last executing test programs: 14.630631031s ago: executing program 1 (id=2727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13.524390616s ago: executing program 1 (id=2730): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="090725dbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x200040c0}, 0x4040880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 12.484608285s ago: executing program 1 (id=2733): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f00000004c0)) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) r3 = syz_open_procfs(0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000040)) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 11.979507802s ago: executing program 0 (id=2736): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={&(0x7f00000002c0)="d8706585affc5a3f457c5a03a1d65722acb9f52d492f9aab4fd68fc9f2c0ec77c82bdd4a120a25a0b2d7c78f47637425cd117a6eecf77f32aac65adc79f11d591b4b7ba59ed130c1e53be943b6409a4d3dc51045a9d16819a5f4991f0609a89a6a5b5e18e9ce9b6f0f6a1eb83cd831a7463ccc0d59f5d4b902ecce75d8593471f26cce5d0b09b0f94e8d7123d136c1f97efa1ca63e640cae423ce3d765592462c8e365b7906cb3178c6f11e7d5a9747d8e13e28145371265f77acc82256e54dcefa9ecacb65743154ce02a7d7e840deeae1c3f1344cdfc13d3718f443e10bb19e56d5a0ebbd6a53270ac95041716634e0c8aa2c43319513099a9", 0xfa}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x20, r2, 0x1, 0x170bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="52de220b6700af8885739b9954b1955dbea6c629d08660c20d8fdc6a9481c504565d7c75906d78b422534ad388cd7380db1b5faa27", @ANYRES16=r4, @ANYBLOB="0100000000000000000039000000", @ANYRES32=r4], 0x98}}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000080)={0x89, 0x0, '\x00', [@pad1]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r5, r7, 0x4, 0x0, @void}, 0x10) 11.646429006s ago: executing program 0 (id=2737): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000034c0)={0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="000101"], 0x0, 0x0}) 10.501116696s ago: executing program 3 (id=2740): recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000200)=""/99, 0x63}], 0x2}, 0x102) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff00060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.467651184s ago: executing program 4 (id=2741): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x100) socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000000000000, 0xfffffffffffffffe, 0x0, 0x2000000000, 0xfffffffffffffffc}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0) 10.312470604s ago: executing program 4 (id=2742): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="090725dbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x200040c0}, 0x4040880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 10.21788981s ago: executing program 3 (id=2743): epoll_create1(0x0) gettid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x28) socket$qrtr(0x2a, 0x2, 0x0) 8.67412624s ago: executing program 3 (id=2744): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f6", 0x46}, {0x0}, {0x0}], 0x4}}], 0x3, 0x0) 7.75951377s ago: executing program 4 (id=2745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x6, 0x6, &(0x7f00000002c0)={0x99, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 7.742782236s ago: executing program 0 (id=2746): r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r4, 0x80047437, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$adsp1(0xffffffffffffff9c, 0x0, 0x140201, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 7.721794818s ago: executing program 1 (id=2747): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r0, 0x0, 0x0) 6.182232603s ago: executing program 0 (id=2748): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$rds(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) fchdir(r1) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, 0x0, 0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) 5.89347502s ago: executing program 1 (id=2749): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x4}], 0x1, 0x40010) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.334768466s ago: executing program 2 (id=2663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbff, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048810}, 0x30000800) write$cgroup_freezer_state(r1, &(0x7f0000000000)='FREEZING\x00', 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x1e23}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x40000, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r6, &(0x7f0000000200)={0x6, 0x8, 0x2, 0x0, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$inet(r8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) 4.891937378s ago: executing program 4 (id=2750): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 4.634650548s ago: executing program 1 (id=2751): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) close(0x3) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wg2\x00'}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'dvmrp0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) 4.381666262s ago: executing program 4 (id=2752): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) 4.320824657s ago: executing program 3 (id=2753): epoll_create1(0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x40}, 0x28) socket$qrtr(0x2a, 0x2, 0x0) 2.790189996s ago: executing program 0 (id=2754): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000200)={'a', ' *:* ', 'rwm\x00'}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="090725dbdf2512000000"], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x200040c0}, 0x4040880) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 2.783773547s ago: executing program 3 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2.536290978s ago: executing program 2 (id=2756): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.870541839s ago: executing program 2 (id=2757): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x22, 0x0, r4, 0x0, 0x0, 0x0, 0x24}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1.66730166s ago: executing program 2 (id=2758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 1.581862604s ago: executing program 0 (id=2759): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c000004000001090224000100"], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x50) io_uring_enter(r2, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 540.727032ms ago: executing program 4 (id=2760): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000980)={0x0, 0x6, 0x6, &(0x7f00000002c0)={0x99, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 480.970451ms ago: executing program 3 (id=2761): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000003900)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)='!', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x4}], 0x1, 0x40010) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 336.919723ms ago: executing program 2 (id=2762): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 0s ago: executing program 2 (id=2763): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f6", 0x46}, {0x0}, {0x0}], 0x4}}], 0x3, 0x0) kernel console output (not intermixed with test programs): tooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701013][ T5802] Bluetooth: hci4: link tx timeout [ 227.701023][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701151][ T5802] Bluetooth: hci4: link tx timeout [ 