last executing test programs: 2m16.944253305s ago: executing program 1 (id=3802): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m16.901360952s ago: executing program 1 (id=3803): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) r0 = socket$inet(0xa, 0x801, 0x84) socket$kcm(0x29, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x8054) r1 = socket$netlink(0x10, 0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x854, 0x0, 0x0) writev(r1, &(0x7f0000000000), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x874, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x840, 0x2, [@TCA_MATCHALL_ACT={0x83c, 0x2, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x101, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x0, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7ffffffe, 0x0, 0xa, 0x6, 0xffffbfff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xfffeff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0x10d2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x10, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4ec, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x8, 0x3, 0xb9a6, 0x522, 0x0, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x7fffffff, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x874}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5], 0x6f4}}, 0x0) 2m16.806722997s ago: executing program 1 (id=3804): socket(0x10, 0x803, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x3, 0x44202) r2 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) socket(0x11, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m14.794720271s ago: executing program 4 (id=3827): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xfdef}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m14.667083694s ago: executing program 4 (id=3829): r0 = io_uring_setup(0x61b4, &(0x7f0000000080)={0x0, 0x7d7a, 0x0, 0x0, 0x1cf}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000100)={0x3}, 0x0) 2m14.561673815s ago: executing program 4 (id=3832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 2m14.465458195s ago: executing program 4 (id=3834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)={0x20, r1, 0x1, 0x4070bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4807}, 0x4008084) 2m14.382783921s ago: executing program 4 (id=3837): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.307162661s ago: executing program 4 (id=3839): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000cc0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000300)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m13.756656876s ago: executing program 1 (id=3844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 2m13.543598079s ago: executing program 1 (id=3846): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4048aecb, &(0x7f0000000080)={0x4, 0x0, [{0xdc3, 0x0, 0xfffffffffffffff9}, {0x3a4, 0x0, 0xffffffff}, {0x86d, 0x0, 0x4}, {0x35f, 0x0, 0x5}]}) 2m13.246292689s ago: executing program 1 (id=3847): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x0, '\x00', [@padn, @ra={0x5, 0x2, 0xfffd}]}]}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r0, r0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000002400)=[{&(0x7f0000000740)}], 0x1) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x0, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="b79f0000000000007b8af3ff00000000b7080000000000007b8af0ff000000005cb600b3000000000000000000f0ffffff", @ANYBLOB], 0x0}, 0x94) close(0x3) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000840)={0x3, 0x0, @ioapic={0x8010000, 0x8, 0xeb81, 0x3ff, 0x0, [{0x3, 0xa6, 0x3, '\x00', 0x5}, {0x4, 0x6, 0x1, '\x00', 0x5}, {0x2, 0xa, 0x0, '\x00', 0x2}, {0x3, 0x5, 0x5, '\x00', 0x10}, {0xd1, 0x8, 0x5, '\x00', 0x1}, {0x9, 0xa, 0x4, '\x00', 0xfa}, {0x10, 0x7, 0x48, '\x00', 0x4}, {0x61, 0xe, 0x3d, '\x00', 0x7}, {0xf, 0x2, 0x4, '\x00', 0xdb}, {0x0, 0x2, 0x3, '\x00', 0x4}, {0x6, 0xab, 0x7, '\x00', 0xb}, {0x5, 0x5, 0x10, '\x00', 0x81}, {0x7, 0x9, 0x6, '\x00', 0x4}, {0x2, 0x10, 0x7, '\x00', 0x9b}, {0x0, 0xff, 0x7, '\x00', 0x6}, {0x2, 0x3, 0x8, '\x00', 0xb}, {0x8, 0x1, 0xe, '\x00', 0x4}, {0x7, 0x1f, 0xb, '\x00', 0x5}, {0x5, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x8, 0x2}, {0x7, 0x6, 0x3, '\x00', 0x4}, {0x5, 0x4, 0x7f, '\x00', 0x4}, {0x5, 0x5, 0x7, '\x00', 0xbf}, {0x2, 0x0, 0x9, '\x00', 0x47}]}}) close(r2) 2m9.764891993s ago: executing program 3 (id=3855): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) syz_clone(0x2a008900, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) socket$alg(0x26, 0x5, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m9.721016328s ago: executing program 0 (id=3856): r0 = socket$kcm(0x10, 0x2, 0x4) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8900", 0x2}], 0x1}, 0x0) 1m56.761970853s ago: executing program 32 (id=3847): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x0, '\x00', [@padn, @ra={0x5, 0x2, 0xfffd}]}]}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup2(r0, r0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000002400)=[{&(0x7f0000000740)}], 0x1) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a40)={0x0, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="b79f0000000000007b8af3ff00000000b7080000000000007b8af0ff000000005cb600b3000000000000000000f0ffffff", @ANYBLOB], 0x0}, 0x94) close(0x3) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000840)={0x3, 0x0, @ioapic={0x8010000, 0x8, 0xeb81, 0x3ff, 0x0, [{0x3, 0xa6, 0x3, '\x00', 0x5}, {0x4, 0x6, 0x1, '\x00', 0x5}, {0x2, 0xa, 0x0, '\x00', 0x2}, {0x3, 0x5, 0x5, '\x00', 0x10}, {0xd1, 0x8, 0x5, '\x00', 0x1}, {0x9, 0xa, 0x4, '\x00', 0xfa}, {0x10, 0x7, 0x48, '\x00', 0x4}, {0x61, 0xe, 0x3d, '\x00', 0x7}, {0xf, 0x2, 0x4, '\x00', 0xdb}, {0x0, 0x2, 0x3, '\x00', 0x4}, {0x6, 0xab, 0x7, '\x00', 0xb}, {0x5, 0x5, 0x10, '\x00', 0x81}, {0x7, 0x9, 0x6, '\x00', 0x4}, {0x2, 0x10, 0x7, '\x00', 0x9b}, {0x0, 0xff, 0x7, '\x00', 0x6}, {0x2, 0x3, 0x8, '\x00', 0xb}, {0x8, 0x1, 0xe, '\x00', 0x4}, {0x7, 0x1f, 0xb, '\x00', 0x5}, {0x5, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x8, 0x2}, {0x7, 0x6, 0x3, '\x00', 0x4}, {0x5, 0x4, 0x7f, '\x00', 0x4}, {0x5, 0x5, 0x7, '\x00', 0xbf}, {0x2, 0x0, 0x9, '\x00', 0x47}]}}) close(r2) 1m56.610709962s ago: executing program 33 (id=3839): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000001240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000cc0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000300)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 1m56.587074791s ago: executing program 0 (id=3859): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162", 0xc8}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135", 0x21}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m56.558324876s ago: executing program 3 (id=3861): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000980)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x6, 0x3, "f7a17c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m56.130269341s ago: executing program 0 (id=3862): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd26, 0x1}, 0x18}, 0x1, 0xfe0f0000, 0x0, 0x2000c844}, 0x20000110) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(r0, 0xffffffffffffffff, 0x0) 1m55.67592983s ago: executing program 3 (id=3864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) 1m55.262428346s ago: executing program 3 (id=3866): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m53.530143259s ago: executing program 2 (id=3868): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06464ce, &(0x7f0000000440)={r4, 0x4, 0x20007, 0x6, 0x2, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x9, 0x3abb], [0x7, 0x7, 0xf, 0x2]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r4, 0xff7fffff, 0x1ff, 0x1, 0x3, [], [0x1d78, 0x6fb, 0x7, 0x19], [0x4, 0x400, 0x53cc, 0x35], [0x0, 0x10000, 0x7ff, 0x7fff]}) 1m53.357012128s ago: executing program 2 (id=3869): r0 = io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 1m53.239863414s ago: executing program 2 (id=3870): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1, 0x803, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0xbfe6, @mcast1, 0x5}}, 0x7ff, 0x400, 0x0, 0x2, 0x76e}, &(0x7f0000000380)=0x98) gettid() mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff7f000000bc8f3939f631b83ecbac4500fdf4f2f78d9c26c6789d98feac621054c738dcd81e12d6cd88f9ca0429531b32f76876468253effdaeda1a06b48bddc25f4e2b0575fe2a30c682a714aed74b77d62b3a165438e4c2243ccfbc7090935d6c2a2e93d58d592e7b5a832e499f91aeda0235106a00f7cb9262e15f291af69ab6174ff582c04e21c7cb726c8e86667c8b97e072161507be709abeb7b807e7c9b6815fa4734bb1488891c04a74227bf8f6f42744216452d689376806ef6c540218bbba9401fb9edba3909e10b8cd4069bf3788d583a966fdabd553c7b0fd8039202522ac4c56350e1bee7dc17b7fece6a83898c525faa195ce489d23459d3b45a93c8483eefc2af1700115196f4a738b1d2827112e958280565d39e4790fe603e27ad0ced6b29fbb42b2c1ec55cba3317541e25934ace54d832770cc6c220988987114b761f6c74235c55d316178aea6", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, 0x0, 0x0, 0x800}], 0x1, 0x40800) 1m53.094382813s ago: executing program 2 (id=3871): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000002e00090027bd7000000000000400000004001900080017"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) r6 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x7ff, 0x4}}}}]}, 0x44}}, 0x4c840) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @loopback}, 'wg0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000700000114000780080011400000008b05001500050000000500010006000000050005000200000005000400020000000900020073797a30000000000d000300686173683a6e657400000000fe73ac058c340c13702dfa7a76f571070f4303f198cf7900544ceb43c0f03544709aed43b293ca81c7bf7462fa888556abb3cbad60a9652855368edbe35ac5b8d5e0dfa224cdb3383adb92c88fdcbd3204d77818b96c127697247aef4fe53eb0948a8684c8b26bf0e5018529f93550eda05f78c130814434a2b9f8706cf76e09a7a90079fea7eff79b883a70c555445e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0xe}, 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) 1m52.922017311s ago: executing program 0 (id=3872): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000980)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)={0x0, 0x6, 0x3, "f7a17c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m52.382614433s ago: executing program 2 (id=3873): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x70, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900000000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x9, "c8f46976e79ea7"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 1m52.300997067s ago: executing program 0 (id=3874): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r6 = socket(0x23, 0x5, 0x0) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r6, 0x0, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 1m52.25813812s ago: executing program 2 (id=3875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m46.70240891s ago: executing program 3 (id=3876): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xe0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m44.253600299s ago: executing program 3 (id=3877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) 1m44.100125355s ago: executing program 0 (id=3878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x844a}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000c00), 0x0) 1m3.731150487s ago: executing program 34 (id=3875): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 36.99241029s ago: executing program 35 (id=3878): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x844a}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r5, 0x5608, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000c00), 0x0) 0s ago: executing program 36 (id=3877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4894) kernel console output (not intermixed with test programs): : Mfr=1, Product=236, SerialNumber=2 [ 401.142211][ T5692] usb 5-1: Product: syz [ 401.147133][ T5692] usb 5-1: Manufacturer: syz [ 401.151756][ T5692] usb 5-1: SerialNumber: syz [ 401.166303][ T5692] usb 5-1: config 0 descriptor?? [ 401.187937][T13432] veth1_vlan: entered promiscuous mode [ 401.238142][T13432] veth0_macvtap: entered promiscuous mode [ 401.260475][T13432] veth1_macvtap: entered promiscuous mode [ 401.282687][ T29] audit: type=1326 audit(1777726439.684:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13471 comm="syz.0.2993" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x0 [ 401.320720][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.344180][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.377852][ T230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.392013][ T230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.405272][ T5633] Bluetooth: hci2: command tx timeout [ 401.412798][ T230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.428157][ T230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.538156][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.549156][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.589905][ T7581] usb 5-1: USB disconnect, device number 104 [ 401.604720][ T7183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.614015][ T7183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.738575][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2998'. [ 401.934877][ T5692] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 402.074927][ T5676] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 402.095831][ T5692] usb 2-1: Using ep0 maxpacket: 32 [ 402.107446][ T5692] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 402.137252][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.170880][ T5692] usb 2-1: config 0 descriptor?? [ 402.180019][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 402.225434][ T5676] usb 4-1: Using ep0 maxpacket: 32 [ 402.242879][ T5676] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 402.263426][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.280505][ T5676] usb 4-1: config 0 descriptor?? [ 402.303182][ T5676] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 402.590527][T13508] netlink: 'syz.0.3007': attribute type 1 has an invalid length. [ 402.631520][T13508] bond1: entered promiscuous mode [ 402.637713][T13508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.655436][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3007'. [ 402.664572][T13508] bond1: entered allmulticast mode [ 402.700280][T13508] bond1: (slave bridge1): making interface the new active one [ 402.708279][T13508] bridge1: entered promiscuous mode [ 402.713794][T13508] bridge1: entered allmulticast mode [ 402.723830][T13508] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 402.847717][ T5677] usb 3-1: USB disconnect, device number 99 [ 403.155823][ T29] audit: type=1326 audit(1777726441.564:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.0.3012" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x0 [ 403.165320][ T5633] Bluetooth: hci4: command tx timeout [ 403.345264][ T5677] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 403.385009][ T46] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 403.504903][ T5677] usb 3-1: Using ep0 maxpacket: 16 [ 403.511937][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.523423][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.533532][ T5677] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.546627][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 403.551943][ T5677] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 403.564953][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.574225][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.582293][ T46] usb 5-1: config 0 has no interface number 0 [ 403.590030][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.601993][ T5677] usb 3-1: config 0 descriptor?? [ 403.607314][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.617828][ T46] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 403.630160][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.641053][ T46] usb 5-1: config 0 descriptor?? [ 403.997943][ T5692] gspca_vc032x: reg_r err -32 [ 404.003027][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.008586][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.014050][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.019687][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.025396][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.030739][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.037618][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.042940][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.048573][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.049674][T13524] syzkaller1: entered promiscuous mode [ 404.053883][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.053897][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.053907][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.053916][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.059634][T13524] syzkaller1: entered allmulticast mode [ 404.066237][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.094212][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.099795][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.113801][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.122416][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.128332][ T5692] gspca_vc032x: Unknown sensor... [ 404.128344][ T5676] gspca_vc032x: reg_r err -32 [ 404.133442][ T5692] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 