge_slave_1: entered promiscuous mode [ 413.756677][ T5900] usb usb4-port1: unable to enumerate USB device [ 414.823606][ T7020] Bluetooth: hci4: command tx timeout [ 415.563367][ T990] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 415.607764][ T6002] bond0 (unregistering): Released all slaves [ 415.647223][ T9518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.743402][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 415.767844][ T9518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.768322][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.771116][ T990] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 415.771143][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.771164][ T990] usb 4-1: Product: syz [ 415.771178][ T990] usb 4-1: Manufacturer: syz [ 415.771192][ T990] usb 4-1: SerialNumber: syz [ 415.790208][ T990] usb 4-1: config 0 descriptor?? [ 415.827034][ T990] gs_usb 4-1:0.0: Required endpoints not found [ 415.881237][ T31] usb 1-1: USB disconnect, device number 32 [ 416.263479][ T7541] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 416.280543][ T9581] syzkaller1: entered promiscuous mode [ 416.280571][ T9581] syzkaller1: entered allmulticast mode [ 416.436909][ T7541] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 416.436937][ T7541] usb 7-1: config 0 has no interface number 0 [ 416.436988][ T7541] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 416.437012][ T7541] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.442404][ T7541] usb 7-1: config 0 descriptor?? [ 416.697708][ T7020] Bluetooth: hci1: Malformed LE Event: 0x0d [ 416.698519][ T7541] usb 7-1: string descriptor 0 read error: -71 [ 416.711297][ T9518] team0: Port device team_slave_0 added [ 416.715950][ T7541] usb-storage 7-1:0.168: USB Mass Storage device detected [ 416.727243][ T7541] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 416.877617][ T7541] usb 7-1: USB disconnect, device number 4 [ 416.905702][ T7020] Bluetooth: hci4: command tx timeout [ 417.115961][ T9518] team0: Port device team_slave_1 added [ 417.738635][ T6002] hsr_slave_0: left promiscuous mode [ 417.765556][ T6002] hsr_slave_1: left promiscuous mode [ 418.229870][ T6002] veth1_macvtap: left promiscuous mode [ 418.229991][ T6002] veth0_macvtap: left promiscuous mode [ 418.230289][ T6002] veth1_vlan: left promiscuous mode [ 418.230463][ T6002] veth0_vlan: left promiscuous mode [ 418.380292][ T31] usb 4-1: USB disconnect, device number 18 [ 418.987166][ T7020] Bluetooth: hci4: command tx timeout [ 419.017838][ T9632] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1303'. [ 419.105143][ T9633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 420.660401][ T9648] netlink: 'syz.6.1308': attribute type 1 has an invalid length. [ 421.464915][ T7541] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 421.623392][ T7541] usb 1-1: Using ep0 maxpacket: 32 [ 421.625661][ T7541] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 421.625687][ T7541] usb 1-1: config 0 has no interface number 0 [ 421.625733][ T7541] usb 1-1: config 0 interface 12 has no altsetting 0 [ 421.628701][ T7541] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 421.628730][ T7541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.628752][ T7541] usb 1-1: Product: syz [ 421.628767][ T7541] usb 1-1: Manufacturer: syz [ 421.628780][ T7541] usb 1-1: SerialNumber: syz [ 421.692805][ T7541] usb 1-1: config 0 descriptor?? [ 421.702442][ T7541] f81534 1-1:0.12: required endpoints missing [ 424.069422][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.069434][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.069449][ T9518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.265135][ T6260] usb 1-1: USB disconnect, device number 33 [ 424.498573][ T9518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.498591][ T9518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.498617][ T9518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.513823][ T9669] warning: `syz.0.1313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 424.796368][ T9518] hsr_slave_0: entered promiscuous mode [ 424.799588][ T9518] hsr_slave_1: entered promiscuous mode [ 424.800690][ T9518] debugfs: 'hsr0' already exists in 'hsr' [ 424.800714][ T9518] Cannot create hsr debugfs directory [ 425.333390][ T6260] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 425.516902][ T6260] usb 4-1: Using ep0 maxpacket: 32 [ 425.518447][ T6260] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 425.518463][ T6260] usb 4-1: config 0 has no interface number 0 [ 425.518494][ T6260] usb 4-1: config 0 interface 12 has no altsetting 0 [ 425.520441][ T6260] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 425.520456][ T6260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.520467][ T6260] usb 4-1: Product: syz [ 425.520475][ T6260] usb 4-1: Manufacturer: syz [ 425.520483][ T6260] usb 4-1: SerialNumber: syz [ 425.539266][ T6260] usb 4-1: config 0 descriptor?? [ 425.563813][ T6260] f81534 4-1:0.12: required endpoints missing [ 426.112482][ T9694] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1321'. [ 426.833369][ T6260] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 426.983682][ T6260] usb 1-1: Using ep0 maxpacket: 8 [ 426.986269][ T6260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.986325][ T6260] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 426.986352][ T6260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 426.986378][ T6260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 426.986401][ T6260] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 426.989868][ T6260] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 426.989896][ T6260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 426.989917][ T6260] usb 1-1: Product: syz [ 426.989931][ T6260] usb 1-1: Manufacturer: syz [ 426.989946][ T6260] usb 1-1: SerialNumber: syz [ 427.101138][ T6260] usb 1-1: config 0 descriptor?? [ 427.327617][ T6260] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 427.327658][ T6260] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 427.525871][ T9518] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 427.527874][ T6260] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 427.527898][ T6260] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 427.528217][ T6260] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 427.568832][ T6260] usb 1-1: USB disconnect, device number 34 [ 427.583117][ T9518] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 427.698196][ T9518] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 427.748065][ T9518] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.994042][ T9518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.031015][ T9518] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.057780][ T9730] netlink: 'syz.6.1329': attribute type 1 has an invalid length. [ 428.064657][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.064861][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.243443][ T990] usb 4-1: USB disconnect, device number 19 [ 428.405183][ T9734] macvlan2: entered promiscuous mode [ 428.405210][ T9734] macvlan2: entered allmulticast mode [ 428.540676][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.540956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.683539][ T990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 428.833429][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 428.835752][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.835783][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.835822][ T990] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 428.835847][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.844115][ T990] usb 4-1: config 0 descriptor?? [ 429.422178][ T990] hub 4-1:0.0: USB hub found [ 429.458618][ T990] hub 4-1:0.0: 1 port detected [ 430.029590][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.070704][ T990] hub 4-1:0.0: activate --> -90 [ 430.839417][ C0] vkms_vblank_simulate: vblank timer overrun [ 430.923299][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 430.923751][ T990] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 430.954344][ T990] usb 4-1: Failed to suspend device, error -71 [ 430.962439][ T6260] usb 4-1: USB disconnect, device number 20 [ 431.073353][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 431.082922][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 431.086575][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 431.086592][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.086603][ T9] usb 1-1: Product: syz [ 431.086611][ T9] usb 1-1: Manufacturer: syz [ 431.086618][ T9] usb 1-1: SerialNumber: syz [ 431.128644][ T9] usb 1-1: config 0 descriptor?? [ 431.136648][ T9] gs_usb 1-1:0.0: Required endpoints not found [ 431.239485][ T9518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.432437][ T9518] veth0_vlan: entered promiscuous mode [ 431.469381][ T9518] veth1_vlan: entered promiscuous mode [ 431.604137][ T9518] veth0_macvtap: entered promiscuous mode [ 431.622142][ T9518] veth1_macvtap: entered promiscuous mode [ 431.659272][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.685092][ T9518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.718602][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.737318][ T6405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.737591][ T6405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.737630][ T6405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.763370][ T6260] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 431.934356][ T6260] usb 4-1: Using ep0 maxpacket: 32 [ 431.939615][ T6260] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 431.939641][ T6260] usb 4-1: config 0 has no interface number 0 [ 431.939684][ T6260] usb 4-1: config 0 interface 12 has no altsetting 0 [ 431.978332][ T6260] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 431.978363][ T6260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.978383][ T6260] usb 4-1: Product: syz [ 431.978397][ T6260] usb 4-1: Manufacturer: syz [ 431.978416][ T6260] usb 4-1: SerialNumber: syz [ 432.002339][ T9779] netlink: 'syz.6.1347': attribute type 1 has an invalid length. [ 432.022911][ T6260] usb 4-1: config 0 descriptor?? [ 432.030225][ T6260] f81534 4-1:0.12: required endpoints missing [ 432.112845][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 432.140496][ T9781] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 432.141753][ T9781] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 432.251138][ T9779] bond1: (slave gretap1): making interface the new active one [ 432.252689][ T9779] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 432.272408][ T9782] macvlan2: entered promiscuous mode [ 432.272435][ T9782] macvlan2: entered allmulticast mode [ 432.273375][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 432.275457][ T9782] bond1: entered promiscuous mode [ 432.275475][ T9782] gretap1: entered promiscuous mode [ 432.277671][ T9782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.297577][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 432.315652][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 432.315676][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.315687][ T9] usb 6-1: Product: syz [ 432.315694][ T9] usb 6-1: Manufacturer: syz [ 432.315702][ T9] usb 6-1: SerialNumber: syz [ 432.319196][ T9] usb 6-1: config 0 descriptor?? [ 432.347939][ T9782] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 432.408565][ T9782] bond1: left promiscuous mode [ 432.408650][ T9782] gretap1: left promiscuous mode [ 432.621992][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.622012][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.687195][ T1495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.687215][ T1495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.727166][ T9] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 432.727210][ T9] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 432.800495][ T9] usb 1-1: USB disconnect, device number 35 [ 432.930207][ T9789] bridge_slave_0: left allmulticast mode [ 432.930228][ T9789] bridge_slave_0: left promiscuous mode [ 432.930376][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.988579][ T9789] bridge_slave_1: left allmulticast mode [ 432.988608][ T9789] bridge_slave_1: left promiscuous mode [ 432.988854][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.093837][ T9789] bond0: (slave bond_slave_0): Releasing backup interface [ 433.154399][ T9789] bond0: (slave bond_slave_1): Releasing backup interface [ 433.173447][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 433.245598][ T9789] team0: Port device team_slave_0 removed [ 433.288839][ T9789] team0: Port device team_slave_1 removed [ 433.290129][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.290156][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.317821][ T9789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.317850][ T9789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.333352][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 433.336850][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 433.336879][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.359649][ T9] usb 1-1: config 0 descriptor?? [ 433.368238][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 433.377417][ T9789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.977657][ T9] gspca_sunplus: reg_r err -71 [ 433.977771][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 433.990417][ T9] usb 1-1: USB disconnect, device number 36 [ 434.575359][ T990] usb 4-1: USB disconnect, device number 21 [ 434.765940][ T9816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1354'. [ 434.864527][ T9] usb 6-1: USB disconnect, device number 12 [ 435.301641][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 436.643371][ T990] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 436.698587][ T9850] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 436.794646][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 436.796913][ T990] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 436.796936][ T990] usb 4-1: config 0 has no interface number 0 [ 436.796986][ T990] usb 4-1: config 0 interface 12 has no altsetting 0 [ 436.800042][ T990] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 436.800069][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.800090][ T990] usb 4-1: Product: syz [ 436.800104][ T990] usb 4-1: Manufacturer: syz [ 436.800119][ T990] usb 4-1: SerialNumber: syz [ 436.862264][ T990] usb 4-1: config 0 descriptor?? [ 436.865517][ T990] f81534 4-1:0.12: required endpoints missing [ 436.933346][ T7541] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 437.033564][ T6260] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 437.083364][ T7541] usb 2-1: Using ep0 maxpacket: 32 [ 437.086501][ T7541] usb 2-1: config 0 interface 0 has no altsetting 0 [ 437.088851][ T7541] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 437.088880][ T7541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.088901][ T7541] usb 2-1: Product: syz [ 437.088910][ T7541] usb 2-1: Manufacturer: syz [ 437.088918][ T7541] usb 2-1: SerialNumber: syz [ 437.092397][ T7541] usb 2-1: config 0 descriptor?? [ 437.183428][ T6260] usb 6-1: Using ep0 maxpacket: 16 [ 437.187584][ T6260] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 437.187617][ T6260] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.190652][ T6260] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.190679][ T6260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.190699][ T6260] usb 6-1: Product: syz [ 437.190712][ T6260] usb 6-1: Manufacturer: syz [ 437.190727][ T6260] usb 6-1: SerialNumber: syz [ 437.201143][ T6260] usb 6-1: config 0 descriptor?? [ 437.236840][ T6260] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.236873][ T6260] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 437.273349][ T990] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 437.434784][ T990] usb 1-1: no configurations [ 437.434802][ T990] usb 1-1: can't read configurations, error -22 [ 437.512887][ T7541] gs_usb 2-1:0.0: Couldn't get device config: (err=-32) [ 437.512932][ T7541] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 437.603380][ T990] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 437.754295][ T990] usb 1-1: no configurations [ 437.754317][ T990] usb 1-1: can't read configurations, error -22 [ 437.754730][ T990] usb usb1-port1: attempt power cycle [ 437.838108][ T6260] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 437.838750][ T6260] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 437.933419][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 438.093340][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 438.093339][ T990] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 438.096174][ T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 438.096190][ T9] usb 7-1: config 0 has no interface number 0 [ 438.096219][ T9] usb 7-1: config 0 interface 12 has no altsetting 0 [ 438.099179][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 438.099374][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.099386][ T9] usb 7-1: Product: syz [ 438.099394][ T9] usb 7-1: Manufacturer: syz [ 438.099402][ T9] usb 7-1: SerialNumber: syz [ 438.122414][ T9] usb 7-1: config 0 descriptor?? [ 438.144396][ T11] block nbd4: Possible stuck request ffff8880248f5080: control (read@0,4096B). Runtime 60 seconds [ 438.189738][ T990] usb 1-1: no configurations [ 438.189757][ T990] usb 1-1: can't read configurations, error -22 [ 438.313342][ T990] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 438.335099][ T990] usb 1-1: no configurations [ 438.335119][ T990] usb 1-1: can't read configurations, error -22 [ 438.335482][ T990] usb usb1-port1: unable to enumerate USB device [ 438.446234][ T6260] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 438.647891][ T6260] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 438.665561][ T6260] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 438.665935][ T6260] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 438.666298][ T6260] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 438.666604][ T6260] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 438.670518][ T6260] usb 6-1: USB disconnect, device number 13 [ 439.515277][ T5956] usb 4-1: USB disconnect, device number 22 [ 439.766110][ T5956] usb 2-1: USB disconnect, device number 16 [ 439.917221][ T9] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 439.917275][ T9] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 439.917293][ T9] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 439.917382][ T9] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 439.959171][ T9] usb 7-1: USB disconnect, device number 5 [ 440.027657][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.027700][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.820006][ T9905] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 440.953987][ T9912] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 440.955111][ T9912] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 440.973610][ T990] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 441.108159][ T9905] bond1: (slave gretap1): making interface the new active one [ 441.108907][ T9905] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 441.129001][ T9914] macvlan2: entered promiscuous mode [ 441.129025][ T9914] macvlan2: entered allmulticast mode [ 441.132869][ T9914] bond1: entered promiscuous mode [ 441.132947][ T9914] gretap1: entered promiscuous mode [ 441.133404][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 441.135929][ T9914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 441.153945][ T990] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.153976][ T990] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.154002][ T990] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.154037][ T990] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.154059][ T990] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 441.154085][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.154121][ T990] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 441.154145][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.246702][ T990] usb 2-1: config 0 descriptor?? [ 441.269642][ T9914] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 441.356635][ T9914] bond1: left promiscuous mode [ 441.356652][ T9914] gretap1: left promiscuous mode [ 441.681476][ T990] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 441.681518][ T990] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 441.681545][ T990] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 441.681571][ T990] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 441.681598][ T990] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 441.759557][ T990] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 441.759836][ T990] hid-thrustmaster 0003:044F:B65D.0002: setup data couldn't be sent [ 441.904720][ C1] hid-thrustmaster 0003:044F:B65D.0002: URB to get model id failed with error -71 [ 441.911076][ T9] usb 2-1: USB disconnect, device number 17 [ 445.075915][ T9975] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 445.230018][ T9975] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 445.230688][ T9975] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 445.923350][ T990] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 446.117785][ T990] usb 6-1: Using ep0 maxpacket: 8 [ 446.688690][ T990] usb 6-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 446.688755][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 446.688783][ T990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 446.688827][ T990] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 446.688857][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.759867][ T990] usb 6-1: config 0 descriptor?? [ 447.179742][ T990] usb 6-1: USB disconnect, device number 14 [ 447.909090][ T5802] Bluetooth: hci6: command 0x1003 tx timeout [ 447.957159][ T7020] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 450.192831][T10039] netlink: 'syz.5.1430': attribute type 1 has an invalid length. [ 450.589992][T10042] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.591118][T10042] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 451.049589][T10039] macvlan2: entered promiscuous mode [ 451.049617][T10039] macvlan2: entered allmulticast mode [ 451.050487][T10039] bond2: entered promiscuous mode [ 451.051487][T10039] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.230654][T10039] bond2: left promiscuous mode [ 453.493299][ T5956] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 453.503376][ T5863] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 453.656122][T10091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.688331][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 453.690911][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 453.690942][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 453.748387][ T5863] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.748418][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.748439][ T5863] usb 6-1: Product: syz [ 453.748453][ T5863] usb 6-1: Manufacturer: syz [ 453.748468][ T5863] usb 6-1: SerialNumber: syz [ 453.791283][ T5863] usb 6-1: config 0 descriptor?? [ 453.802912][ T5863] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.802946][ T5863] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 453.828691][T10091] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1447'. [ 453.828721][T10091] team0: Unable to change to the same mode the team is in [ 453.853556][ T5956] usb 7-1: Using ep0 maxpacket: 32 [ 453.856801][ T5956] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.856826][ T5956] usb 7-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 453.856847][ T5956] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 453.856874][ T5956] usb 7-1: config 0 interface 0 has no altsetting 0 [ 453.856905][ T5956] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 453.856929][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.868379][ T5956] usb 7-1: config 0 descriptor?? [ 454.288456][ T5956] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 454.288558][ T5956] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 454.288589][ T5956] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 454.288618][ T5956] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 454.288780][ T5956] hid-thrustmaster 0003:044F:B65D.0003: unknown main item tag 0x0 [ 454.296046][ T5956] hid-thrustmaster 0003:044F:B65D.0003: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 454.296340][ T5956] hid-thrustmaster 0003:044F:B65D.0003: Wrong number of endpoints? [ 454.411152][ T5863] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 454.411994][ T5863] em28xx 6-1:0.0: Config register raw data: 0x00 [ 454.542273][ C0] hid-thrustmaster 0003:044F:B65D.0003: URB to get model id failed with error -71 [ 454.558784][ T5863] usb 7-1: USB disconnect, device number 6 [ 456.284133][ T5956] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 456.292391][ T7541] usb 6-1: USB disconnect, device number 15 [ 456.309158][ T7541] em28xx 6-1:0.0: Disconnecting em28xx [ 456.327577][ T7541] em28xx 