404.143280][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.151957][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.157526][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.162925][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.168533][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.173895][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.180111][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.188168][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.193494][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.198924][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.204247][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.209742][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.216037][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.221691][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.227519][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.235095][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.240583][ T5677] usbhid 3-1:0.0: can't add hid device: -71 [ 404.246657][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.253694][ T5677] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 404.261520][ T5676] gspca_vc032x: I2c Bus Busy Wait 00 [ 404.268802][ T5676] gspca_vc032x: Unknown sensor... [ 404.278966][ T46] uclogic 0003:28BD:0094.0021: failed retrieving string descriptor #100: -71 [ 404.293667][ T5677] usb 3-1: USB disconnect, device number 100 [ 404.301208][ T5676] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 404.309061][ T46] uclogic 0003:28BD:0094.0021: failed retrieving pen parameters: -71 [ 404.328549][ T46] uclogic 0003:28BD:0094.0021: pen probing failed: -71 [ 404.346376][ T46] uclogic 0003:28BD:0094.0021: failed probing parameters: -71 [ 404.354725][ T46] uclogic 0003:28BD:0094.0021: probe with driver uclogic failed with error -71 [ 404.373826][ T46] usb 5-1: USB disconnect, device number 105 [ 404.781629][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3020'. [ 404.844650][T13545] netlink: 'syz.2.3021': attribute type 1 has an invalid length. [ 404.858845][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3021'. [ 404.957570][T13549] sctp: [Deprecated]: syz.0.3023 (pid 13549) Use of int in max_burst socket option deprecated. [ 404.957570][T13549] Use struct sctp_assoc_value instead [ 405.042985][ T10] usb 2-1: USB disconnect, device number 97 [ 405.082444][ T29] audit: type=1326 audit(1777726443.484:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.4.3024" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f514a99cdd9 code=0x0 [ 405.208078][ T5677] usb 4-1: USB disconnect, device number 97 [ 405.236049][ T5633] Bluetooth: hci4: command tx timeout [ 405.247260][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 405.311689][T13568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3031'. [ 405.522839][T13580] netlink: 'syz.0.3037': attribute type 1 has an invalid length. [ 405.542996][T13580] bond2: entered promiscuous mode [ 405.548419][T13580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.560660][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3037'. [ 405.570913][T13580] bond2: entered allmulticast mode [ 405.585934][T13580] bond2: (slave bridge2): making interface the new active one [ 405.593660][T13580] bridge2: entered promiscuous mode [ 405.599111][T13580] bridge2: entered allmulticast mode [ 405.604920][ T5677] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 405.612558][T13580] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 405.644933][ T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 405.774870][ T5677] usb 4-1: Using ep0 maxpacket: 16 [ 405.781422][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.792532][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.804901][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 405.812200][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 405.814846][ T5677] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 405.822263][ T10] usb 3-1: config 0 has no interface number 0 [ 405.837179][ T5677] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 405.849338][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.856626][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.879866][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.892264][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 405.893456][ T5677] usb 4-1: config 0 descriptor?? [ 405.901511][ T5692] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 405.901686][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.911202][ T10] usb 3-1: config 0 descriptor?? [ 406.045188][ T5692] usb 1-1: Using ep0 maxpacket: 32 [ 406.057511][ T5692] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 406.069179][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.081104][ T5692] usb 1-1: config 0 descriptor?? [ 406.100159][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 406.158491][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 406.206069][ T46] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 406.298555][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3044'. [ 406.378339][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 406.381971][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 406.387284][ T46] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 406.402244][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.420157][ T46] usb 5-1: config 0 descriptor?? [ 406.439886][ T46] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 406.549040][ T5677] usbhid 4-1:0.0: can't add hid device: -71 [ 406.556103][ T5677] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 406.568761][ T5677] usb 4-1: USB disconnect, device number 98 [ 406.748920][ T10] uclogic 0003:28BD:0094.0022: failed retrieving string descriptor #100: -71 [ 406.761339][ T10] uclogic 0003:28BD:0094.0022: failed retrieving pen parameters: -71 [ 406.774181][ T10] uclogic 0003:28BD:0094.0022: pen probing failed: -71 [ 406.782092][ T10] uclogic 0003:28BD:0094.0022: failed probing parameters: -71 [ 406.790337][ T10] uclogic 0003:28BD:0094.0022: probe with driver uclogic failed with error -71 [ 406.803706][ T10] usb 3-1: USB disconnect, device number 101 [ 407.314938][ T5633] Bluetooth: hci4: command tx timeout [ 407.923902][ T5692] gspca_vc032x: reg_r err -32 [ 407.929787][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.935501][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.942715][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.954879][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.965039][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.970428][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.978005][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.983398][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.989786][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 407.995308][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.001015][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.006560][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.011868][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.017528][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.022845][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.028469][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.033828][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.040744][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.046282][ T5692] gspca_vc032x: Unknown sensor... [ 408.051702][ T5692] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 408.252250][ T46] gspca_vc032x: reg_r err -32 [ 408.289075][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.302974][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.313257][T13634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3060'. [ 408.318303][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.332557][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3060'. [ 408.339777][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.352928][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.388789][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.424708][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.437297][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.443188][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.449700][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.457997][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.460779][T13638] veth1_to_team: entered promiscuous mode [ 408.463436][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.476528][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.478335][T13638] gretap0: entered promiscuous mode [ 408.490884][T13638] debugfs: 'hsr1' already exists in 'hsr' [ 408.498045][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.498382][T13638] Cannot create hsr debugfs directory [ 408.509155][T13638] hsr1: entered promiscuous mode [ 408.521345][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.530843][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.537263][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.545740][ T46] gspca_vc032x: I2c Bus Busy Wait 00 [ 408.551124][ T46] gspca_vc032x: Unknown sensor... [ 408.582141][ T46] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 408.616241][T13647] netlink: 'syz.1.3067': attribute type 1 has an invalid length. [ 408.656926][T13647] bond1: entered promiscuous mode [ 408.662268][T13647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.674319][T13647] bond1: entered allmulticast mode [ 408.695527][T13647] bond1: (slave bridge1): making interface the new active one [ 408.703052][T13647] bridge1: entered promiscuous mode [ 408.710511][T13647] bridge1: entered allmulticast mode [ 408.720496][T13647] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 408.956533][ T5692] usb 1-1: USB disconnect, device number 95 [ 409.293305][ T9] usb 5-1: USB disconnect, device number 106 [ 409.415078][ T5692] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 409.431194][T13684] syzkaller1: entered promiscuous mode [ 409.439686][T13684] syzkaller1: entered allmulticast mode [ 409.619592][ T5692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.630707][ T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 409.646571][ T5692] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 409.660379][ T5692] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 409.669823][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.678742][ T5692] usb 2-1: Product: syz [ 409.683290][ T5692] usb 2-1: Manufacturer: syz [ 409.691393][ T5692] usb 2-1: SerialNumber: syz [ 409.705444][ T5692] usb 2-1: config 0 descriptor?? [ 409.804896][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 409.811570][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 409.823096][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.837400][ T10] usb 4-1: config 0 descriptor?? [ 409.846150][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 410.024949][ T5692] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 410.125638][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 410.174893][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 410.181489][ T5692] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 410.190854][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.201865][ T5692] usb 5-1: config 0 descriptor?? [ 410.210394][ T5692] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 410.274848][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 410.282148][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.293431][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.304375][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 410.318372][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 410.327519][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.345288][ T9] usb 1-1: config 0 descriptor?? [ 410.453748][ T29] audit: type=1326 audit(1777726448.854:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.3096" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94dbb9cdd9 code=0x0 [ 410.969564][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 410.976539][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 410.987179][ T9] usb 1-1: USB disconnect, device number 96 [ 411.556171][ T46] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 411.645626][T13731] __nla_validate_parse: 9 callbacks suppressed [ 411.645639][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3099'. [ 411.664037][ T10] gspca_vc032x: reg_r err -32 [ 411.669765][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.675156][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.680478][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.687386][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.692711][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.698661][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.704021][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.709392][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.714701][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.723553][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.728205][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 411.730946][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.740004][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.740249][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.751551][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 411.761011][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.766183][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 411.771063][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.780701][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.783365][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.792466][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.806014][ T46] usb 3-1: Product: syz [ 411.810199][ T46] usb 3-1: Manufacturer: syz [ 411.815011][ T46] usb 3-1: SerialNumber: syz [ 411.819728][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.825816][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.834441][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.840724][ T10] gspca_vc032x: Unknown sensor... [ 411.846019][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 411.994963][ T5691] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 412.032165][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.041143][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.055247][ T46] cdc_ncm 3-1:1.0: bind() failure [ 412.061291][ T5692] gspca_vc032x: reg_r err -32 [ 412.068202][ T46] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 412.073131][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.076746][ T46] cdc_ncm 3-1:1.1: bind() failure [ 412.082296][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.091352][ T46] usb 3-1: USB disconnect, device number 102 [ 412.095077][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.105744][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.111063][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.117393][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.122706][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.128609][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.133992][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.139426][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.144716][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.150130][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.155955][ T5691] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 412.163807][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.174501][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.180093][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.186599][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.192200][ T5691] usb 1-1: config 0 has no interfaces? [ 412.201457][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.202565][ T5677] usb 2-1: USB disconnect, device number 98 [ 412.207791][ T5691] usb 1-1: config 0 has no interfaces? [ 412.218242][ T5692] gspca_vc032x: I2c Bus Busy Wait 00 [ 412.223552][ T5692] gspca_vc032x: Unknown sensor... [ 412.231318][ T5691] usb 1-1: config 0 has no interfaces? [ 412.237544][ T5692] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 412.248853][ T5691] usb 1-1: config 0 has no interfaces? [ 412.262947][ T5691] usb 1-1: config 0 has no interfaces? [ 412.278917][ T5691] usb 1-1: config 0 has no interfaces? [ 412.286534][ T5691] usb 1-1: config 0 has no interfaces? [ 412.299403][ T5691] usb 1-1: config 0 has no interfaces? [ 412.313257][ T5691] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.331460][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.345699][ T5691] usb 1-1: Product: syz [ 412.349896][ T5691] usb 1-1: Manufacturer: syz [ 412.353802][T13740] sctp: [Deprecated]: syz.1.3102 (pid 13740) Use of int in max_burst socket option deprecated. [ 412.353802][T13740] Use struct sctp_assoc_value instead [ 412.354481][ T5691] usb 1-1: SerialNumber: syz [ 412.393020][ T5691] usb 1-1: config 0 descriptor?? [ 412.595002][ T46] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 412.613254][ T5691] usb 1-1: USB disconnect, device number 97 [ 412.680354][ T5714] usb 4-1: USB disconnect, device number 99 [ 412.757978][ T46] usb 3-1: config index 0 descriptor too short (expected 122, got 92) [ 412.767164][ T46] usb 3-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 412.779093][ T46] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 412.790540][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64 [ 412.803347][ T46] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 412.812472][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.820760][ T46] usb 3-1: Product: syz [ 412.825871][ T46] usb 3-1: Manufacturer: syz [ 412.834943][ T46] usb 3-1: SerialNumber: syz [ 412.852840][T13720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 413.020069][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 413.106183][ T5714] usb 5-1: USB disconnect, device number 107 [ 413.265315][ T5691] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 413.279126][ T46] usb 3-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 413.316223][T13773] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3116'. [ 413.397477][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 413.445543][ T5691] usb 1-1: Using ep0 maxpacket: 32 [ 413.453206][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.464664][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3119'. [ 413.469928][ T5691] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.487563][ T46] usb 3-1: __uac_clock_find_source(): selector reported illegal value, id 0, ret 0 [ 413.490603][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.498088][ T46] usb 3-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 413.507398][ T5691] usb 1-1: Product: syz [ 413.520265][ T5691] usb 1-1: Manufacturer: syz [ 413.528877][ T5691] usb 1-1: SerialNumber: syz [ 413.541512][ T5691] usb 1-1: config 0 descriptor?? [ 413.546746][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 413.702499][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3121'. [ 413.717972][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 413.731049][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 413.753821][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.802840][ T10] usb 4-1: config 0 descriptor?? [ 413.831795][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 413.853268][ T46] usb 3-1: USB disconnect, device number 103 [ 413.934473][ T6733] udevd[6733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.018815][ T5692] usb 1-1: USB disconnect, device number 98 [ 414.074868][ T5714] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 414.226994][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 414.245859][ T5714] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 414.255313][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.268887][ T5714] usb 5-1: config 0 descriptor?? [ 414.289307][ T5714] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 414.653955][T13804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3130'. [ 414.683489][T13804] veth1_to_team: entered promiscuous mode [ 414.690850][T13804] gretap0: entered promiscuous mode [ 414.698164][T13804] debugfs: 'hsr1' already exists in 'hsr' [ 414.704050][T13804] Cannot create hsr debugfs directory [ 414.710057][T13804] hsr1: entered promiscuous mode [ 414.804024][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3132'. [ 415.648911][ T10] gspca_vc032x: reg_r err -32 [ 415.653813][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.660577][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.666130][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.671448][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.676824][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.682131][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.687490][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.693075][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.698602][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.703910][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.709275][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.714577][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.720628][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.725969][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.731275][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.736607][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.741890][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.747212][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 415.752518][ T10] gspca_vc032x: Unknown sensor... [ 415.759421][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 416.099559][ T5714] gspca_vc032x: reg_r err -32 [ 416.104339][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.109942][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.115414][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.120906][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.126262][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.131705][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.137655][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.143001][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.148367][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.153793][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.159324][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.164611][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.170753][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.176114][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.181578][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.186914][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.192326][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.199357][ T5714] gspca_vc032x: I2c Bus Busy Wait 00 [ 416.204659][ T5714] gspca_vc032x: Unknown sensor... [ 416.209889][ T5714] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 416.491048][ T29] audit: type=1326 audit(1777726454.894:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.1.3145" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x0 [ 416.670914][ T5714] usb 4-1: USB disconnect, device number 100 [ 416.861993][T13855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3151'. [ 417.165537][ T10] usb 5-1: USB disconnect, device number 108 [ 417.527383][ T5691] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 417.562606][T13891] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 417.720825][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 417.771187][ T5691] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 417.842150][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.859945][ T29] audit: type=1326 audit(1777726456.254:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13909 comm="syz.1.3163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x0 [ 417.892133][ T5691] usb 3-1: config 0 descriptor?? [ 417.921361][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3164'. [ 417.932317][ T5691] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 418.236704][ T9] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 418.301061][T13933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3174'. [ 418.415168][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 418.425352][ T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 418.434641][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.450222][ T9] usb 1-1: config 0 descriptor?? [ 418.461398][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 419.217271][T13976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3176'. [ 419.521725][T13990] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3182'. [ 419.531009][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 419.673332][T13997] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 419.680554][T13997] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 419.743984][T13999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3187'. [ 419.764499][ T5691] gspca_vc032x: reg_r err -32 [ 419.778806][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.789444][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.801788][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.814854][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.828425][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.844117][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.864275][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.883610][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.890819][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.905183][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.916836][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.932351][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.943510][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.964321][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.973239][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.979157][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.984754][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 419.997338][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.012834][ T5691] gspca_vc032x: Unknown sensor... [ 420.019895][ T5691] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 420.277850][ T9] gspca_vc032x: reg_r err -32 [ 420.288046][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.300026][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.314858][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.324662][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.338202][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.348299][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.354479][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.364417][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.375125][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.381802][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.388199][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.393558][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.399392][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.404969][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.415515][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.434829][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.440221][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.445750][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 420.451073][ T9] gspca_vc032x: Unknown sensor... [ 420.457215][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 420.609123][ T5677] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 420.809537][ T5677] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.826405][ T5677] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.835687][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.839522][ T9] usb 3-1: USB disconnect, device number 104 [ 420.850806][ T5677] usb 4-1: config 0 descriptor?? [ 420.884129][ T5677] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 421.035070][ T46] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 421.088639][ T9] usb 4-1: USB disconnect, device number 101 [ 421.124920][ T5691] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 421.196618][ T46] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.207715][ T46] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 421.216949][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.225013][ T46] usb 2-1: Product: syz [ 421.229612][ T46] usb 2-1: Manufacturer: syz [ 421.234205][ T46] usb 2-1: SerialNumber: syz [ 421.240990][ T46] usb 2-1: config 0 descriptor?? [ 421.285195][ T5691] usb 5-1: Using ep0 maxpacket: 32 [ 421.294121][ T5691] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 421.304390][ T5691] usb 5-1: config 0 has no interface number 0 [ 421.313297][ T5691] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 421.317582][ T5677] usb 1-1: USB disconnect, device number 99 [ 421.325341][ T5691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.355748][ T5691] usb 5-1: Product: syz [ 421.361422][ T5691] usb 5-1: Manufacturer: syz [ 421.367732][ T5691] usb 5-1: SerialNumber: syz [ 421.375674][ T5691] usb 5-1: config 0 descriptor?? [ 421.418474][T14077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3210'. [ 421.586531][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 421.744952][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 421.758020][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 421.769220][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 421.778439][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.793348][ T9] usb 4-1: config 0 descriptor?? [ 421.820668][ T9] ldusb 4-1:0.0: Interrupt in endpoint not found [ 421.828861][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 422.019812][ T9] usb 4-1: USB disconnect, device number 102 [ 422.213942][ T5691] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 422.224760][ T5691] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 422.437264][ T5691] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 422.448180][ T5691] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 422.459456][ T5691] usb 5-1: USB disconnect, device number 109 [ 422.524883][ T5677] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 422.674945][ T5677] usb 1-1: Using ep0 maxpacket: 32 [ 422.682562][ T5677] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 422.692200][ T5677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.704313][ T5677] usb 1-1: config 0 descriptor?? [ 422.726753][ T5677] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 422.924230][T14132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3221'. [ 422.976730][ T5691] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 423.155239][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 423.163612][ T5691] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 423.174385][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.197911][ T5691] usb 4-1: config 0 descriptor?? [ 423.239676][ T5691] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 423.644669][T14168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3228'. [ 423.666938][T14168] netlink: 'syz.4.3228': attribute type 1 has an invalid length. [ 423.713739][T14168] bond2: entered promiscuous mode [ 423.721098][T14168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.739005][T14168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3228'. [ 423.750611][T14168] bond2: entered allmulticast mode [ 423.828076][T14168] bond2: (slave bridge4): making interface the new active one [ 423.845756][T14168] bridge4: entered promiscuous mode [ 423.861284][T14168] bridge4: entered allmulticast mode [ 423.886683][T14168] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 423.914904][ T46] usb 2-1: USB disconnect, device number 99 [ 423.967893][T14177] netlink: 372 bytes leftover after parsing attributes in process `syz.2.3229'. [ 424.065754][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3231'. [ 424.396455][T14195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3239'. [ 424.556780][ T5677] gspca_vc032x: reg_r err -32 [ 424.561691][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.568739][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.574232][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.580010][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.585943][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.591305][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.596831][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.602193][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.607715][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.613081][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.619838][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.625913][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.631403][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.638021][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.643420][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.648847][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.654246][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.660772][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 424.667555][ T5677] gspca_vc032x: Unknown sensor... [ 424.672734][ T5677] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 424.684887][ T5676] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 424.846625][ T5676] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 424.858415][ T5676] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 424.868044][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.877029][ T5676] usb 5-1: Product: syz [ 424.882434][ T5676] usb 5-1: Manufacturer: syz [ 424.887566][ T5676] usb 5-1: SerialNumber: syz [ 424.903238][ T5676] usb 5-1: config 0 descriptor?? [ 425.044700][ T5691] gspca_vc032x: reg_r err -32 [ 425.062466][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.067859][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.073217][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.081747][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.087990][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.093309][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.101642][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.107073][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.123668][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.134836][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.143238][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.149279][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.155859][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.161174][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.168255][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.173575][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.182405][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.192316][ T5691] gspca_vc032x: I2c Bus Busy Wait 00 [ 425.204966][ T5691] gspca_vc032x: Unknown sensor... [ 425.212621][ T5691] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 425.270855][T14231] netlink: 372 bytes leftover after parsing attributes in process `syz.2.3243'. [ 425.586712][ T5677] usb 1-1: USB disconnect, device number 100 [ 425.594881][ T5691] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 425.692056][ T29] audit: type=1326 audit(1777726464.094:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.719761][ T29] audit: type=1326 audit(1777726464.094:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.749022][ T29] audit: type=1326 