6-1:0.0: Freeing device [ 456.436261][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.436320][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 456.436347][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 456.436372][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 456.436399][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 456.436424][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 456.436444][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 456.436455][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.438692][ T5956] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 456.438720][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 456.438747][ T5956] usb 7-1: Product: syz [ 456.438762][ T5956] usb 7-1: Manufacturer: syz [ 456.438775][ T5956] usb 7-1: SerialNumber: syz [ 456.442138][ T5956] usb 7-1: config 0 descriptor?? [ 456.446112][T10115] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 456.460333][ T5956] ati_remote 7-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 457.475550][ T6261] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 457.625699][ T6261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.625726][ T6261] usb 1-1: config 0 has no interfaces? [ 457.627962][ T6261] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 457.627980][ T6261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.627991][ T6261] usb 1-1: Product: syz [ 457.627999][ T6261] usb 1-1: Manufacturer: syz [ 457.628006][ T6261] usb 1-1: SerialNumber: syz [ 457.631476][ T6261] usb 1-1: config 0 descriptor?? [ 457.686229][ T7541] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 457.833333][ T7541] usb 6-1: Using ep0 maxpacket: 32 [ 457.836368][ T7541] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 457.836395][ T7541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.840400][ T6261] usb 1-1: USB disconnect, device number 41 [ 457.876249][ T7541] usb 6-1: config 0 descriptor?? [ 458.099774][ T7541] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 458.153593][ T7541] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 458.153621][ T7541] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 458.223406][ T1237] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 458.385330][ T1237] usb 2-1: Using ep0 maxpacket: 16 [ 458.387229][ T1237] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 458.387255][ T1237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 458.389515][ T1237] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.389542][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.389563][ T1237] usb 2-1: Product: syz [ 458.389576][ T1237] usb 2-1: Manufacturer: syz [ 458.389584][ T1237] usb 2-1: SerialNumber: syz [ 458.400304][ T1237] usb 2-1: config 0 descriptor?? [ 458.413021][ T1237] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.413054][ T1237] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 458.570810][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 459.066799][ T990] usb 7-1: USB disconnect, device number 7 [ 459.134722][ T1237] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 459.168913][ T1237] em28xx 2-1:0.0: Config register raw data: 0x00 [ 460.203360][ T6261] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 460.353274][ T6261] usb 1-1: Using ep0 maxpacket: 32 [ 460.356125][ T6261] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 460.356153][ T6261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.359656][ T6261] usb 1-1: config 0 descriptor?? [ 460.391008][ T6261] gspca_main: sunplus-2.14.0 probing 041e:400b [ 461.021078][ T990] usb 2-1: USB disconnect, device number 18 [ 461.023058][ T990] em28xx 2-1:0.0: Disconnecting em28xx [ 461.027425][ T990] em28xx 2-1:0.0: Freeing device [ 461.178848][ T6261] gspca_sunplus: reg_w_riv err -71 [ 461.178946][ T6261] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 461.203722][ T6261] usb 1-1: USB disconnect, device number 42 [ 462.461450][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.749189][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 464.453339][ T5900] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 464.604759][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 464.608204][ T5900] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 464.608230][ T5900] usb 2-1: config 0 has no interface number 0 [ 464.608293][ T5900] usb 2-1: config 0 interface 12 has no altsetting 0 [ 464.611631][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 464.611660][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.611681][ T5900] usb 2-1: Product: syz [ 464.611697][ T5900] usb 2-1: Manufacturer: syz [ 464.611712][ T5900] usb 2-1: SerialNumber: syz [ 464.673143][ T5900] usb 2-1: config 0 descriptor?? [ 465.750895][ T5900] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 465.750951][ T5900] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 465.750969][ T5900] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 465.751062][ T5900] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 465.763693][ T5900] usb 2-1: USB disconnect, device number 19 [ 466.099386][T10252] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 466.134939][T10252] macvlan2: entered promiscuous mode [ 466.134956][T10252] macvlan2: entered allmulticast mode [ 466.135875][T10252] bond3: entered promiscuous mode [ 466.136385][T10252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 466.236555][T10252] bond3: left promiscuous mode [ 466.553385][ T5900] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 466.754877][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 466.758214][ T5900] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 466.758241][ T5900] usb 2-1: config 0 has no interface number 0 [ 466.758290][ T5900] usb 2-1: config 0 interface 12 has no altsetting 0 [ 466.760880][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 466.760910][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.760931][ T5900] usb 2-1: Product: syz [ 466.760945][ T5900] usb 2-1: Manufacturer: syz [ 466.760959][ T5900] usb 2-1: SerialNumber: syz [ 466.767391][ T5900] usb 2-1: config 0 descriptor?? [ 468.225831][ T11] block nbd4: Possible stuck request ffff8880248f5080: control (read@0,4096B). Runtime 90 seconds [ 468.472427][ T5900] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 468.472481][ T5900] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 468.472499][ T5900] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 468.472649][ T5900] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 468.486458][ T5900] usb 2-1: USB disconnect, device number 20 [ 468.966451][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 469.303358][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 469.319846][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 469.319882][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.319904][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.319929][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 469.319972][ T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 469.319993][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.326977][ T44] usb 4-1: config 0 descriptor?? [ 469.758933][ T1237] usb 4-1: USB disconnect, device number 23 [ 470.133317][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 470.283446][ T5900] usb 2-1: Using ep0 maxpacket: 32 [ 470.285289][ T5900] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 470.285314][ T5900] usb 2-1: config 0 has no interface number 0 [ 470.285363][ T5900] usb 2-1: config 0 interface 12 has no altsetting 0 [ 470.287622][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 470.287638][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.287649][ T5900] usb 2-1: Product: syz [ 470.287656][ T5900] usb 2-1: Manufacturer: syz [ 470.287664][ T5900] usb 2-1: SerialNumber: syz [ 470.291141][ T5900] usb 2-1: config 0 descriptor?? [ 470.413365][ T990] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 470.563331][ T990] usb 1-1: Using ep0 maxpacket: 16 [ 470.567825][ T990] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 470.567843][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.567854][ T990] usb 1-1: Product: syz [ 470.567862][ T990] usb 1-1: Manufacturer: syz [ 470.567869][ T990] usb 1-1: SerialNumber: syz [ 470.572119][ T990] usb 1-1: config 0 descriptor?? [ 470.619804][ T990] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 470.776988][ T990] usb 1-1: clie_3_5_startup: get config number failed: -32 [ 470.777266][ T990] visor 1-1:0.0: probe with driver visor failed with error -32 [ 472.083371][ T1237] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 472.141352][ T5900] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 472.141490][ T5900] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 472.141510][ T5900] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 472.141605][ T5900] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 472.181899][ T5900] usb 2-1: USB disconnect, device number 21 [ 472.243397][ T1237] usb 7-1: Using ep0 maxpacket: 8 [ 472.249499][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 472.249535][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.249558][ T1237] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.249583][ T1237] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 472.249627][ T1237] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 472.249650][ T1237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.256590][ T1237] usb 7-1: config 0 descriptor?? [ 472.673384][ T5900] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 472.678184][ T5956] usb 7-1: USB disconnect, device number 8 [ 472.842918][ T5900] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 472.842949][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.842969][ T5900] usb 4-1: Product: syz [ 472.842983][ T5900] usb 4-1: Manufacturer: syz [ 472.842997][ T5900] usb 4-1: SerialNumber: syz [ 472.885527][ T5900] usb 4-1: config 0 descriptor?? [ 473.056517][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 473.099878][ T5900] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 473.199820][ T5956] usb 1-1: USB disconnect, device number 43 [ 473.209389][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 473.221762][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.221793][ T31] usb 2-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 473.222025][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 473.222056][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 473.222091][ T31] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 473.222115][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.304771][ T31] usb 2-1: config 0 descriptor?? [ 473.724545][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 473.725220][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 473.767890][ T31] usb 2-1: USB disconnect, device number 22 [ 474.117930][ T5900] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 474.123039][ T5900] usb 4-1: USB disconnect, device number 24 [ 474.361387][T10372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.408639][T10372] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1555'. [ 474.815878][ T6261] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 474.965057][ T6261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 474.965092][ T6261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 474.965135][ T6261] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.965154][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.968797][T10377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.968971][T10377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.980437][ T6261] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 475.409803][ T6261] usb 2-1: USB disconnect, device number 23 [ 475.963433][ T5956] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 476.023581][ T6261] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 476.123293][ T5956] usb 7-1: Using ep0 maxpacket: 32 [ 476.125216][ T5956] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.125243][ T5956] usb 7-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 476.125255][ T5956] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 476.125271][ T5956] usb 7-1: config 0 interface 0 has no altsetting 0 [ 476.125294][ T5956] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 476.125306][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.128957][ T5956] usb 7-1: config 0 descriptor?? [ 476.203022][ T6261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 476.203137][ T6261] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 476.203162][ T6261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.250657][ T6261] usb 4-1: config 0 descriptor?? [ 476.539578][ T5956] usbhid 7-1:0.0: can't add hid device: -71 [ 476.539756][ T5956] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 476.543624][ T5956] usb 7-1: USB disconnect, device number 9 [ 476.882249][ T6261] usb 4-1: language id specifier not provided by device, defaulting to English [ 477.313445][ T6261] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 477.313498][ T6261] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71 [ 477.317412][ T6261] usb 4-1: USB disconnect, device number 25 [ 477.603359][ T5900] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 477.786300][ T5900] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 477.786334][ T5900] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 477.786375][ T5900] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.786395][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.791462][T10426] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 477.791594][T10426] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 477.855790][ T5900] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.024337][ T6261] usb 7-1: USB disconnect, device number 10 [ 478.749302][T10449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 478.816463][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1585'. [ 478.820991][T10448] bridge_slave_0: left allmulticast mode [ 478.821019][T10448] bridge_slave_0: left promiscuous mode [ 478.821261][T10448] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.895764][T10448] bridge_slave_1: left allmulticast mode [ 478.895806][T10448] bridge_slave_1: left promiscuous mode [ 478.895999][T10448] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.004355][T10448] bond0: (slave bond_slave_0): Releasing backup interface [ 479.064234][T10448] bond0: (slave bond_slave_1): Releasing backup interface [ 479.148239][T10448] team0: Failed to send options change via netlink (err -105) [ 479.148688][T10448] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 479.148996][T10448] team0: Port device team_slave_0 removed [ 479.190069][T10448] team0: Failed to send options change via netlink (err -105) [ 479.190391][T10448] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 479.190928][T10448] team0: Port device team_slave_1 removed [ 479.191566][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.191582][T10448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.254809][T10448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.254828][T10448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.295286][T10448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.295841][T10449] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1586'. [ 479.863435][ T5900] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 480.025097][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 480.025145][ T5900] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 480.025169][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.035414][ T5900] usb 4-1: config 0 descriptor?? [ 480.549797][T10498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 480.604121][T10498] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1606'. [ 480.652070][ T5900] usb 4-1: language id specifier not provided by device, defaulting to English [ 480.889022][ T5900] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 480.889111][ T5900] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71 [ 480.917541][ T5900] usb 4-1: USB disconnect, device number 26 [ 480.918081][T10512] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 481.453394][ T5900] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 481.613321][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 481.617738][ T5900] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 481.617768][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.617779][ T5900] usb 2-1: Product: syz [ 481.617786][ T5900] usb 2-1: Manufacturer: syz [ 481.617794][ T5900] usb 2-1: SerialNumber: syz [ 481.621973][ T5900] usb 2-1: config 0 descriptor?? [ 481.641921][ T5900] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 482.191153][ T5900] usb 2-1: clie_3_5_startup: get interface number failed: -32 [ 482.191316][ T5900] visor 2-1:0.0: probe with driver visor failed with error -32 [ 482.243296][ T5956] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 482.268058][ T5900] usb 2-1: USB disconnect, device number 24 [ 482.393607][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 482.396110][ T5956] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 482.396136][ T5956] usb 4-1: config 0 has no interface number 0 [ 482.396184][ T5956] usb 4-1: config 0 interface 12 has no altsetting 0 [ 482.400110][ T5956] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 482.400137][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.400158][ T5956] usb 4-1: Product: syz [ 482.400172][ T5956] usb 4-1: Manufacturer: syz [ 482.400187][ T5956] usb 4-1: SerialNumber: syz [ 482.408108][ T5956] usb 4-1: config 0 descriptor?? [ 483.033320][ T5900] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 483.118608][ T5956] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 483.118670][ T5956] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 483.118688][ T5956] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 483.118781][ T5956] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 483.138068][ T5956] usb 4-1: USB disconnect, device number 27 [ 483.168683][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1638'. [ 483.183423][ T5900] usb 7-1: Using ep0 maxpacket: 8 [ 483.185237][ T5900] usb 7-1: config 0 has no interfaces? [ 483.187608][ T5900] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 483.187634][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 483.187654][ T5900] usb 7-1: Product: syz [ 483.187668][ T5900] usb 7-1: Manufacturer: syz [ 483.187683][ T5900] usb 7-1: SerialNumber: syz [ 483.241773][ T5900] usb 7-1: config 0 descriptor?? [ 483.794487][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 484.561239][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1651'. [ 485.807036][ T5900] usb 7-1: USB disconnect, device number 11 [ 486.623642][T10653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.701840][T10653] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1672'. [ 486.766411][T10653] team0: Mode "loa" not found [ 487.013404][ T6260] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 487.187955][ T6260] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 487.187990][ T6260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.188001][ T6260] usb 1-1: Product: syz [ 487.188009][ T6260] usb 1-1: Manufacturer: syz [ 487.188016][ T6260] usb 1-1: SerialNumber: syz [ 487.191369][ T6260] usb 1-1: config 0 descriptor?? [ 487.196705][ T6260] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 487.201375][ T6260] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.202245][ T6260] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 487.202298][ T6260] usb 1-1: media controller created [ 487.225836][ T6260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.291415][ T6260] DVB: Unable to find symbol mt352_attach() [ 487.348903][ T6260] DVB: Unable to find symbol nxt6000_attach() [ 487.348913][ T6260] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 487.351342][ T6260] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 487.385477][ T6260] dvb-usb: schedule remote query interval to 1000 msecs. [ 487.385499][ T6260] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 487.385517][ T6260] dvb-usb: bulk message failed: -22 (7/0) [ 487.385533][ T6260] dvb-usb: bulk message failed: -22 (7/0) [ 487.406505][ T6260] usb 1-1: USB disconnect, device number 44 [ 487.515202][ T6260] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 487.643391][ T5956] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 487.793300][ T5956] usb 7-1: Using ep0 maxpacket: 8 [ 487.795144][ T5956] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 487.795169][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.795189][ T5956] usb 7-1: config 0 has no interfaces? [ 487.796913][ T5956] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 487.796941][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 487.796962][ T5956] usb 7-1: Product: syz [ 487.796977][ T5956] usb 7-1: SerialNumber: syz [ 487.800096][ T5956] usb 7-1: config 0 descriptor?? [ 488.009259][ T31] usb 7-1: USB disconnect, device number 12 [ 488.353358][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 488.523309][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 488.525675][ T31] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 488.525703][ T31] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 488.525727][ T31] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 488.525748][ T31] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 488.525771][ T31] usb 7-1: config 250 has no interface number 0 [ 488.525885][ T31] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 488.525916][ T31] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 488.525944][ T31] usb 7-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 488.525974][ T31] usb 7-1: config 250 interface 228 has no altsetting 0 [ 488.528328][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 488.528420][ T31] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 488.528443][ T31] usb 7-1: Product: syz [ 488.528459][ T31] usb 7-1: SerialNumber: syz [ 488.659857][ T31] hub 7-1:250.228: bad descriptor, ignoring hub [ 488.659900][ T31] hub 7-1:250.228: probe with driver hub failed with error -5 [ 488.986212][ T31] usb 7-1: USB disconnect, device number 13 [ 490.473310][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 490.623321][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 490.624930][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.624964][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.626919][ T31] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 490.626936][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 490.626947][ T31] usb 1-1: Product: syz [ 490.626954][ T31] usb 1-1: Manufacturer: syz [ 490.626962][ T31] usb 1-1: SerialNumber: syz [ 490.630188][ T31] usb 1-1: config 0 descriptor?? [ 490.635332][ T31] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 490.635516][ T31] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 490.636003][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 490.955598][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 491.453380][ T6261] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 491.628845][ T6261] usb 2-1: Using ep0 maxpacket: 8 [ 491.631260][ T6261] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 491.631289][ T6261] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 491.631312][ T6261] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 491.631334][ T6261] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 491.631357][ T6261] usb 2-1: config 250 has no interface number 0 [ 491.631413][ T6261] usb 2-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 491.631444][ T6261] usb 2-1: config 250 interface 228 has no altsetting 0 [ 491.639081][ T6261] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 491.639108][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 491.639129][ T6261] usb 2-1: Product: syz [ 491.639143][ T6261] usb 2-1: SerialNumber: syz [ 491.668843][ T6261] hub 2-1:250.228: bad descriptor, ignoring hub [ 491.668882][ T6261] hub 2-1:250.228: probe with driver hub failed with error -5 [ 492.189086][ T6261] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 492.203304][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 492.298013][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1712'. [ 492.365261][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.365282][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.365304][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 492.365317][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.368789][ T31] usb 4-1: config 0 descriptor?? [ 492.384255][ T6261] usb 2-1: device firmware changed [ 492.398587][ T6261] usb 2-1: USB disconnect, device number 25 [ 492.693326][ T6261] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 492.843333][ T6261] usb 2-1: Using ep0 maxpacket: 8 [ 492.848092][ T6261] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 492.848120][ T6261] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 492.848141][ T6261] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 492.848161][ T6261] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 492.848182][ T6261] usb 2-1: config 250 has no interface number 0 [ 492.848232][ T6261] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 492.848259][ T6261] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 492.848285][ T6261] usb 2-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 492.848313][ T6261] usb 2-1: config 250 interface 228 has no altsetting 0 [ 492.850347][ T6261] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 492.850375][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 492.850396][ T6261] usb 2-1: Product: syz [ 492.850411][ T6261] usb 2-1: SerialNumber: syz [ 492.872708][ T6261] hub 2-1:250.228: bad descriptor, ignoring hub [ 492.872863][ T6261] hub 2-1:250.228: probe with driver hub failed with error -5 [ 492.984280][ T31] usb 4-1: string descriptor 0 read error: -22 [ 493.159270][ T6261] usb 1-1: USB disconnect, device number 45 [ 493.180089][ T31] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 493.180149][ T31] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 493.180166][ T31] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 493.180225][ T31] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 493.180338][ T31] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 493.234315][ T5900] usb 2-1: USB disconnect, device number 26 [ 493.239547][ T31] usb 4-1: USB disconnect, device number 28 [ 493.392203][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 493.501717][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.634183][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.735576][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.578932][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 494.656971][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.213328][ T6261] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 495.301350][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1732'. [ 495.376249][ T6261] usb 1-1: Using ep0 maxpacket: 32 [ 495.526853][ T6261] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.526884][ T6261] usb 1-1: config 0 interface 0 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 495.526907][ T6261] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 495.526936][ T6261] usb 1-1: config 0 interface 0 has no altsetting 0 [ 495.526970][ T6261] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 495.526993][ T6261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.536382][ T6261] usb 1-1: config 0 descriptor?? [ 496.705394][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 496.808567][ T6261] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 496.808605][ T6261] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 496.808633][ T6261] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 496.808661][ T6261] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 496.808689][ T6261] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 496.810943][ T6261] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 496.811100][ T6261] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 497.010241][ C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 497.023415][ T6261] usb 1-1: USB disconnect, device number 46 [ 497.039237][ T44] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 497.183318][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 497.187853][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.187904][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 497.187917][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 497.190107][ T44] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 497.190130][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 497.190142][ T44] usb 2-1: Product: syz [ 497.190149][ T44] usb 2-1: Manufacturer: syz [ 497.190157][ T44] usb 2-1: SerialNumber: syz [ 497.309640][ T44] usb 2-1: config 0 descriptor?? [ 497.327072][ T44] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 497.327152][ T44] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 497.327670][ T44] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 497.567625][T10828] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1742'. [ 497.983339][ T6260] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 498.138400][ T6260] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 498.138431][ T6260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.146399][ T6260] usb 1-1: config 0 descriptor?? [ 498.175641][ T6260] cp210x 1-1:0.0: cp210x converter detected [ 498.289561][T10840] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 498.323456][ T11] block nbd4: Possible stuck request ffff8880248f5080: control (read@0,4096B). Runtime 120 seconds [ 498.685322][ T6260] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 498.701283][ T6260] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 498.701320][ T6260] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 498.708202][ T6260] usb 1-1: cp210x converter now attached to ttyUSB0 [ 498.715557][ T6260] usb 1-1: USB disconnect, device number 47 [ 498.724961][ T6260] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 498.725777][ T6260] cp210x 1-1:0.0: device disconnected [ 499.855455][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'. [ 499.891355][ T6261] usb 2-1: USB disconnect, device number 27 [ 500.000865][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1752'. [ 500.267597][T10864] netlink: 608 bytes leftover after parsing attributes in process `syz.1.1756'. [ 500.323471][T10866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 501.629773][ T6261] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 501.651515][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.651683][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.809138][T10883] syz_tun: entered allmulticast mode [ 501.823113][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 501.884208][ T6261] usb 7-1: Using ep0 maxpacket: 8 [ 502.344622][ T6261] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.344688][ T6261] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.347869][ T6261] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 502.347897][ T6261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 502.347919][ T6261] usb 7-1: Product: syz [ 502.347934][ T6261] usb 7-1: Manufacturer: syz [ 502.347948][ T6261] usb 7-1: SerialNumber: syz [ 502.409364][ T6261] usb 7-1: config 0 descriptor?? [ 502.431956][ T6261] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 502.432050][ T6261] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 502.432650][ T6261] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 502.553441][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'. [ 502.694277][T10883] syz_tun (unregistering): left allmulticast mode [ 503.153405][ T6260] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 503.223579][ T6261] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 503.307062][ T6260] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.307099][ T6260] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.307133][ T6260] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.307146][ T6260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.311521][T10897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 503.362620][ T6260] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 503.373333][ T6261] usb 4-1: Using ep0 maxpacket: 32 [ 503.379911][ T6261] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 503.379940][ T6261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.398522][ T6261] usb 4-1: config 0 descriptor?? [ 503.580053][ T44] usb 2-1: USB disconnect, device number 28 [ 503.621067][ T6261] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 503.665692][ T6261] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 503.667402][ T6261] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 503.667436][ T6261] usb 4-1: media controller created [ 503.726045][ T6261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 503.727083][ T1237] usb 7-1: USB disconnect, device number 14 [ 503.995593][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 504.092073][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.097187][ T5956] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 504.243300][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 504.245760][ T5956] usb 1-1: config 0 interface 0 has no altsetting 0 [ 504.248114][ T5956] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 504.248137][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.248147][ T5956] usb 1-1: Product: syz [ 504.248155][ T5956] usb 1-1: Manufacturer: syz [ 504.248163][ T5956] usb 1-1: SerialNumber: syz [ 504.255203][ T5956] usb 1-1: config 0 descriptor?? [ 504.457778][ T6261] az6027: usb out operation failed. (-71) [ 504.457812][ T6261] stb0899_attach: Driver disabled by Kconfig [ 504.457823][ T6261] az6027: no front-end attached [ 504.457823][ T6261] [ 504.483969][ T6261] az6027: usb out operation failed. (-71) [ 504.484211][ T6261] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 504.500801][ T6261] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 504.520400][ T6261] dvb-usb: schedule remote query interval to 400 msecs. [ 504.520417][ T6261] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 504.528479][ T6261] usb 4-1: USB disconnect, device number 29 [ 504.660480][ T6261] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 504.702821][ T5956] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 504.906955][ T5956] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 504.907031][ T5956] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 504.923888][ T5956] usb 1-1: USB disconnect, device number 48 [ 505.094133][ T6261] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 505.110980][ T44] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 505.245715][ T6261] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.245752][ T6261] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 505.245786][ T6261] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.245799][ T6261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.249987][T10935] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 505.253932][ T1237] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 505.256183][ T6261] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.316211][ T44] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.316244][ T44] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 505.316375][ T44] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.316399][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.321662][T10937] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 505.369915][ T44] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.435135][ T1237] usb 4-1: Using ep0 maxpacket: 32 [ 505.438590][ T1237] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 505.438619][ T1237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.444783][ T1237] usb 4-1: config 0 descriptor?? [ 505.480802][ T1237] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 505.545678][ T44] usb 2-1: USB disconnect, device number 29 [ 505.566015][ T6261] usb 7-1: USB disconnect, device number 15 [ 505.903824][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 506.472098][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.473344][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 506.603344][ T31] usb 7-1: device descriptor read/64, error -71 [ 506.689233][ T1237] gspca_vc032x: reg_w err -71 [ 506.689265][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689277][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689286][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689294][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689302][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689311][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689319][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689327][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689336][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689344][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689371][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689380][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689389][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689398][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689406][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689414][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689422][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689430][ T1237] gspca_vc032x: I2c Bus Busy Wait 00 [ 506.689439][ T1237] gspca_vc032x: Unknown sensor... [ 506.689523][ T1237] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 506.691984][ T1237] usb 4-1: USB