audit(1777726464.124:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.774274][ T29] audit: type=1326 audit(1777726464.124:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.805522][T14254] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3252'. [ 425.807099][ T29] audit: type=1326 audit(1777726464.124:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.843183][ T5691] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 425.852409][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.870418][ T5691] usb 3-1: Product: syz [ 425.873261][ T29] audit: type=1326 audit(1777726464.124:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.884973][ T5691] usb 3-1: Manufacturer: syz [ 425.900255][ T29] audit: type=1326 audit(1777726464.124:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.929003][ T5691] usb 3-1: SerialNumber: syz [ 425.961256][ T29] audit: type=1326 audit(1777726464.124:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14246 comm="syz.1.3249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702679cdd9 code=0x7ffc0000 [ 425.963950][ T5691] usb 3-1: config 0 descriptor?? [ 426.098295][ T10] usb 4-1: USB disconnect, device number 103 [ 426.237835][ T5691] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 426.595456][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 426.768044][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 426.776892][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 426.786109][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.798656][ T10] usb 4-1: config 0 descriptor?? [ 426.815133][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 427.012556][ T10] gspca_vc032x: reg_r err -32 [ 427.017656][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.035520][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.040845][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.046205][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.051701][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.057758][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.063749][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.069166][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.074645][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.088746][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.094081][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.099456][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.105152][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.110481][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.119149][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.128403][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.133735][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.149289][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.154619][ T10] gspca_vc032x: Unknown sensor... [ 427.160892][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 427.194871][ T5692] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 427.358775][ T5692] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.368488][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.376543][ T5692] usb 1-1: Product: syz [ 427.380710][ T5692] usb 1-1: Manufacturer: syz [ 427.385352][ T5692] usb 1-1: SerialNumber: syz [ 427.391842][ T5692] usb 1-1: config 0 descriptor?? [ 427.394903][ T5677] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 427.470971][ T10] usb 5-1: USB disconnect, device number 110 [ 427.566981][ T5677] usb 2-1: Using ep0 maxpacket: 32 [ 427.573817][ T5677] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 427.582952][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.593603][ T5677] usb 2-1: config 0 descriptor?? [ 427.604531][ T5677] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 427.605848][ T5692] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 427.817202][ T5692] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 427.826847][ T10] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 427.869621][ T5691] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 427.879285][ T5691] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 427.887307][ T5691] usb 3-1: media controller created [ 427.894729][ T5691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 427.946450][ T5691] i2c i2c-2: Added multiplexed i2c bus 3 [ 427.952131][ T5691] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 427.968101][ T5691] usb 3-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 427.980969][ T5691] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 427.994860][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 428.001905][ T10] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 428.010403][ T10] usb 5-1: config 0 has no interface number 0 [ 428.017908][ T10] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.032784][ T10] usb 5-1: config 0 interface 89 has no altsetting 0 [ 428.039738][ T5691] DVB: Unable to find symbol r820t_attach() [ 428.050967][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 428.062812][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.074059][ T10] usb 5-1: Product: syz [ 428.078391][ T10] usb 5-1: Manufacturer: syz [ 428.084393][ T10] usb 5-1: SerialNumber: syz [ 428.096152][ T10] usb 5-1: config 0 descriptor?? [ 429.095681][ T5691] usb 3-1: USB disconnect, device number 105 [ 429.292495][ T5676] usb 4-1: USB disconnect, device number 104 [ 429.330565][T14335] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3269'. [ 429.414639][ T5677] gspca_vc032x: reg_r err -32 [ 429.424040][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.429646][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.435573][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.440887][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.445834][ T5691] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 429.450276][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.459171][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.464681][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.470767][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.477892][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.487346][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.492726][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.498572][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.503925][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.510981][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.517337][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.522711][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.528140][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.533517][ T5677] gspca_vc032x: I2c Bus Busy Wait 00 [ 429.538927][ T5677] gspca_vc032x: Unknown sensor... [ 429.544353][ T5677] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 429.618464][ T5691] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.630949][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.648974][ T5691] usb 3-1: Product: syz [ 429.653174][ T5691] usb 3-1: Manufacturer: syz [ 429.658079][ T5691] usb 3-1: SerialNumber: syz [ 429.666263][ T5691] usb 3-1: config 0 descriptor?? [ 429.877462][ T5691] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 429.992824][ T5677] usb 1-1: USB disconnect, device number 101 [ 430.437873][ T10] usb 2-1: USB disconnect, device number 100 [ 430.486882][ T5691] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 430.508428][ T5691] usb 3-1: USB disconnect, device number 106 [ 430.555234][ T5677] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 430.585654][ T9] usb 5-1: USB disconnect, device number 111 [ 430.728920][ T5677] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 430.738076][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.746254][ T5677] usb 4-1: Product: syz [ 430.750426][ T5677] usb 4-1: Manufacturer: syz [ 430.755324][ T5677] usb 4-1: SerialNumber: syz [ 430.761609][ T5677] usb 4-1: config 0 descriptor?? [ 430.894858][ T10] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 430.944944][ T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 430.970857][ T5677] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 431.051616][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 431.062300][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.074718][ T10] usb 2-1: Product: syz [ 431.079568][ T10] usb 2-1: Manufacturer: syz [ 431.084626][ T10] usb 2-1: SerialNumber: syz [ 431.090255][T14394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3282'. [ 431.099496][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 431.107574][ T10] usb 2-1: config 0 descriptor?? [ 431.116694][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 431.140893][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.152958][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.163427][ T9] usb 5-1: Product: syz [ 431.168877][ T9] usb 5-1: Manufacturer: syz [ 431.173644][ T9] usb 5-1: SerialNumber: syz [ 431.194531][ T9] usb 5-1: config 0 descriptor?? [ 431.329398][T14404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3287'. [ 431.351274][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 431.440925][T14410] netlink: 372 bytes leftover after parsing attributes in process `syz.0.3290'. [ 431.562238][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 431.754960][ T29] audit: type=1326 audit(1777726470.154:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.807102][ T29] audit: type=1326 audit(1777726470.164:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.833487][ T29] audit: type=1326 audit(1777726470.164:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.861245][ T29] audit: type=1326 audit(1777726470.164:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.885714][ T29] audit: type=1326 audit(1777726470.164:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.910681][ T29] audit: type=1326 audit(1777726470.164:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.941662][ T29] audit: type=1326 audit(1777726470.164:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.973949][ T29] audit: type=1326 audit(1777726470.164:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 431.998697][ T29] audit: type=1326 audit(1777726470.164:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 432.024480][ T29] audit: type=1326 audit(1777726470.164:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14420 comm="syz.0.3295" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedf0f9cdd9 code=0x7ffc0000 [ 432.314935][ T5676] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 432.424913][ T10] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 432.485014][ T5676] usb 3-1: Using ep0 maxpacket: 8 [ 432.491803][ T5676] usb 3-1: unable to get BOS descriptor or descriptor too short [ 432.501107][ T5676] usb 3-1: config 9 has an invalid interface number: 214 but max is 0 [ 432.509314][ T5676] usb 3-1: config 9 has no interface number 0 [ 432.517003][ T5676] usb 3-1: config 9 interface 214 has no altsetting 0 [ 432.526758][ T5676] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=8c.e6 [ 432.535837][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.543834][ T5676] usb 3-1: Product: syz [ 432.548041][ T5676] usb 3-1: Manufacturer: syz [ 432.553193][ T5676] usb 3-1: SerialNumber: syz [ 432.588342][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 432.598870][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.607009][ T10] usb 1-1: Product: syz [ 432.611191][ T10] usb 1-1: Manufacturer: syz [ 432.615828][ T10] usb 1-1: SerialNumber: syz [ 432.623093][ T10] usb 1-1: config 0 descriptor?? [ 432.636394][ T5677] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 432.646821][ T5677] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 432.655847][ T5677] usb 4-1: media controller created [ 432.663209][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 432.715727][ T5677] i2c i2c-2: Added multiplexed i2c bus 3 [ 432.721836][ T5677] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 432.733404][ T5677] usb 4-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 432.742524][ T5677] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 432.787112][ T5677] DVB: Unable to find symbol r820t_attach() [ 432.832131][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 432.976467][ T5676] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 432.983410][ T5676] usb 3-1: setting power ON [ 432.988131][ T5676] dvb-usb: bulk message failed: -22 (2/0) [ 433.033643][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 433.124848][ T5676] dvb-usb: bulk message failed: -22 (1/0) [ 433.240190][ T5676] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 433.250015][ T5676] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 433.257451][ T5676] usb 3-1: media controller created [ 433.271816][ T5676] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 433.287753][ T5676] cxusb: set interface failed [ 433.293195][ T5676] dvb-usb: bulk message failed: -22 (3/0) [ 433.298954][ T5676] cxusb: clear tuner gpio failed [ 433.303885][ T5676] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 433.354848][ T5676] rc_core: IR keymap rc-d680-dmb not found [ 433.360753][ T5676] Registered IR keymap rc-empty [ 433.373996][ T5676] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 433.385235][ T5676] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input52 [ 433.397604][ T5676] dvb-usb: schedule remote query interval to 100 msecs. [ 433.404562][ T5676] usb 3-1: setting power OFF [ 433.409463][ T5676] dvb-usb: bulk message failed: -22 (2/0) [ 433.415462][ T5676] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 433.426412][ T5676] usb 3-1: USB disconnect, device number 107 [ 433.480650][ T5676] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 433.592922][ T9] usb 2-1: USB disconnect, device number 101 [ 433.673139][T14448] netlink: 'syz.1.3300': attribute type 1 has an invalid length. [ 433.707618][T14448] bond2: entered promiscuous mode [ 433.708033][ T5676] usb 5-1: USB disconnect, device number 112 [ 433.713075][T14448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.748920][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 433.931253][ T9] usb 4-1: USB disconnect, device number 105 [ 433.975144][T14458] usb 1-1: USB disconnect, device number 102 [ 434.564847][ T10] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 434.730871][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 434.751447][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.772065][ T10] usb 5-1: Product: syz [ 434.781645][ T10] usb 5-1: Manufacturer: syz [ 434.791462][ T10] usb 5-1: SerialNumber: syz [ 434.802782][ T10] usb 5-1: config 0 descriptor?? [ 435.034364][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.237861][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 435.454899][ T5676] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 435.550069][T14494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3318'. [ 435.639459][ T5676] usb 2-1: Using ep0 maxpacket: 16 [ 435.646564][ T5676] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.667025][ T5676] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.677037][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.694985][ T5676] usb 2-1: Product: syz [ 435.701778][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3320'. [ 435.705081][ T5676] usb 2-1: Manufacturer: syz [ 435.726494][ T5676] usb 2-1: SerialNumber: syz [ 435.746187][ T5676] usb 2-1: config 0 descriptor?? [ 436.024851][ T5676] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 436.045177][ T10] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 436.175634][ T5676] usb 4-1: Using ep0 maxpacket: 32 [ 436.182349][ T5676] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.190392][ T5676] usb 4-1: config 0 has no interface number 0 [ 436.196600][ T5676] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.207509][ T5676] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.216517][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 436.217302][ T5676] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 436.225673][ T10] usb 3-1: config 0 has no interface number 0 [ 436.234273][ T5676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.241677][ T5676] usb 4-1: config 0 descriptor?? [ 436.250467][ T10] usb 3-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 436.268216][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 436.277598][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 436.285793][ T10] usb 3-1: Product: syz [ 436.289974][ T10] usb 3-1: SerialNumber: syz [ 436.303515][ T10] usb 3-1: config 0 descriptor?? [ 436.313108][ T10] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 436.871284][ T5676] uclogic 0003:28BD:0094.0023: pen parameters not found [ 436.878382][ T5676] uclogic 0003:28BD:0094.0023: interface is invalid, ignoring [ 436.894401][ T5676] usb 4-1: USB disconnect, device number 106 [ 437.337306][ T5676] usb 5-1: USB disconnect, device number 113 [ 437.692972][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 438.054859][ T46] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 438.211482][ T46] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 438.234700][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.243157][ T5676] usb 2-1: USB disconnect, device number 102 [ 438.249258][ T46] usb 4-1: Product: syz [ 438.255988][ T46] usb 4-1: Manufacturer: syz [ 438.261057][ T46] usb 4-1: SerialNumber: syz [ 438.272363][ T46] usb 4-1: config 0 descriptor?? [ 438.410904][T14543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3336'. [ 438.420804][T14543] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3336'. [ 438.499461][ T46] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 438.658544][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3341'. [ 438.714332][ T46] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 438.767759][ T9] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 438.836856][ T5692] usb 3-1: USB disconnect, device number 108 [ 438.947509][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 438.959918][ T9] usb 5-1: config 0 has no interface number 0 [ 438.966692][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 438.976163][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 438.985445][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.993850][ T9] usb 5-1: Product: syz [ 438.998516][ T9] usb 5-1: Manufacturer: syz [ 439.005780][ T9] usb 5-1: SerialNumber: syz [ 439.015692][ T9] usb 5-1: config 0 descriptor?? [ 439.124918][ T46] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 439.274928][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 439.293022][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.321675][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.343435][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.370701][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.398624][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.428651][ T46] usb 2-1: config 0 descriptor?? [ 439.642202][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 439.868138][ T46] hid_parser_main: 7 callbacks suppressed [ 439.868159][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.888001][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.894418][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.902503][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.907592][T14584] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3353'. [ 439.919035][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.944088][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.963955][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.983635][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 439.996049][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 440.011006][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 440.031315][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 440.046704][ T46] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 440.076945][ T46] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 440.104837][ T46] microsoft 0003:045E:07DA.0024: no inputs found [ 440.117678][ T46] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 440.180349][ T46] usb 2-1: USB disconnect, device number 103 [ 440.259291][T14592] fido_id[14592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 440.309170][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3354'. [ 440.900353][ T5692] usb 4-1: USB disconnect, device number 107 [ 441.065296][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 441.414855][ T5677] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 441.536993][ T9] usb 5-1: USB disconnect, device number 114 [ 441.564938][ T5677] usb 4-1: Using ep0 maxpacket: 32 [ 441.585905][ T5677] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 441.611484][ T5677] usb 4-1: config 0 has no interface number 0 [ 441.625234][ T5677] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 441.647103][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.664965][ T5677] usb 4-1: Product: syz [ 441.674945][ T5677] usb 4-1: Manufacturer: syz [ 441.687031][ T5677] usb 4-1: SerialNumber: syz [ 441.703102][ T5677] usb 4-1: config 0 descriptor?? [ 441.750554][T14659] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3372'. [ 442.086887][ T46] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 442.273424][ T46] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 442.286107][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.294192][ T46] usb 5-1: Product: syz [ 442.299325][ T46] usb 5-1: Manufacturer: syz [ 442.304333][ T46] usb 5-1: SerialNumber: syz [ 442.315347][ T46] usb 5-1: config 0 descriptor?? [ 442.530537][ T5677] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 442.562658][ T5677] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 442.573935][ T46] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.774243][ T46] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 442.942912][ T5677] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 442.981914][ T5677] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 443.027729][ T5677] usb 4-1: USB disconnect, device number 108 [ 443.483540][T14724] sctp: [Deprecated]: syz.2.3391 (pid 14724) Use of int in max_burst socket option deprecated. [ 443.483540][T14724] Use struct sctp_assoc_value instead [ 443.548483][T14727] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3392'. [ 443.858651][T14747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3399'. [ 444.324884][ T5676] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 444.495469][ T5676] usb 3-1: Using ep0 maxpacket: 32 [ 444.502454][ T5676] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 444.518193][ T5676] usb 3-1: config 0 has no interface number 0 [ 444.527646][ T5676] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 444.539756][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.547959][ T5676] usb 3-1: Product: syz [ 444.552186][ T5676] usb 3-1: Manufacturer: syz [ 444.556895][ T5676] usb 3-1: SerialNumber: syz [ 444.570658][ T5676] usb 3-1: config 0 descriptor?? [ 444.653117][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3410'. [ 444.903722][ T46] usb 5-1: USB disconnect, device number 115 [ 445.397691][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 445.421443][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 445.694902][ T10] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 445.810656][ T5676] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 445.823780][ T5676] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 445.835595][ T5676] usb 3-1: USB disconnect, device number 109 [ 445.870102][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 445.879464][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.887526][ T10] usb 5-1: Product: syz [ 445.891754][ T10] usb 5-1: Manufacturer: syz [ 445.896370][ T10] usb 5-1: SerialNumber: syz [ 445.903593][ T10] usb 5-1: config 0 descriptor?? [ 446.118033][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 446.304944][T14842] usb usb7: usbfs: process 14842 (syz.0.3434) did not claim interface 3 before use [ 446.321666][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 446.763897][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.771618][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.919798][T14859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.942554][T14859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.085056][ T5676] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 447.102935][ T7183] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.116041][ T7183] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.125148][ T7183] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.134091][ T7183] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.274886][ T5676] usb 4-1: Using ep0 maxpacket: 16 [ 447.288015][ T5676] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 447.309782][ T5676] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 447.320101][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.328778][ T5676] usb 4-1: Product: syz [ 447.335023][ T5676] usb 4-1: Manufacturer: syz [ 447.339872][ T5676] usb 4-1: SerialNumber: syz [ 447.357568][ T5676] usb 4-1: config 0 descriptor?? [ 447.392041][ T5676] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 447.439791][ T5676] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 447.704903][ T5677] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 447.864849][ T5677] usb 2-1: Using ep0 maxpacket: 8 [ 447.874204][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.887143][ T5677] usb 2-1: config 9 has an invalid interface number: 214 but max is 0 [ 447.901666][ T5677] usb 2-1: config 9 has no interface number 0 [ 447.918421][ T5677] usb 2-1: config 9 interface 214 has no altsetting 0 [ 447.936414][ T5677] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=8c.e6 [ 447.954285][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.972778][ T5677] usb 2-1: Product: syz [ 447.981846][ T5677] usb 2-1: Manufacturer: syz [ 447.986816][ T5677] usb 2-1: SerialNumber: syz [ 447.997529][ T5676] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 448.430452][ T5677] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 448.440947][ T5676] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 448.457040][ T5677] usb 2-1: setting power ON [ 448.461617][ T5676] em28xx 4-1:0.0: board has no eeprom [ 448.475634][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 448.502105][T14885] usb 5-1: USB disconnect, device number 116 [ 448.626117][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 448.752009][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 448.777571][ T5677] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 448.786270][ T5677] usb 2-1: media controller created [ 448.808375][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 448.863359][ T5677] cxusb: set interface failed [ 448.877060][ T5677] dvb-usb: bulk message failed: -22 (3/0) [ 448.885225][ T5677] cxusb: clear tuner gpio failed [ 448.890245][ T5677] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 448.964833][ T5677] rc_core: IR keymap rc-d680-dmb not found [ 448.970887][ T5677] Registered IR keymap rc-empty [ 448.983033][ T5677] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 448.997500][ T5677] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input54 [ 449.010462][ T5677] dvb-usb: schedule remote query interval to 100 msecs. [ 449.018904][ T5677] usb 2-1: setting power OFF [ 449.023544][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 449.029836][ T5677] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 449.125746][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 449.244940][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 449.355002][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 449.475584][T14885] dvb-usb: bulk message failed: -22 (1/0) [ 449.569826][T14868] em28xx 4-1:0.0: reading from i2c device at 0xfe failed (error=-5) [ 449.592161][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 449.614963][ T5676] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 449.623224][ T5676] em28xx 4-1:0.0: dvb set to bulk mode. [ 449.629182][ T5677] em28xx 4-1:0.0: Binding DVB extension [ 449.650255][ T5676] usb 4-1: USB disconnect, device number 109 [ 449.720198][T14885] dvb-usb: bulk message failed: -22 (1/0) [ 449.731254][ T5676] em28xx 4-1:0.0: Disconnecting em28xx [ 449.772616][ T5677] em28xx 4-1:0.0: Registering input extension [ 449.786723][ T5676] em28xx 4-1:0.0: Closing input extension [ 449.851059][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 449.891887][ T5676] em28xx 4-1:0.0: Freeing device [ 449.975564][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 450.086974][ T5676] dvb-usb: bulk message failed: -22 (1/0) [ 450.208467][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 450.290408][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 450.301324][T14984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3484'. [ 450.324905][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 450.446948][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 450.484517][T14873] usb 2-1: USB disconnect, device number 104 [ 450.613157][T14873] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 451.594915][ T5677] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 451.703841][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 451.766284][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 451.780761][ T5677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.809040][ T5677] usb 3-1: config 9 has an invalid interface number: 214 but max is 0 [ 451.821746][ T5677] usb 3-1: config 9 has no interface number 0 [ 451.850007][ T5677] usb 3-1: config 9 interface 214 has no altsetting 0 [ 451.877616][ T5677] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=8c.e6 [ 451.897695][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.909572][ T5677] usb 3-1: Product: syz [ 451.915116][ T5677] usb 3-1: Manufacturer: syz [ 451.919896][ T5677] usb 3-1: SerialNumber: syz [ 452.353459][ T5677] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 452.379340][ T5677] usb 3-1: setting power ON [ 452.405638][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 452.461720][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.478903][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.488744][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.499128][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.506860][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.564854][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 452.713008][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 452.740637][ T5677] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 452.752512][ T6020] syz_tun (unregistering): left allmulticast mode [ 452.756525][ T5677] usb 3-1: media controller created [ 452.764280][ T6020] syz_tun (unregistering): left promiscuous mode [ 452.770748][ T6020] bridge0: port 3(syz_tun) entered disabled state [ 452.800834][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.853493][ T5677] cxusb: set interface failed [ 452.865970][ T5677] dvb-usb: bulk message failed: -22 (3/0) [ 452.882048][ T5677] cxusb: clear tuner gpio failed [ 452.893111][ T5677] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 453.054930][ T5677] rc_core: IR keymap rc-d680-dmb not found [ 453.090308][ T5677] Registered IR keymap rc-empty [ 453.118263][ T5677] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 453.143549][ T5677] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input56 [ 453.225555][ T5677] dvb-usb: schedule remote query interval to 100 msecs. [ 453.233241][ T5677] usb 3-1: setting power OFF [ 453.241992][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 453.247967][ T5677] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 453.334854][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 453.412969][ T7181] bond0: (slave netdevsim0): Releasing backup interface [ 453.443256][ T7181] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 453.455408][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 453.574938][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 453.628408][T15039] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.640234][T15039] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.651167][T15039] bridge_slave_0: entered allmulticast mode [ 453.659004][T15039] bridge_slave_0: entered promiscuous mode [ 453.695050][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 453.753493][T15039] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.761996][T15039] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.770517][T15039] bridge_slave_1: entered allmulticast mode [ 453.780962][T15039] bridge_slave_1: entered promiscuous mode [ 453.824915][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 453.940169][T15039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.955521][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 454.001352][T15039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.074917][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 454.123831][ T7181] bridge0: port 4(team0) entered disabled state [ 454.150853][ T7181] bridge_slave_1: left allmulticast mode [ 454.163649][ T7181] bridge_slave_1: left promiscuous mode [ 454.177225][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.188394][ T7181] bridge_slave_0: left allmulticast mode [ 454.194176][ T7181] bridge_slave_0: left promiscuous mode [ 454.205457][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 454.211713][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.334932][ T5677] dvb-usb: bulk message failed: -22 (1/0) [ 454.400540][ T5677] usb 3-1: USB disconnect, device number 110 [ 454.595150][ T50] Bluetooth: hci3: command tx timeout [ 454.607318][ T5677] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 454.618001][ T7181] gretap0 (unregistering): left promiscuous mode [ 454.938313][ T7181] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 454.954703][ T7181] bridge3 (unregistering): left promiscuous mode [ 454.978128][ T7181] bridge3 (unregistering): left allmulticast mode [ 455.039660][ T7181] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 455.049661][ T7181] bridge4 (unregistering): left promiscuous mode [ 455.056609][ T7181] bridge4 (unregistering): left allmulticast mode [ 455.100110][ T7181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.109054][ T7181] bond_slave_0: left promiscuous mode [ 455.116152][ T7181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.125288][ T7181] bond_slave_1: left promiscuous mode [ 455.130997][ T7181] bond0 (unregistering): Released all slaves [ 455.142542][ T7181] bond1 (unregistering): Released all slaves [ 455.156535][ T7181] bond2 (unregistering): Released all slaves [ 455.198211][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 455.236024][T15039] team0: Port device team_slave_0 added [ 455.257833][T15039] team0: Port device team_slave_1 added [ 455.458397][T15039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.476451][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.508696][T15039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.526413][T15039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.535883][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.564104][T15039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.670635][T15119] tipc: Started in network mode [ 455.676480][T15119] tipc: Node identity 