disconnect, device number 30 [ 506.813669][ T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 506.853325][ T31] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 506.963352][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 506.965996][ T44] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 506.966023][ T44] usb 2-1: config 0 has no interface number 0 [ 506.966086][ T44] usb 2-1: config 0 interface 12 has no altsetting 0 [ 506.968661][ T44] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 506.968689][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.968709][ T44] usb 2-1: Product: syz [ 506.968723][ T44] usb 2-1: Manufacturer: syz [ 506.968738][ T44] usb 2-1: SerialNumber: syz [ 506.972181][ T44] usb 2-1: config 0 descriptor?? [ 506.984997][ T31] usb 7-1: device descriptor read/64, error -71 [ 507.098056][ T31] usb usb7-port1: attempt power cycle [ 507.389506][ T44] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 507.389538][ T44] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 507.389548][ T44] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 507.389602][ T44] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 507.399588][ T44] usb 2-1: USB disconnect, device number 30 [ 507.433374][ T31] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 507.453887][ T31] usb 7-1: device descriptor read/8, error -71 [ 507.523390][ T990] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 507.683343][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 507.685332][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 507.687570][ T990] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 507.687598][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.687616][ T990] usb 4-1: Product: syz [ 507.687624][ T990] usb 4-1: Manufacturer: syz [ 507.687632][ T990] usb 4-1: SerialNumber: syz [ 507.690888][ T990] usb 4-1: config 0 descriptor?? [ 507.703349][ T31] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 507.752770][ T31] usb 7-1: device descriptor read/8, error -71 [ 507.859631][ T31] usb usb7-port1: unable to enumerate USB device [ 508.099374][ T990] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 508.299986][ T990] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 508.300065][ T990] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 508.311534][ T990] usb 4-1: USB disconnect, device number 31 [ 508.825730][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.917666][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.403330][ T1237] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 509.553312][ T1237] usb 4-1: Using ep0 maxpacket: 32 [ 509.555024][ T1237] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 509.555049][ T1237] usb 4-1: config 0 has no interface number 0 [ 509.555106][ T1237] usb 4-1: config 0 interface 12 has no altsetting 0 [ 509.558692][ T1237] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 509.558715][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.558725][ T1237] usb 4-1: Product: syz [ 509.558734][ T1237] usb 4-1: Manufacturer: syz [ 509.558741][ T1237] usb 4-1: SerialNumber: syz [ 509.562023][ T1237] usb 4-1: config 0 descriptor?? [ 509.628169][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 509.633354][ T990] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 509.794983][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 509.795147][ T990] usb 7-1: Using ep0 maxpacket: 8 [ 509.803856][ T31] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 509.803883][ T31] usb 1-1: config 0 has no interface number 0 [ 509.808170][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 509.808202][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.808353][ T990] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 509.808494][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 509.808522][ T990] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 509.809411][ T990] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 509.809436][ T990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.839423][ T31] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 509.839452][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.839471][ T31] usb 1-1: Product: syz [ 509.839484][ T31] usb 1-1: Manufacturer: syz [ 509.839498][ T31] usb 1-1: SerialNumber: syz [ 509.852731][ T990] usb 7-1: config 0 descriptor?? [ 509.855655][T11017] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 509.864883][ T31] usb 1-1: config 0 descriptor?? [ 509.874898][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 509.883086][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 509.898170][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.902143][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 509.902201][ T31] usb 1-1: media controller created [ 509.995652][ T1237] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 509.995706][ T1237] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 509.995723][ T1237] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 509.995813][ T1237] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 510.043527][ T1237] usb 4-1: USB disconnect, device number 32 [ 510.091897][T11022] dvb-usb: bulk message failed: -22 (4/0) [ 510.091921][T11022] cxusb: i2c read failed [ 510.103656][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.167867][ T31] cxusb: set interface failed [ 510.168792][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 510.254565][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 510.254580][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 510.295057][ T1237] usb 7-1: USB disconnect, device number 20 [ 510.302723][ T7020] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 510.420087][ T31] rc_core: IR keymap rc-dvico-portable not found [ 510.420107][ T31] Registered IR keymap rc-empty [ 510.422708][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 510.428656][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input11 [ 510.432663][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 510.432683][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 510.438926][ T31] usb 1-1: USB disconnect, device number 49 [ 510.553312][ T990] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 510.644348][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 510.709171][ T990] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 510.709202][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.725226][ T990] usb 2-1: config 0 descriptor?? [ 510.735899][ T990] cp210x 2-1:0.0: cp210x converter detected [ 511.093406][ T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 511.133346][ T1237] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 511.135769][ T990] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 511.136432][ T990] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 511.136446][ T990] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 511.138776][ T990] usb 2-1: cp210x converter now attached to ttyUSB0 [ 511.153347][ T6261] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 511.255313][ T31] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.255346][ T31] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.255370][ T31] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.255382][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.259471][T11042] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 511.262904][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.333303][ T6261] usb 4-1: Using ep0 maxpacket: 8 [ 511.333426][ T1237] usb 7-1: Using ep0 maxpacket: 32 [ 511.338795][ T6261] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 511.338822][ T6261] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 511.338842][ T6261] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 511.338861][ T6261] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 511.338883][ T6261] usb 4-1: config 250 has no interface number 0 [ 511.338931][ T6261] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 511.338959][ T6261] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 511.338984][ T6261] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 511.339013][ T6261] usb 4-1: config 250 interface 228 has no altsetting 0 [ 511.340712][ T1237] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 511.340739][ T1237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.343335][ T6261] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 511.343362][ T6261] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 511.343382][ T6261] usb 4-1: Product: syz [ 511.343396][ T6261] usb 4-1: SerialNumber: syz [ 511.488150][ T31] usb 2-1: USB disconnect, device number 31 [ 511.489793][ T1237] usb 7-1: config 0 descriptor?? [ 511.514964][ T990] usb 1-1: USB disconnect, device number 50 [ 511.528519][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 511.529735][ T31] cp210x 2-1:0.0: device disconnected [ 511.576776][ T6261] hub 4-1:250.228: bad descriptor, ignoring hub [ 511.576816][ T6261] hub 4-1:250.228: probe with driver hub failed with error -5 [ 511.694411][ T1237] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 511.698040][ T1237] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.698706][ T1237] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 511.698738][ T1237] usb 7-1: media controller created [ 511.753847][ T1237] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.088142][ T990] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 512.129503][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 512.244942][ T990] usb 4-1: device firmware changed [ 512.245500][ T990] usb 4-1: USB disconnect, device number 33 [ 512.383300][ T990] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 512.441869][T11068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1842'. [ 512.534362][ T990] usb 4-1: Using ep0 maxpacket: 8 [ 512.539186][ T990] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 512.539213][ T990] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 512.539235][ T990] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 512.539255][ T990] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 512.539277][ T990] usb 4-1: config 250 has no interface number 0 [ 512.539331][ T990] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 512.539359][ T990] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 512.539384][ T990] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 512.539414][ T990] usb 4-1: config 250 interface 228 has no altsetting 0 [ 512.541762][ T990] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 512.541791][ T990] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 512.541813][ T990] usb 4-1: Product: syz [ 512.541827][ T990] usb 4-1: SerialNumber: syz [ 512.558439][ T990] hub 4-1:250.228: bad descriptor, ignoring hub [ 512.558486][ T990] hub 4-1:250.228: probe with driver hub failed with error -5 [ 512.743257][ T1237] stb0899_attach: Driver disabled by Kconfig [ 512.743271][ T1237] az6027: no front-end attached [ 512.743271][ T1237] [ 512.745654][ T1237] az6027: usb out operation failed. (-71) [ 512.745670][ T1237] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 512.748591][ T1237] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 512.750426][ T1237] dvb-usb: schedule remote query interval to 400 msecs. [ 512.750439][ T1237] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 512.799411][ T1237] usb 7-1: USB disconnect, device number 21 [ 512.843379][ T990] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 512.903651][ T31] usb 4-1: USB disconnect, device number 34 [ 512.938441][ T1237] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 513.003341][ T990] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.003370][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.010032][ T990] usb 2-1: config 0 descriptor?? [ 513.014377][ T990] cp210x 2-1:0.0: cp210x converter detected [ 513.220193][ T990] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 513.220224][ T990] cp210x 2-1:0.0: querying part number failed [ 513.229657][ T990] usb 2-1: cp210x converter now attached to ttyUSB0 [ 513.370943][T11097] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1855'. [ 513.523398][ T1237] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 513.673313][ T1237] usb 1-1: Using ep0 maxpacket: 32 [ 513.677405][ T1237] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 513.677431][ T1237] usb 1-1: config 0 has no interface number 0 [ 513.677495][ T1237] usb 1-1: config 0 interface 12 has no altsetting 0 [ 513.682628][ T1237] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 513.682657][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.682679][ T1237] usb 1-1: Product: syz [ 513.682694][ T1237] usb 1-1: Manufacturer: syz [ 513.682709][ T1237] usb 1-1: SerialNumber: syz [ 513.746799][ T1237] usb 1-1: config 0 descriptor?? [ 514.913340][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 515.066219][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 515.079333][ T31] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 515.079362][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.079382][ T31] usb 4-1: Product: syz [ 515.079394][ T31] usb 4-1: Manufacturer: syz [ 515.079408][ T31] usb 4-1: SerialNumber: syz [ 515.094946][ T31] usb 4-1: config 0 descriptor?? [ 515.107892][ T31] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 515.364296][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 515.364694][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 515.365084][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 515.370284][ T1237] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 515.370337][ T1237] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 515.370355][ T1237] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 515.370417][ T1237] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 515.438313][ T1237] usb 1-1: USB disconnect, device number 51 [ 515.504934][ T31] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 515.505091][ T31] visor 4-1:0.0: probe with driver visor failed with error -71 [ 515.512533][ T31] usb 4-1: USB disconnect, device number 35 [ 515.621637][ T5900] usb 2-1: USB disconnect, device number 32 [ 515.628744][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 515.629531][ T5900] cp210x 2-1:0.0: device disconnected [ 515.813339][ T990] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 515.963301][ T990] usb 7-1: Using ep0 maxpacket: 32 [ 515.967324][ T990] usb 7-1: config 0 interface 0 has no altsetting 0 [ 515.973619][ T990] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 515.973647][ T990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.973667][ T990] usb 7-1: Product: syz [ 515.973681][ T990] usb 7-1: Manufacturer: syz [ 515.973695][ T990] usb 7-1: SerialNumber: syz [ 515.995759][ T990] usb 7-1: config 0 descriptor?? [ 516.423341][ T990] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 516.538396][T11177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.583070][T11177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1888'. [ 516.630890][ T990] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 516.630971][ T990] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 516.837986][ T31] usb 7-1: USB disconnect, device number 22 [ 516.993352][ T1237] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 517.145734][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.241095][ T1237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.241130][ T1237] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.241171][ T1237] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 517.241195][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.253130][ T1237] usb 2-1: config 0 descriptor?? [ 517.833361][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.906296][ C0] vkms_vblank_simulate: vblank timer overrun [ 518.259968][T11203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.357795][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'. [ 518.415662][ T1237] usb 2-1: string descriptor 0 read error: -71 [ 518.417656][ T1237] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 518.417715][ T1237] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 518.417733][ T1237] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 518.417784][ T1237] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 518.417892][ T1237] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 518.434603][ T1237] usb 2-1: USB disconnect, device number 33 [ 518.906328][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 519.183307][ T5956] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 519.370604][ T5956] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 519.370636][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.370658][ T5956] usb 4-1: Product: syz [ 519.370673][ T5956] usb 4-1: Manufacturer: syz [ 519.370687][ T5956] usb 4-1: SerialNumber: syz [ 519.382176][ T5956] usb 4-1: config 0 descriptor?? [ 519.397100][ T5956] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 519.414773][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.416010][ T5956] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 519.416064][ T5956] usb 4-1: media controller created [ 519.524803][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.542105][T11256] tmpfs: Unsupported parameter 'huge' [ 519.583361][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 519.713582][ T5956] DVB: Unable to find symbol mt352_attach() [ 519.743376][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 519.800538][ T31] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 519.800557][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.804233][ T31] usb 2-1: config 0 descriptor?? [ 519.843704][T11265] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1924'. [ 520.181607][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 520.227367][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 520.229372][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 520.229429][ T31] usb 2-1: media controller created [ 520.749301][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.850384][ T5956] DVB: Unable to find symbol nxt6000_attach() [ 520.850400][ T5956] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 520.896465][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 520.899535][ T5956] dvb-usb: schedule remote query interval to 1000 msecs. [ 520.899558][ T5956] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 520.899575][ T5956] dvb-usb: bulk message failed: -22 (7/0) [ 520.899592][ T5956] dvb-usb: bulk message failed: -22 (7/0) [ 520.902350][ T5956] usb 4-1: USB disconnect, device number 36 [ 521.088088][ T5956] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 521.378397][ T5956] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 521.533487][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 521.536235][ T5956] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 521.536263][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.561492][ T31] stb0899_attach: Driver disabled by Kconfig [ 521.561510][ T31] az6027: no front-end attached [ 521.561510][ T31] [ 521.579522][ T31] az6027: usb out operation failed. (-71) [ 521.579542][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 521.584364][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 522.144222][ T5956] usb 4-1: config 0 descriptor?? [ 522.396078][ T5956] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 522.401191][ C1] vkms_vblank_simulate: vblank timer overrun [ 522.413573][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 522.413594][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 522.506041][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.506058][ T31] usb 2-1: USB disconnect, device number 34 [ 522.508462][ T5956] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 522.508515][ T5956] usb 4-1: media controller created [ 522.531055][ T7541] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 522.531138][ T7541] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 522.553517][ T7541] usb 6-1: USB disconnect, device number 16 [ 522.594264][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.668166][ T5956] az6027: usb out operation failed. (-71) [ 522.668588][ T5956] az6027: usb out operation failed. (-71) [ 522.668601][ T5956] stb0899_attach: Driver disabled by Kconfig [ 522.668610][ T5956] az6027: no front-end attached [ 522.668610][ T5956] [ 522.669004][ T5956] az6027: usb out operation failed. (-71) [ 522.669017][ T5956] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 522.717345][ T5956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 522.722783][ T5956] dvb-usb: schedule remote query interval to 400 msecs. [ 522.722805][ T5956] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 522.758247][ T5956] usb 4-1: USB disconnect, device number 37 [ 522.769891][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 522.864804][ T7541] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 522.920000][ T5956] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 523.001220][ T7541] usb 6-1: device descriptor read/64, error -71 [ 523.233297][ T7541] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 523.283367][ T31] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 523.364459][ T7541] usb 6-1: device descriptor read/64, error -71 [ 523.485148][ T7541] usb usb6-port1: attempt power cycle [ 523.568674][T11332] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 523.569271][T11332] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 523.667982][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.913324][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 523.916948][ T31] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 523.916974][ T31] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 523.916996][ T31] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 523.917017][ T31] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 523.917039][ T31] usb 7-1: config 250 has no interface number 0 [ 523.917086][ T31] usb 7-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 523.917112][ T31] usb 7-1: config 250 interface 228 has no altsetting 0 [ 523.920528][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 523.920557][ T31] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 523.920578][ T31] usb 7-1: Product: syz [ 523.920593][ T31] usb 7-1: SerialNumber: syz [ 524.030811][ T31] hub 7-1:250.228: bad descriptor, ignoring hub [ 524.030853][ T31] hub 7-1:250.228: probe with driver hub failed with error -5 [ 524.103350][ T7541] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 524.123385][ T5956] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 524.124280][ T7541] usb 6-1: device descriptor read/8, error -71 [ 524.231352][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.231948][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.274791][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 524.280410][ T5956] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 524.280441][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.280462][ T5956] usb 2-1: Product: syz [ 524.280477][ T5956] usb 2-1: Manufacturer: syz [ 524.280492][ T5956] usb 2-1: SerialNumber: syz [ 524.296356][ T5956] usb 2-1: config 0 descriptor?? [ 524.301259][ T5956] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 524.383291][ T7541] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 524.383767][ T6260] usb 7-1: USB disconnect, device number 23 [ 524.408508][ T7541] usb 6-1: device descriptor read/8, error -71 [ 524.501551][ T5956] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 524.501709][ T5956] visor 2-1:0.0: probe with driver visor failed with error -71 [ 524.512509][ T5956] usb 2-1: USB disconnect, device number 35 [ 524.524837][ T7541] usb usb6-port1: unable to enumerate USB device [ 524.637103][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 525.143580][ T38] INFO: task udevd:5168 blocked for more than 143 seconds. [ 525.143615][ T38] Not tainted syzkaller #0 [ 525.143625][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.143635][ T38] task:udevd state:D stack:23080 pid:5168 tgid:5168 ppid:1 task_flags:0x400140 flags:0x00080001 [ 525.143697][ T38] Call Trace: [ 525.143708][ T38] [ 525.143722][ T38] __schedule+0x16f3/0x4c20 [ 525.143771][ T38] ? stack_depot_save_flags+0x40/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 525.143803][ T38] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 525.143842][ T38] ? __pfx___schedule+0x10/0x10 [ 525.143886][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 525.143976][ T38] rt_mutex_schedule+0x77/0xf0 [ 525.143999][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 525.144020][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 525.144059][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 525.144083][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 525.144106][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 525.144146][ T38] ? __pfx_wait_on_inode+0x10/0x10 [ 525.144178][ T38] ? bdev_open+0xe0/0xcc0 [ 525.144202][ T38] mutex_lock_nested+0x16a/0x1d0 [ 525.144230][ T38] bdev_open+0xe0/0xcc0 [ 525.144267][ T38] blkdev_open+0x46c/0x610 [ 525.144291][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 525.144310][ T38] do_dentry_open+0x9b1/0x1350 [ 525.144343][ T38] vfs_open+0x3b/0x350 [ 525.144359][ T38] ? path_openat+0x2ed9/0x3840 [ 525.144383][ T38] path_openat+0x2ef1/0x3840 [ 525.144412][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 525.144462][ T38] ? __pfx_path_openat+0x10/0x10 [ 525.144485][ T38] ? do_raw_spin_lock+0x121/0x290 [ 525.144601][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 525.144628][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.144654][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 525.144688][ T38] do_filp_open+0x1fa/0x410 [ 525.144712][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 525.144731][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 525.144785][ T38] ? alloc_fd+0x64f/0x6c0 [ 525.144822][ T38] do_sys_openat2+0x121/0x1c0 [ 525.144840][ T38] ? kmem_cache_free+0x732/0x910 [ 525.144863][ T38] ? fput_close_sync+0x119/0x200 [ 525.144884][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 525.144904][ T38] ? fput_close_sync+0x119/0x200 [ 525.144924][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 525.144943][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 525.144969][ T38] __x64_sys_openat+0x138/0x170 [ 525.144995][ T38] do_syscall_64+0xfa/0xfa0 [ 525.145022][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.145040][ T38] ? asm_sysvec_call_function_single+0x1a/0x20 [ 525.145059][ T38] ? clear_bhb_loop+0x60/0xb0 [ 525.145083][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.145101][ T38] RIP: 0033:0x7f417a66d407 [ 525.145127][ T38] RSP: 002b:00007ffdff3bb9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 525.145148][ T38] RAX: ffffffffffffffda RBX: 00007f417a57f880 RCX: 00007f417a66d407 [ 525.145162][ T38] RDX: 00000000000a0800 RSI: 0000559415ee5a30 RDI: ffffffffffffff9c [ 525.145177][ T38] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 525.145189][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 525.145201][ T38] R13: 00005593dee19100 R14: 0000000000000000 R15: 00007ffdff3bbc70 [ 525.145234][ T38] [ 525.145289][ T38] INFO: task syz.4.868:8602 blocked for more than 143 seconds. [ 525.145303][ T38] Not tainted syzkaller #0 [ 525.145312][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.145321][ T38] task:syz.4.868 state:D stack:28232 pid:8602 tgid:8601 ppid:5806 task_flags:0x400140 flags:0x00080002 [ 525.145375][ T38] Call Trace: [ 525.145382][ T38] [ 525.145395][ T38] __schedule+0x16f3/0x4c20 [ 525.145427][ T38] ? sched_clock+0x3f/0x60 [ 525.145448][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.145482][ T38] ? __pfx___schedule+0x10/0x10 [ 525.145531][ T38] rt_mutex_schedule+0x77/0xf0 [ 525.145551][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 525.145587][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 525.145613][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 525.145636][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 525.145658][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 525.145692][ T38] ? bdev_release+0x1af/0x660 [ 525.145717][ T38] ? __fsnotify_parent+0x47f/0x540 [ 525.145747][ T38] ? bdev_release+0x1af/0x660 [ 525.145768][ T38] mutex_lock_nested+0x16a/0x1d0 [ 525.145788][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 525.145818][ T38] bdev_release+0x1af/0x660 [ 525.145844][ T38] ? __pfx_blkdev_release+0x10/0x10 [ 525.145864][ T38] blkdev_release+0x15/0x20 [ 525.145883][ T38] __fput+0x45b/0xa80 [ 525.145915][ T38] task_work_run+0x1d4/0x260 [ 525.145939][ T38] ? __pfx_task_work_run+0x10/0x10 [ 525.145962][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 525.145991][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 525.146016][ T38] do_syscall_64+0x2bd/0xfa0 [ 525.146039][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.146063][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.146082][ T38] ? clear_bhb_loop+0x60/0xb0 [ 525.146105][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.146124][ T38] RIP: 0033:0x7fde0663f6c9 [ 525.146139][ T38] RSP: 002b:00007fde048a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.146158][ T38] RAX: 0000000000000000 RBX: 00007fde06895fa0 RCX: 00007fde0663f6c9 [ 525.146171][ T38] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 525.146183][ T38] RBP: 00007fde066c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 525.146196][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.146208][ T38] R13: 00007fde06896038 R14: 00007fde06895fa0 R15: 00007ffc0a3093c8 [ 525.146242][ T38] [ 525.146274][ T38] [ 525.146274][ T38] Showing all locks held in the system: [ 525.146289][ T38] 3 locks held by kworker/1:0/31: [ 525.146300][ T38] #0: ffff888019eda938 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 525.146351][ T38] #1: ffffc90000a5fba0 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 525.146400][ T38] #2: ffff888027a65188 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x100 [ 525.146447][ T38] 1 lock held by khungtaskd/38: [ 525.146457][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 525.146525][ T38] 1 lock held by udevd/5168: [ 525.146535][ T38] #0: ffff88802478c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 525.146586][ T38] 2 locks held by getty/5563: [ 525.146597][ T38] #0: ffff88823bf2e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 525.146644][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 525.146701][ T38] 1 lock held by udevd/7849: [ 525.146712][ T38] #0: ffff88802478c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 525.146768][ T38] 1 lock held by syz.4.868/8602: [ 525.146779][ T38] #0: ffff88802478c4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 525.146822][ T38] 1 lock held by syz.3.1973/11371: [ 525.146833][ T38] #0: ffff88803600c858 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x450 [ 525.146883][ T38] 1 lock held by syz.0.1984/11391: [ 525.146894][ T38] 4 locks held by syz.1.1985/11394: [ 525.146906][ T38] [ 525.146910][ T38] ============================================= [ 525.146910][ T38] [ 525.146924][ T38] NMI backtrace for cpu 1 [ 525.146946][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.146967][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.146978][ T38] Call Trace: [ 525.146985][ T38] [ 525.146992][ T38] dump_stack_lvl+0x189/0x250 [ 525.147022][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 525.147047][ T38] ? __pfx__printk+0x10/0x10 [ 525.147081][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 525.147105][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 525.147129][ T38] ? __pfx__printk+0x10/0x10 [ 525.147155][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.147178][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 525.147202][ T38] watchdog+0xf60/0xfa0 [ 525.147232][ T38] ? watchdog+0x1e2/0xfa0 [ 525.147262][ T38] kthread+0x711/0x8a0 [ 525.147291][ T38] ? __pfx_watchdog+0x10/0x10 [ 525.147314][ T38] ? __pfx_kthread+0x10/0x10 [ 525.147337][ T38] ? rt_spin_unlock+0x150/0x200 [ 525.147361][ T38] ? rt_spin_unlock+0x161/0x200 [ 525.147379][ T38] ? __pfx_kthread+0x10/0x10 [ 525.147406][ T38] ret_from_fork+0x4bc/0x870 [ 525.147431][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 525.147460][ T38] ? __switch_to_asm+0x39/0x70 [ 525.147477][ T38] ? __switch_to_asm+0x33/0x70 [ 525.147493][ T38] ? __pfx_kthread+0x10/0x10 [ 525.147520][ T38] ret_from_fork_asm+0x1a/0x30 [ 525.147555][ T38] [ 525.147562][ T38] Sending NMI from CPU 1 to CPUs 0: [ 525.147590][ C0] NMI backtrace for cpu 0 [ 525.147604][ C0] CPU: 0 UID: 0 PID: 11394 Comm: syz.1.1985 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 525.147623][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 525.147632][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x6c/0x80 [ 525.147654][ C0] Code: f0 15 00 00 83 fa 02 75 21 48 8b 91 f8 15 00 00 48 8b 32 48 8d 7e 01 8b 89 f4 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cf 6e 05 09 cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 525.147668][ C0] RSP: 0018:ffffc9000e367508 EFLAGS: 00000287 [ 525.147682][ C0] RAX: ffffffff81fba010 RBX: ffff88813fffb740 RCX: 0000000000080000 [ 525.147694][ C0] RDX: ffffc9001ea21000 RSI: 0000000000029598 RDI: 0000000000029599 [ 525.147705][ C0] RBP: 1ffffd40002fb180 R08: 0000000000000000 R09: 0000000000000000 [ 525.147715][ C0] R10: dffffc0000000000 R11: fffff940002fb189 R12: ffff888019ebcf48 [ 525.147727][ C0] R13: ffffea00017d8c00 R14: ffffc9000e367578 R15: 1ffff92001c6ceaf [ 525.147740][ C0] FS: 00007fad2a7966c0(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 525.147754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 525.147765][ C0] CR2: 0000001b2f91fff8 CR3: 000000005983c000 CR4: 00000000003526f0 [ 525.147780][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 525.147791][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 525.147802][ C0] Call Trace: [ 525.147808][ C0] [ 525.147814][ C0] folio_lruvec_relock_irqsave+0x100/0x510 [ 525.147835][ C0] folio_batch_move_lru+0x19d/0x330 [ 525.147857][ C0] ? __pfx_lru_add+0x10/0x10 [ 525.147878][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 525.147900][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 525.147919][ C0] ? __pfx_lru_add+0x10/0x10 [ 525.147940][ C0] __folio_batch_add_and_move+0x447/0xa90 [ 525.147960][ C0] ? __pfx_lru_add+0x10/0x10 [ 525.147982][ C0] shmem_get_folio_gfp+0xb56/0x1a70 [ 525.148021][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 525.148045][ C0] shmem_fault+0x170/0x380 [ 525.148069][ C0] __do_fault+0x138/0x390 [ 525.148085][ C0] handle_mm_fault+0x23c6/0x3400 [ 525.148104][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 525.148124][ C0] ? handle_mm_fault+0xdb/0x3400 [ 525.148146][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 525.148165][ C0] ? follow_page_pte+0xc0d/0x1360 [ 525.148190][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 525.148209][ C0] ? vma_is_secretmem+0xd/0x50 [ 525.148228][ C0] ? check_vma_flags+0x4df/0x590 [ 525.148250][ C0] __get_user_pages+0x1685/0x2860 [ 525.148285][ C0] populate_vma_page_range+0x29f/0x3a0 [ 525.148305][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 525.148323][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 525.148345][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 525.148361][ C0] __mm_populate+0x24c/0x380 [ 525.148380][ C0] ? __pfx___mm_populate+0x10/0x10 [ 525.148398][ C0] ? vm_mmap_pgoff+0x353/0x4d0 [ 525.148419][ C0] vm_mmap_pgoff+0x38a/0x4d0 [ 525.148436][ C0] ? __se_sys_futex+0x36f/0x400 [ 525.148455][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 525.148473][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 525.148492][ C0] ? ksys_mmap_pgoff+0xf5/0x720 [ 525.148511][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 525.148530][ C0] do_syscall_64+0xfa/0xfa0 [ 525.148549][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 525.148568][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.148583][ C0] ? clear_bhb_loop+0x60/0xb0 [ 525.148600][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.148615][ C0] RIP: 0033:0x7fad2c52f6c9 [ 525.148629][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.148642][ C0] RSP: 002b:00007fad2a796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 525.148658][ C0] RAX: ffffffffffffffda RBX: 00007fad2c785fa0 RCX: 00007fad2c52f6c9 [ 525.148670][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 525.148681][ C0] RBP: 00007fad2c5b1f91 R08: ffffffffffffffff R09: 0000000000000000 [ 525.148692][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 525.148703][ C0] R13: 00007fad2c786038 R14: 00007fad2c785fa0 R15: 00007fff3f8001b8 [ 525.148723][ C0] [ 525.372405][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.514403][T11398] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1985'. [ 526.303504][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.443274][ T31] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 528.340774][ T31] usb 7-1: device descriptor read/all, error -71 [ 528.403425][ T11] block nbd4: Possible stuck request ffff8880248f5080: control (read@0,4096B). Runtime 150 seconds [ 528.979135][ T1495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.207940][ T1495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.446018][ T1495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.629122][ T1495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.480308][ T1495] bond0 (unregistering): Released all slaves [ 531.493516][ T1495] bond1 (unregistering): Released all slaves [ 532.453428][ T1495] hsr_slave_0: left promiscuous mode [ 532.494858][ T1495] hsr_slave_1: left promiscuous mode [ 532.521517][ T1495] veth1_macvtap: left promiscuous mode [ 532.521584][ T1495] veth0_macvtap: left promiscuous mode [ 532.521731][ T1495] veth1_vlan: left promiscuous mode [ 532.521835][ T1495] veth0_vlan: left promiscuous mode