0047a2b78a000000000000000000001, cluster identity 4711 [ 455.685648][T15119] tipc: Enabling of bearer rejected, failed to enable media [ 455.792199][ T7181] veth1_to_team: left promiscuous mode [ 455.871516][ T7181] hsr_slave_0: left promiscuous mode [ 455.886983][ T7181] hsr_slave_1: left promiscuous mode [ 455.898647][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.025665][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 456.297263][ T7181] team_slave_1 (unregistering): left promiscuous mode [ 456.332945][ T7181] team_slave_1 (unregistering): left allmulticast mode [ 456.362148][ T7181] team0 (unregistering): Port device team_slave_1 removed [ 456.383850][ T7181] team_slave_0 (unregistering): left promiscuous mode [ 456.390994][ T7181] team_slave_0 (unregistering): left allmulticast mode [ 456.399546][ T7181] team0 (unregistering): Port device team_slave_0 removed [ 456.540717][T15039] hsr_slave_0: entered promiscuous mode [ 456.547253][T15039] hsr_slave_1: entered promiscuous mode [ 456.553438][T15039] debugfs: 'hsr0' already exists in 'hsr' [ 456.559951][T15039] Cannot create hsr debugfs directory [ 456.622730][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 456.675389][ T50] Bluetooth: hci3: command tx timeout [ 456.765480][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 457.100791][T15170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3540'. [ 457.129834][ T5676] hid_parser_main: 6 callbacks suppressed [ 457.129853][ T5676] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 457.290696][ T5676] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.429170][T15206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3550'. [ 458.506467][T15039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.554021][T15039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.600011][T15039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.633207][T15039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.659636][T15039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.701929][T15039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.728755][T15039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.757083][ T50] Bluetooth: hci3: command tx timeout [ 458.770663][T15039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.084210][T15039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.136437][T15039] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.150004][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.157192][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.197785][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.204946][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.566959][T15039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.814613][T15039] veth0_vlan: entered promiscuous mode [ 459.851656][T15039] veth1_vlan: entered promiscuous mode [ 459.964370][T15039] veth0_macvtap: entered promiscuous mode [ 459.988920][T15039] veth1_macvtap: entered promiscuous mode [ 460.053760][T15039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.126179][T15039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.170371][ T230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.204727][ T230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.366118][ T230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.438023][ T230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.453662][T15280] sctp: [Deprecated]: syz.3.3572 (pid 15280) Use of int in max_burst socket option deprecated. [ 460.453662][T15280] Use struct sctp_assoc_value instead [ 460.707479][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.739051][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.835047][ T50] Bluetooth: hci3: command tx timeout [ 460.862665][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.882938][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.265101][T15302] batadv0: entered promiscuous mode [ 461.287632][T15302] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 461.299158][T15302] batadv0: left promiscuous mode [ 461.425920][ T10] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 461.466528][T14890] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 461.601714][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 461.633266][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.644541][T14890] usb 2-1: Using ep0 maxpacket: 32 [ 461.667082][ T10] usb 5-1: Product: syz [ 461.675442][T14890] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 461.687740][ T10] usb 5-1: Manufacturer: syz [ 461.697239][ T10] usb 5-1: SerialNumber: syz [ 461.701898][T14890] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 461.728758][ T10] usb 5-1: config 0 descriptor?? [ 461.734257][T14890] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.748257][T14890] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 461.778682][T14890] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 461.796021][T14890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.815165][T14890] usb 2-1: Product: syz [ 461.825125][T14890] usb 2-1: Manufacturer: syz [ 461.838674][T14890] usb 2-1: SerialNumber: syz [ 461.879775][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 461.935164][T14890] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input57 [ 461.977550][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 462.095003][T14890] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 462.122284][T14890] (id 0x00) [ 462.180100][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 462.199604][T14890] rc_core: IR keymap rc-imon-pad not found [ 462.219198][T14890] Registered IR keymap rc-empty [ 462.238617][T14890] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 462.285785][T14890] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 462.360332][T14890] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 462.421001][T14890] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input58 [ 462.469865][T14890] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:105> initialized [ 462.683321][T14885] usb 2-1: USB disconnect, device number 105 [ 462.687803][T15301] imon:send_packet: packet tx failed (-71) [ 462.728998][T15301] imon:vfd_write: send packet #0 failed [ 462.758286][T15345] imon:send_packet: error submitting urb(-19) [ 462.810699][T15345] imon:vfd_write: send packet #0 failed [ 463.500950][T15393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3602'. [ 464.003019][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3611'. [ 464.177731][T14890] usb 5-1: USB disconnect, device number 117 [ 464.266745][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3618'. [ 464.277244][T15432] syz_tun: entered promiscuous mode [ 464.282513][T15432] syz_tun: entered allmulticast mode [ 464.609890][ T50] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 465.515737][T14890] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 465.674900][T14873] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 465.709601][T14890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 465.723901][T14890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.735272][T14890] usb 5-1: Product: syz [ 465.739771][T14890] usb 5-1: Manufacturer: syz [ 465.745810][T14890] usb 5-1: SerialNumber: syz [ 465.752690][T14890] usb 5-1: config 0 descriptor?? [ 465.844838][T14873] usb 3-1: Using ep0 maxpacket: 8 [ 465.877149][T14873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.918950][T14873] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 465.951042][T14873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.978481][T14873] usb 3-1: config 0 descriptor?? [ 465.996285][T14890] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 466.014300][T14873] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 466.596468][T14890] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 467.221714][T14873] gspca_vc032x: reg_w err -71 [ 467.234964][T14873] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 467.248014][T14873] usb 3-1: USB disconnect, device number 111 [ 467.284956][T14885] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 467.445477][T14885] usb 4-1: Using ep0 maxpacket: 8 [ 467.452741][T14885] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.464242][T14885] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.475213][T14885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 467.481865][T14885] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 467.492144][T14885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.505777][T14885] usb 4-1: config 0 descriptor?? [ 467.919307][T14885] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 467.927548][T14885] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 467.934614][T14885] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 467.941680][T14885] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 467.948799][T14885] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0 [ 467.957267][T14885] mcp2221 0003:04D8:00DD.0026: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 468.024937][ T5677] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 468.131894][T14873] usb 4-1: USB disconnect, device number 110 [ 468.177101][ T5677] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.193921][ T5677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 468.203333][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 468.211590][ T5677] usb 3-1: Product: syz [ 468.215998][ T5677] usb 3-1: Manufacturer: syz [ 468.220660][ T5677] usb 3-1: SerialNumber: syz [ 468.236882][ T10] usb 5-1: USB disconnect, device number 118 [ 468.388627][T15510] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3649'. [ 468.439800][ T5677] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 468.735966][ T5677] usb 3-1: USB disconnect, device number 112 [ 468.759455][ T5677] usblp0: removed [ 469.095690][T14886] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 469.259727][T14886] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 469.293438][T14886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.325785][T14886] usb 2-1: Product: syz [ 469.340517][T14886] usb 2-1: Manufacturer: syz [ 469.354526][T14886] usb 2-1: SerialNumber: syz [ 469.378505][T14886] usb 2-1: config 0 descriptor?? [ 469.620052][T14886] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 470.243058][T14886] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 470.861337][T15560] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 470.952735][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 470.952750][ T29] audit: type=1326 audit(1777726509.354:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.009179][ T29] audit: type=1326 audit(1777726509.354:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.033556][ T29] audit: type=1326 audit(1777726509.394:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.059183][ T29] audit: type=1326 audit(1777726509.394:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.083604][ T29] audit: type=1326 audit(1777726509.394:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.110078][ T29] audit: type=1326 audit(1777726509.394:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.143496][T14886] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 471.151357][ T29] audit: type=1326 audit(1777726509.394:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.187494][ T29] audit: type=1326 audit(1777726509.394:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc646d9cdd9 code=0x7ffc0000 [ 471.212003][ T29] audit: type=1326 audit(1777726509.394:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc646d9ca6b code=0x7ffc0000 [ 471.240984][ T29] audit: type=1326 audit(1777726509.394:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15556 comm="syz.3.3667" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc646d9ca6b code=0x7ffc0000 [ 471.359065][T14886] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 471.368951][T14886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.379365][T14886] usb 5-1: Product: syz [ 471.390842][T14886] usb 5-1: Manufacturer: syz [ 471.396418][T14886] usb 5-1: SerialNumber: syz [ 471.403608][T14886] usb 5-1: config 0 descriptor?? [ 471.618270][T14886] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 471.909503][ T5677] usb 2-1: USB disconnect, device number 106 [ 472.328397][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3679'. [ 472.400803][T15587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3679'. [ 473.298066][T14886] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 473.331633][T14886] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 473.357241][T14886] usb 5-1: media controller created [ 473.364549][T14886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 473.438556][T14886] i2c i2c-2: Added multiplexed i2c bus 3 [ 473.456084][T14886] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 473.472821][T14886] usb 5-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 473.486329][T14886] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 473.548460][T14886] DVB: Unable to find symbol r820t_attach() [ 473.585098][ T10] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 473.713955][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'. [ 473.759469][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 473.779999][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.798503][ T10] usb 2-1: Product: syz [ 473.813900][ T10] usb 2-1: Manufacturer: syz [ 473.820737][ T10] usb 2-1: SerialNumber: syz [ 473.841185][ T10] usb 2-1: config 0 descriptor?? [ 474.058474][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 474.155843][T14886] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 474.325701][T14886] usb 3-1: Using ep0 maxpacket: 32 [ 474.344336][T14886] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 474.362184][T14886] usb 3-1: config 0 has no interface number 0 [ 474.376882][T14886] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 474.393422][T14886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.405000][T14886] usb 3-1: Product: syz [ 474.409176][T14886] usb 3-1: Manufacturer: syz [ 474.414444][T14886] usb 3-1: SerialNumber: syz [ 474.423702][T14886] usb 3-1: config 0 descriptor?? [ 474.631372][T15635] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 474.637920][T15635] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 474.648416][T15635] vhci_hcd vhci_hcd.0: Device attached [ 474.669662][T14873] usb 5-1: USB disconnect, device number 119 [ 474.691843][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 474.925325][ T5677] usb 40-1: SetAddress Request (2) to port 0 [ 474.956609][ T5677] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 475.169656][T15636] vhci_hcd: connection reset by peer [ 475.187983][ T7183] vhci_hcd vhci_hcd.3: stop threads [ 475.213114][ T7183] vhci_hcd vhci_hcd.3: release socket [ 475.237378][ T7183] vhci_hcd vhci_hcd.3: disconnect device [ 475.464540][T14886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -32 [ 475.478744][T14886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 475.488685][T14886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 475.499980][T14886] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 475.513049][T14886] usb 3-1: USB disconnect, device number 113 [ 475.555219][ T10] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 475.744918][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 475.758805][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 475.772415][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.789085][ T10] usb 5-1: config 0 descriptor?? [ 475.804582][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 476.167103][T15672] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3711'. [ 476.264843][T14886] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 476.323815][T14890] usb 2-1: USB disconnect, device number 107 [ 476.428201][T14886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 476.454389][T14886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.471892][T14886] usb 4-1: Product: syz [ 476.474273][T15676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3712'. [ 476.491840][T14886] usb 4-1: Manufacturer: syz [ 476.501397][T14886] usb 4-1: SerialNumber: syz [ 476.592183][T15682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3715'. [ 476.606876][T14886] usb 4-1: config 0 descriptor?? [ 476.837719][T14886] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.484153][T14886] usb 4-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 478.495133][T14886] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 478.515310][T14886] usb 4-1: media controller created [ 478.526927][ T5706] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 478.533471][T15709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3726'. [ 478.536756][T14886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.605358][T14886] i2c i2c-2: Added multiplexed i2c bus 3 [ 478.611423][T14886] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 478.624078][T14886] usb 4-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 478.625845][T15712] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3727'. [ 478.634167][T14886] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 478.694633][T14886] DVB: Unable to find symbol r820t_attach() [ 478.705115][ T5706] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 478.717443][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.732082][ T5706] usb 3-1: Product: syz [ 478.740460][ T5706] usb 3-1: Manufacturer: syz [ 478.760198][ T5706] usb 3-1: SerialNumber: syz [ 478.780325][ T5706] usb 3-1: config 0 descriptor?? [ 479.006585][ T5706] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.047562][ T10] gspca_vc032x: reg_r err -71 [ 479.052291][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.059115][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.070576][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.081830][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.088728][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.102272][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.108945][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.114253][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.119791][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.125127][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.130575][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.135920][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.141401][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.148502][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.153982][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.159345][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.164840][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 479.170145][ T10] gspca_vc032x: Unknown sensor... [ 479.175464][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 479.185922][ T10] usb 5-1: USB disconnect, device number 120 [ 479.612647][ T5706] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 479.780452][ T10] usb 4-1: USB disconnect, device number 111 [ 479.820999][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3737'. [ 480.038561][ T5677] usb 40-1: device descriptor read/8, error -110 [ 480.454860][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 480.455898][ T5677] usb usb40-port1: attempt power cycle [ 480.614835][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 480.621432][ T10] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 480.630700][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.640588][ T10] usb 4-1: config 0 descriptor?? [ 480.649584][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 481.011069][T15780] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3756'. [ 481.081507][ T5677] usb usb40-port1: unable to enumerate USB device [ 481.309241][ T5677] usb 3-1: USB disconnect, device number 114 [ 481.365277][T14890] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 481.495002][T14890] usb 5-1: device descriptor read/64, error -71 [ 481.726903][T15794] kAFS: unable to lookup cell '(,c¾ûL' [ 481.744959][T14890] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 481.894916][T14890] usb 5-1: device descriptor read/64, error -71 [ 482.015146][T14890] usb usb5-port1: attempt power cycle [ 482.366466][T14890] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 482.374331][T14873] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 482.405437][T14890] usb 5-1: device descriptor read/8, error -71 [ 482.547898][T14873] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 482.564858][T14873] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 482.589904][T14873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 482.610313][T14873] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.631715][T14873] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.647721][T14890] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 482.662756][T14873] usb 2-1: Product: syz [ 482.669021][T14873] usb 2-1: Manufacturer: syz [ 482.684860][T14873] usb 2-1: SerialNumber: syz [ 482.698504][T14890] usb 5-1: device descriptor read/8, error -71 [ 482.708689][T14873] usb 2-1: config 0 descriptor?? [ 482.728828][T14873] hub 2-1:0.0: bad descriptor, ignoring hub [ 482.735018][T14873] hub 2-1:0.0: probe with driver hub failed with error -5 [ 482.746603][T14873] usb 2-1: selecting invalid altsetting 0 [ 482.832215][T15808] input: syz1 as /devices/virtual/input/input59 [ 482.838954][T14890] usb usb5-port1: unable to enumerate USB device [ 483.046659][T14890] usb 2-1: USB disconnect, device number 108 [ 483.871715][ T10] gspca_vc032x: reg_r err -71 [ 483.878055][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.883734][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.891243][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.896870][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.902423][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.908059][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.913475][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.919168][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.924560][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.930412][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.935979][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.941359][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.946977][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.952328][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.959021][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.964375][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.970026][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 483.975433][ T10] gspca_vc032x: Unknown sensor... [ 483.980763][ T10] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 483.991699][ T10] usb 4-1: USB disconnect, device number 112 [ 486.473259][T15904] netlink: 492 bytes leftover after parsing attributes in process `syz.1.3803'. [ 486.755265][T14885] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 486.916306][T14885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.928452][T14885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.950476][T14885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.968975][T14885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.991571][T14885] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.003527][T14885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.014554][T14885] usb 2-1: config 0 descriptor?? [ 487.441180][T14885] plantronics 0003:047F:FFFF.0027: ignoring exceeding usage max [ 487.498352][T14885] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 487.880431][T15947] bond3: entered promiscuous mode [ 488.744181][T15942] usb 2-1: string descriptor 0 read error: -71 [ 489.295614][ T5677] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 489.457833][ T5677] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.489259][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.526618][ T5677] usb 5-1: Product: syz [ 489.558229][ T5677] usb 5-1: Manufacturer: syz [ 489.582054][ T5706] usb 2-1: USB disconnect, device number 109 [ 489.593870][ T5677] usb 5-1: SerialNumber: syz [ 489.624546][ T5677] usb 5-1: config 0 descriptor?? [ 489.893024][ T5677] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 490.304792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 490.644892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 490.674779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 490.914959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 491.026853][ T5706] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 491.184777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 491.394781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 491.434782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 491.464932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 491.706950][ T5706] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.975969][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.186377][ T5706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 492.377526][ T5706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.642893][ T5677] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 492.667188][ T5706] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 492.683246][ T5677] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 492.692901][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 492.708950][ T5677] usb 5-1: media controller created [ 492.716351][ T5706] usb 2-1: Product: syz [ 492.725052][ T5706] usb 2-1: Manufacturer: syz [ 492.732617][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.769178][ T5706] cdc_wdm 2-1:1.0: skipping garbage [ 492.799305][ T5706] cdc_wdm 2-1:1.0: skipping garbage [ 492.963921][ T5706] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 492.999219][ T5706] cdc_wdm 2-1:1.0: Unknown control protocol [ 493.166745][ T5677] i2c i2c-2: Added multiplexed i2c bus 3 [ 493.188568][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.195189][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.201505][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.208109][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.214406][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.221009][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.227308][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.233905][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.240228][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.246838][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.253160][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.259758][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.266212][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.272810][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.282342][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.288950][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.295505][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.302104][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.308358][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 493.314967][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 493.347061][T14885] usb 2-1: USB disconnect, device number 110 [ 493.365808][ T5677] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 493.420667][ T5677] usb 5-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 493.482494][ T5677] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 493.681827][ T5677] DVB: Unable to find symbol r820t_attach() [ 493.741832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 494.605034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 501.345335][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.786360][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.837278][ T5677] usb 5-1: USB disconnect, device number 125 [ 507.475250][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.495434][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.506066][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.519556][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.531469][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 507.622790][T16053] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3863'. [ 507.718417][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.731853][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.742000][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.758663][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.773216][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.410624][ C0] sched: DL replenish lagged too much [ 509.642312][ T50] Bluetooth: hci1: command tx timeout [ 509.709168][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3867'. [ 509.876738][ T50] Bluetooth: hci6: command tx timeout [ 510.161185][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.182924][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.197448][T16054] bridge_slave_0: entered allmulticast mode [ 510.214882][T16054] bridge_slave_0: entered promiscuous mode [ 510.237778][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.259492][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.290936][T16054] bridge_slave_1: entered allmulticast mode [ 510.310804][T16054] bridge_slave_1: entered promiscuous mode [ 510.491093][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.504522][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.516260][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.523633][T16058] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.532107][T16058] bridge_slave_0: entered allmulticast mode [ 510.541677][T16058] bridge_slave_0: entered promiscuous mode [ 510.578354][T16058] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.587690][T16058] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.596141][T16058] bridge_slave_1: entered allmulticast mode [ 510.603761][T16058] bridge_slave_1: entered promiscuous mode [ 510.613425][T16054] team0: Port device team_slave_0 added [ 510.654057][T16054] team0: Port device team_slave_1 added [ 510.686617][T16058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.714347][T16058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.737786][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.746024][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.779230][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.175793][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3875'. [ 511.565097][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.588811][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.667783][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.699804][T16058] team0: Port device team_slave_0 added [ 511.718065][ T50] Bluetooth: hci1: command tx timeout [ 511.743757][T16058] team0: Port device team_slave_1 added [ 511.954814][ T50] Bluetooth: hci6: command tx timeout [ 513.795031][ T50] Bluetooth: hci1: command tx timeout [ 514.034924][ T50] Bluetooth: hci6: command tx timeout [ 515.875155][ T50] Bluetooth: hci1: command tx timeout [ 516.115050][ T50] Bluetooth: hci6: command tx timeout [ 516.712853][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 516.721953][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3876'. [ 518.758397][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 518.977602][T16105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 519.023273][T16058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.094934][T16058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.179417][T16058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.380729][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.330854][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 574.415115][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.415176][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.590450][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.607287][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 676.696803][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 676.696843][ T30] Tainted: G L syzkaller #0 [ 676.696855][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.696864][ T30] task:kworker/u8:2 state:D stack:22152 pid:35 tgid:35 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 676.696909][ T30] Workqueue: events_unbound linkwatch_event [ 676.697112][ T30] Call Trace: [ 676.697123][ T30] [ 676.697137][ T30] __schedule+0x17b4/0x5680 [ 676.697266][ T30] ? __pfx___schedule+0x10/0x10 [ 676.697295][ T30] ? schedule+0x90/0x360 [ 676.697319][ T30] schedule+0x164/0x360 [ 676.697341][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.697361][ T30] __mutex_lock+0x7f7/0x1550 [ 676.697391][ T30] ? __mutex_lock+0x608/0x1550 [ 676.697416][ T30] ? linkwatch_event+0xe/0x60 [ 676.697442][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.697477][ T30] ? process_scheduled_works+0xa70/0x1860 [ 676.697530][ T30] ? process_scheduled_works+0xa70/0x1860 [ 676.697550][ T30] linkwatch_event+0xe/0x60 [ 676.697573][ T30] process_scheduled_works+0xb5d/0x1860 [ 676.697620][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 676.697646][ T30] ? assign_work+0x3d5/0x5e0 [ 676.697669][ T30] worker_thread+0xa53/0xfc0 [ 676.697715][ T30] kthread+0x388/0x470 [ 676.697744][ T30] ? __pfx_worker_thread+0x10/0x10 [ 676.697761][ T30] ? __pfx_kthread+0x10/0x10 [ 676.697784][ T30] ret_from_fork+0x514/0xb70 [ 676.697830][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 676.697850][ T30] ? __switch_to+0xc79/0x1410 [ 676.697876][ T30] ? __pfx_kthread+0x10/0x10 [ 676.697899][ T30] ret_from_fork_asm+0x1a/0x30 [ 676.697948][ T30] [ 676.698059][ T30] INFO: task kworker/u8:13:7183 blocked for more than 143 seconds. [ 676.698076][ T30] Tainted: G L syzkaller #0 [ 676.698087][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.698096][ T30] task:kworker/u8:13 state:D stack:21784 pid:7183 tgid:7183 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 676.698138][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 676.698223][ T30] Call Trace: [ 676.698230][ T30] [ 676.698242][ T30] __schedule+0x17b4/0x5680 [ 676.698293][ T30] ? __pfx___schedule+0x10/0x10 [ 676.698322][ T30] ? schedule+0x90/0x360 [ 676.698345][ T30] schedule+0x164/0x360 [ 676.698368][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.698387][ T30] __mutex_lock+0x7f7/0x1550 [ 676.698416][ T30] ? __mutex_lock+0x608/0x1550 [ 676.698441][ T30] ? addrconf_verify_work+0x19/0x30 [ 676.698465][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.698493][ T30] ? process_scheduled_works+0xa70/0x1860 [ 676.698524][ T30] addrconf_verify_work+0x19/0x30 [ 676.698544][ T30] ? process_scheduled_works+0xa70/0x1860 [ 676.698561][ T30] process_scheduled_works+0xb5d/0x1860 [ 676.698607][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 676.698632][ T30] ? assign_work+0x3d5/0x5e0 [ 676.698656][ T30] worker_thread+0xa53/0xfc0 [ 676.698701][ T30] kthread+0x388/0x470 [ 676.698723][ T30] ? __pfx_worker_thread+0x10/0x10 [ 676.698748][ T30] ? __pfx_kthread+0x10/0x10 [ 676.698771][ T30] ret_from_fork+0x514/0xb70 [ 676.698792][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 676.698811][ T30] ? __switch_to+0xc79/0x1410 [ 676.698839][ T30] ? __pfx_kthread+0x10/0x10 [ 676.698862][ T30] ret_from_fork_asm+0x1a/0x30 [ 676.698898][ T30] [ 676.698945][ T30] INFO: task syz-executor:16054 blocked for more than 143 seconds. [ 676.698961][ T30] Tainted: G L syzkaller #0 [ 676.698972][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.698981][ T30] task:syz-executor state:D stack:23016 pid:16054 tgid:16054 ppid:1 task_flags:0x400140 flags:0x00080002 [ 676.699022][ T30] Call Trace: [ 676.699029][ T30] [ 676.699041][ T30] __schedule+0x17b4/0x5680 [ 676.699065][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.699108][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 676.699141][ T30] ? stack_depot_save_flags+0x33/0x810 [ 676.699238][ T30] ? __pfx___schedule+0x10/0x10 [ 676.699268][ T30] ? schedule+0x90/0x360 [ 676.699291][ T30] schedule+0x164/0x360 [ 676.699314][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.699333][ T30] __mutex_lock+0x7f7/0x1550 [ 676.699356][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 676.699409][ T30] ? __mutex_lock+0x608/0x1550 [ 676.699434][ T30] ? rtnl_newlink+0x883/0x1bb0 [ 676.699457][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.699489][ T30] ? ns_capable+0x89/0xe0 [ 676.699519][ T30] rtnl_newlink+0x883/0x1bb0 [ 676.699552][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 676.699577][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.699599][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.699670][ T30] ? __kernel_text_address+0xd/0x30 [ 676.699692][ T30] ? unwind_get_return_address+0x4d/0x90 [ 676.699730][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.699754][ T30] ? arch_stack_walk+0xfb/0x150 [ 676.699785][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 676.699821][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 676.699841][ T30] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 676.699861][ T30] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 676.699909][ T30] ? netlink_sendmsg+0x5d4/0xb40 [ 676.699969][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 676.699989][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.700011][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.700042][ T30] netlink_rcv_skb+0x232/0x4b0 [ 676.700065][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.700088][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.700122][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.700144][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.700171][ T30] netlink_unicast+0x75c/0x8e0 [ 676.700202][ T30] netlink_sendmsg+0x813/0xb40 [ 676.700233][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.700259][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.700336][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.700377][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.700401][ T30] __sys_sendto+0x672/0x710 [ 676.700461][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 676.700511][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.700545][ T30] __x64_sys_sendto+0xde/0x100 [ 676.700567][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.700604][ T30] do_syscall_64+0x15f/0xf80 [ 676.700656][ T30] ? clear_bhb_loop+0x40/0x90 [ 676.700678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.700697][ T30] RIP: 0033:0x7f8c3515d60e [ 676.700719][ T30] RSP: 002b:00007f8c3553f638 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 676.700746][ T30] RAX: ffffffffffffffda RBX: 0000555579dd0500 RCX: 00007f8c3515d60e [ 676.700759][ T30] RDX: 0000000000000084 RSI: 00007f8c35f44670 RDI: 0000000000000003 [ 676.700772][ T30] RBP: 0000000000000001 R08: 00007f8c3553f6b4 R09: 000000000000000c [ 676.700783][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 676.700794][ T30] R13: 0000000000000000 R14: 00007f8c35f44670 R15: 0000000000000000 [ 676.700823][ T30] [ 676.700836][ T30] INFO: task syz.3.3877:16111 blocked for more than 143 seconds. [ 676.700852][ T30] Tainted: G L syzkaller #0 [ 676.700863][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.700873][ T30] task:syz.3.3877 state:D stack:26752 pid:16111 tgid:16109 ppid:13432 task_flags:0x400140 flags:0x00080002 [ 676.700917][ T30] Call Trace: [ 676.700924][ T30] [ 676.700935][ T30] __schedule+0x17b4/0x5680 [ 676.700959][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.701001][ T30] ? __pfx___schedule+0x10/0x10 [ 676.701031][ T30] ? schedule+0x90/0x360 [ 676.701054][ T30] schedule+0x164/0x360 [ 676.701076][ T30] schedule_preempt_disabled+0x13/0x30 [ 676.701096][ T30] __mutex_lock+0x7f7/0x1550 [ 676.701125][ T30] ? __mutex_lock+0x608/0x1550 [ 676.701150][ T30] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 676.701173][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 676.701213][ T30] rtnetlink_rcv_msg+0x722/0xbe0 [ 676.701238][ T30] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 676.701257][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.701276][ T30] ? ref_tracker_free+0x693/0x840 [ 676.701314][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 676.701345][ T30] netlink_rcv_skb+0x232/0x4b0 [ 676.701368][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.701391][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.701425][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.701447][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.701473][ T30] netlink_unicast+0x75c/0x8e0 [ 676.701504][ T30] netlink_sendmsg+0x813/0xb40 [ 676.701536][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.701561][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.701585][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.701610][ T30] ____sys_sendmsg+0x972/0x9f0 [ 676.701633][ T30] ? __might_fault+0xaf/0x130 [ 676.701661][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.701706][ T30] ? import_iovec+0x73/0xa0 [ 676.701768][ T30] ___sys_sendmsg+0x2a5/0x360 [ 676.701789][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 676.701813][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.701843][ T30] ? futex_wake+0x4ac/0x580 [ 676.701905][ T30] ? __fget_files+0x2a/0x420 [ 676.701939][ T30] ? __fget_files+0x3a0/0x420 [ 676.701969][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.701995][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.702027][ T30] ? rcu_is_watching+0x15/0xb0 [ 676.702057][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.702076][ T30] do_syscall_64+0x15f/0xf80 [ 676.702096][ T30] ? trace_irq_disable+0x3b/0x140 [ 676.702131][ T30] ? clear_bhb_loop+0x40/0x90 [ 676.702153][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.702170][ T30] RIP: 0033:0x7fc646d9cdd9 [ 676.702186][ T30] RSP: 002b:00007fc647bc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.702205][ T30] RAX: ffffffffffffffda RBX: 00007fc647016090 RCX: 00007fc646d9cdd9 [ 676.702219][ T30] RDX: 0000000000004894 RSI: 00002000000012c0 RDI: 0000000000000006 [ 676.702231][ T30] RBP: 00007fc646e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 676.702243][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.702255][ T30] R13: 00007fc647016128 R14: 00007fc647016090 R15: 00007fc64713fa48 [ 676.702284][ T30] [ 676.702301][ T30] [ 676.702301][ T30] Showing all locks held in the system: [ 676.702311][ T30] 3 locks held by kworker/0:1/10: [ 676.702323][ T30] 3 locks held by kworker/u8:0/12: [ 676.702335][ T30] 1 lock held by khungtaskd/30: [ 676.702346][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.702407][ T30] 3 locks held by kworker/u8:2/35: [ 676.702418][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.702466][ T30] #1: ffffc90000ab7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.702511][ T30] #2: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 676.702563][ T30] 3 locks held by kworker/u8:3/48: [ 676.702573][ T30] 7 locks held by kworker/u9:0/50: [ 676.702583][ T30] #0: ffff888079f0e940 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.702628][ T30] #1: ffffc90000ba7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.702675][ T30] #2: ffff88803a344ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 676.702797][ T30] #3: ffff88803a3440b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 676.702873][ T30] #4: ffffffff8ff52880 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 676.702954][ T30] #5: ffff88807c41c2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 676.703029][ T30] #6: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 676.703080][ T30] 6 locks held by kworker/u8:4/68: [ 676.703091][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.703136][ T30] #1: ffffc9000206fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.703181][ T30] #2: ffffffff8fdc0968 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 676.703253][ T30] #3: ffff88807e95b128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 676.703328][ T30] #4: ffff88807e95d258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 676.703379][ T30] #5: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 676.703450][ T30] 3 locks held by kworker/u8:6/230: [ 676.703465][ T30] 4 locks held by kworker/u8:7/1106: [ 676.703487][ T30] 7 locks held by kworker/R-bat_e/3229: [ 676.703498][ T30] 2 locks held by udevd/4992: [ 676.703509][ T30] 1 lock held by dhcpcd/5286: [ 676.703519][ T30] 1 lock held by crond/5361: [ 676.703530][ T30] 2 locks held by getty/5379: [ 676.703540][ T30] #0: ffff8880369760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.703651][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 676.703700][ T30] 1 lock held by syz-executor/5609: [ 676.703712][ T30] 5 locks held by kworker/u9:7/5633: [ 676.703722][ T30] #0: ffff8880442b1940 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.703775][ T30] #1: ffffc900046c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.703820][ T30] #2: ffff8880457e4ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 676.703867][ T30] #3: ffff8880457e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 676.703913][ T30] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 676.703964][ T30] 3 locks held by kworker/1:4/5676: [ 676.703974][ T30] #0: ffff88813fe41d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.704019][ T30] #1: ffffc90004b97c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.704065][ T30] #2: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xab/0x1090 [ 676.704189][ T30] 3 locks held by kworker/u8:10/7177: [ 676.704201][ T30] 4 locks held by kworker/u8:11/7180: [ 676.704212][ T30] 4 locks held by kworker/u8:12/7181: [ 676.704223][ T30] 3 locks held by kworker/u8:13/7183: [ 676.704233][ T30] #0: ffff88803170b940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 676.704279][ T30] #1: ffffc900032d7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 676.704324][ T30] #2: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 676.704372][ T30] 4 locks held by kworker/u8:14/7185: [ 676.704386][ T30] 2 locks held by syz-executor/13310: [ 676.704401][ T30] 4 locks held by kworker/1:13/14884: [ 676.704411][ T30] 2 locks held by kworker/1:15/14886: [ 676.704424][ T30] 2 locks held by syz-executor/16054: [ 676.704434][ T30] #0: ffffffff8f53f7e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 676.704487][ T30] #1: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 676.704533][ T30] 2 locks held by syz-executor/16058: [ 676.704546][ T30] 1 lock held by syz.3.3877/16110: [ 676.704556][ T30] #0: ffffffff8e962f38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 676.704604][ T30] 1 lock held by syz.3.3877/16111: [ 676.704615][ T30] #0: ffffffff8fdcf640 (rtnl_mutex){+.+.}-{4:4} [ 685.933416][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.948001][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.290119][ T30] , at: rtnetlink_rcv_msg+0x722/0xbe0 [ 695.290165][ T30] 5 locks held by syz.0.3878/16115: [ 695.290179][ T30] 3 locks held by kworker/u8:1/16117: [ 695.290190][ T30] 3 locks held by kworker/u8:5/16118: [ 695.290201][ T30] 2 locks held by syz-executor/16119: [ 695.290213][ T30] 3 locks held by syz-executor/16125: [ 695.290224][ T30] 2 locks held by syz-executor/16127: [ 695.290237][ T30] [ 695.290243][ T30] ============================================= [ 695.290243][ T30] [ 695.290263][ T30] NMI backtrace for cpu 1 [ 695.290291][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 695.290341][ T30] Tainted: [L]=SOFTLOCKUP [ 695.290356][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.290378][ T30] Call Trace: [ 695.290385][ T30] [ 695.290392][ T30] dump_stack_lvl+0xe8/0x150 [ 695.290414][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 695.290513][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 695.290533][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 695.290559][ T30] sys_info+0x135/0x170 [ 695.290607][ T30] watchdog+0xfd3/0x1030 [ 695.290637][ T30] ? watchdog+0x1c9/0x1030 [ 695.290664][ T30] kthread+0x388/0x470 [ 695.290685][ T30] ? __pfx_watchdog+0x10/0x10 [ 695.290703][ T30] ? __pfx_kthread+0x10/0x10 [ 695.290723][ T30] ret_from_fork+0x514/0xb70 [ 695.290743][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 695.290760][ T30] ? __switch_to+0xc79/0x1410 [ 695.290785][ T30] ? __pfx_kthread+0x10/0x10 [ 695.290805][ T30] ret_from_fork_asm+0x1a/0x30 [ 695.290837][ T30] [ 695.323683][ T30] Sending NMI from CPU 1 to CPUs 0: [ 695.323716][ C0] NMI backtrace for cpu 0 [ 695.323732][ C0] CPU: 0 UID: 0 PID: 1586 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.323754][ C0] Tainted: [L]=SOFTLOCKUP [ 695.323760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.323771][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 695.323863][ C0] RIP: 0010:__kasan_poison_slab+0xd/0x70 [ 695.323902][ C0] Code: ff 00 00 00 89 c1 e9 92 3a 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c7 c0 ff ff ff ff eb 08 <48> ff c0 48 39 c8 73 13 b9 01 00 00 00 48 f7 07 40 00 00 00 74 ea [ 695.323917][ C0] RSP: 0018:ffffc90000007958 EFLAGS: 00000246 [ 695.323930][ C0] RAX: ffffffffffffffff RBX: ffff88814041b640 RCX: 0000000000000001 [ 695.323942][ C0] RDX: 00000000f5000000 RSI: ffffffff8c28ac40 RDI: ffffea0000ff6c80 [ 695.323954][ C0] RBP: 00000000000e2820 R08: ffffffff9030a7f7 R09: 1ffffffff20614fe [ 695.323965][ C0] R10: dffffc0000000000 R11: fffffbfff20614ff R12: 00000000000a2820 [ 695.323977][ C0] R13: 000000000000000c R14: ffffea0000ff6c80 R15: 0000000000000000 [ 695.323987][ C0] FS: 0000000000000000(0000) GS:ffff888125290000(0000) knlGS:0000000000000000 [ 695.324000][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.324011][ C0] CR2: 00007faa61800000 CR3: 000000007b51e000 CR4: 00000000003526f0 [ 695.324025][ C0] Call Trace: [ 695.324031][ C0] [ 695.324037][ C0] allocate_slab+0x1b3/0x660 [ 695.324057][ C0] refill_objects+0x339/0x3d0 [ 695.324075][ C0] ? __pcs_replace_empty_main+0x25c/0x720 [ 695.324094][ C0] __pcs_replace_empty_main+0x321/0x720 [ 695.324114][ C0] kmem_cache_alloc_node_noprof+0x441/0x690 [ 695.324136][ C0] ? __alloc_skb+0x1d0/0x7d0 [ 695.324200][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 695.324222][ C0] __alloc_skb+0x1d0/0x7d0 [ 695.324242][ C0] __netdev_alloc_skb+0xc1/0x810 [ 695.324263][ C0] __ieee80211_beacon_get+0xc06/0x1880 [ 695.324342][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 695.324368][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 695.324393][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 695.324420][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 695.324501][ C0] __iterate_interfaces+0x2ab/0x590 [ 695.324545][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 695.324560][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 695.324582][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 695.324597][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 695.324620][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 695.324684][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 695.324703][ C0] __hrtimer_run_queues+0x3c0/0xa20 [ 695.324731][ C0] hrtimer_run_softirq+0x17a/0x240 [ 695.324754][ C0] handle_softirqs+0x22a/0x840 [ 695.324773][ C0] ? do_softirq+0x76/0xd0 [ 695.324792][ C0] ? neigh_periodic_work+0xc28/0xe50 [ 695.324812][ C0] do_softirq+0x76/0xd0 [ 695.324826][ C0] [ 695.324832][ C0] [ 695.324838][ C0] __local_bh_enable_ip+0xf8/0x130 [ 695.324855][ C0] neigh_periodic_work+0xc28/0xe50 [ 695.324878][ C0] ? process_scheduled_works+0xa70/0x1860 [ 695.324903][ C0] process_scheduled_works+0xb5d/0x1860 [ 695.324935][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 695.324956][ C0] ? assign_work+0x3d5/0x5e0 [ 695.324974][ C0] worker_thread+0xa53/0xfc0 [ 695.325003][ C0] kthread+0x388/0x470 [ 695.325025][ C0] ? __pfx_worker_thread+0x10/0x10 [ 695.325041][ C0] ? __pfx_kthread+0x10/0x10 [ 695.325063][ C0] ret_from_fork+0x514/0xb70 [ 695.325082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 695.325100][ C0] ? __switch_to+0xc79/0x1410 [ 695.325125][ C0] ? __pfx_kthread+0x10/0x10 [ 695.325146][ C0] ret_from_fork_asm+0x1a/0x30 [ 695.325174][ C0] [ 700.611777][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 700.611804][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 700.611828][ T30] Tainted: [L]=SOFTLOCKUP [ 700.611836][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.611847][ T30] Call Trace: [ 700.611854][ T30] [ 700.611863][ T30] vpanic+0x56c/0xa60 [ 700.611890][ T30] ? __pfx___schedule+0x10/0x10 [ 700.611911][ T30] ? __pfx_vpanic+0x10/0x10 [ 700.611938][ T30] panic+0xc5/0xd0 [ 700.611956][ T30] ? __pfx_panic+0x10/0x10 [ 700.611975][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 700.612002][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 700.612030][ T30] watchdog+0x102c/0x1030 [ 700.612061][ T30] ? watchdog+0x1c9/0x1030 [ 700.612089][ T30] kthread+0x388/0x470 [ 700.612111][ T30] ? __pfx_watchdog+0x10/0x10 [ 700.612131][ T30] ? __pfx_kthread+0x10/0x10 [ 700.612152][ T30] ret_from_fork+0x514/0xb70 [ 700.612174][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 700.612192][ T30] ? __switch_to+0xc79/0x1410 [ 700.612218][ T30] ? __pfx_kthread+0x10/0x10 [ 700.612239][ T30] ret_from_fork_asm+0x1a/0x30 [ 700.612273][ T30] [ 700.612640][ T30] Kernel Offset: disabled