227.701161][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701261][ T5802] Bluetooth: hci4: link tx timeout [ 227.701271][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701373][ T5802] Bluetooth: hci4: link tx timeout [ 227.701383][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701481][ T5802] Bluetooth: hci4: link tx timeout [ 227.701491][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701589][ T5802] Bluetooth: hci4: link tx timeout [ 227.701599][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701696][ T5802] Bluetooth: hci4: link tx timeout [ 227.701706][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701805][ T5802] Bluetooth: hci4: link tx timeout [ 227.701815][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.701914][ T5802] Bluetooth: hci4: link tx timeout [ 227.701924][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.702022][ T5802] Bluetooth: hci4: link tx timeout [ 227.702033][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.702143][ T5802] Bluetooth: hci4: link tx timeout [ 227.702153][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.703557][ T5802] Bluetooth: hci4: link tx timeout [ 227.703570][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.703715][ T5802] Bluetooth: hci4: link tx timeout [ 227.703726][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.703827][ T5802] Bluetooth: hci4: link tx timeout [ 227.703837][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.703936][ T5802] Bluetooth: hci4: link tx timeout [ 227.703946][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704046][ T5802] Bluetooth: hci4: link tx timeout [ 227.704056][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704162][ T5802] Bluetooth: hci4: link tx timeout [ 227.704172][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704270][ T5802] Bluetooth: hci4: link tx timeout [ 227.704280][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704478][ T5802] Bluetooth: hci4: link tx timeout [ 227.704488][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704592][ T5802] Bluetooth: hci4: link tx timeout [ 227.704602][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704700][ T5802] Bluetooth: hci4: link tx timeout [ 227.704710][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704808][ T5802] Bluetooth: hci4: link tx timeout [ 227.704817][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.704920][ T5802] Bluetooth: hci4: link tx timeout [ 227.704930][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705027][ T5802] Bluetooth: hci4: link tx timeout [ 227.705037][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705145][ T5802] Bluetooth: hci4: link tx timeout [ 227.705155][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705253][ T5802] Bluetooth: hci4: link tx timeout [ 227.705262][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705362][ T5802] Bluetooth: hci4: link tx timeout [ 227.705372][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705471][ T5802] Bluetooth: hci4: link tx timeout [ 227.705481][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705680][ T5802] Bluetooth: hci4: link tx timeout [ 227.705690][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705808][ T5802] Bluetooth: hci4: link tx timeout [ 227.705818][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 227.705916][ T5802] Bluetooth: hci4: link tx timeout [ 227.705927][ T5802] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 228.571385][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 228.571406][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 229.113726][T10089] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1263'. [ 229.733725][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 229.927584][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'. [ 230.100259][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 230.921232][T10142] __nla_validate_parse: 2 callbacks suppressed [ 230.921250][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 231.028049][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 231.028068][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1286'. [ 231.082005][T10149] syzkaller0: entered promiscuous mode [ 231.082020][T10149] syzkaller0: entered allmulticast mode [ 231.332271][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6340 ms [ 231.332303][ C1] lec:lec_tx_timeout: lec0 [ 231.332610][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.601705][T10153] xfrm0 speed is unknown, defaulting to 1000 [ 232.061615][T10183] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.071127][T10183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.131805][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.172058][T10186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 232.200778][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 232.907099][T10211] netlink: 'syz.1.1306': attribute type 13 has an invalid length. [ 233.469055][T10228] netlink: 'syz.4.1312': attribute type 16 has an invalid length. [ 233.469070][T10228] netlink: 'syz.4.1312': attribute type 17 has an invalid length. [ 233.801315][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.810813][T10211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.569484][T10211] vlan1: left promiscuous mode [ 234.599604][T10211] macsec0: left promiscuous mode [ 234.893125][T10228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 234.894181][ T5880] syz0: Port: 1 Link DOWN [ 234.894278][ T6637] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.046590][ T6637] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.046641][ T6637] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.046675][ T6637] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.812405][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.092237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 237.092272][ C1] lec:lec_tx_timeout: lec0 [ 237.092414][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.191663][T10330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1338'. [ 238.057042][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.108908][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.629981][T10391] syzkaller0: entered promiscuous mode [ 238.629997][T10391] syzkaller0: entered allmulticast mode [ 238.917125][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1361'. [ 239.535171][T10425] dummy0: entered promiscuous mode [ 239.535196][T10425] dummy0: entered allmulticast mode [ 239.571368][T10425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.650573][T10422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.824819][T10436] xfrm0 speed is unknown, defaulting to 1000 [ 240.292477][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.821041][T10466] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 240.821062][T10466] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1378'. [ 241.347683][T10483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.433358][T10488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.465438][T10480] dummy0: entered promiscuous mode [ 241.465460][T10480] dummy0: entered allmulticast mode [ 241.525131][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 242.234006][T10503] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1389'. [ 242.234203][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1389'. [ 242.419165][T10511] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 242.419193][T10511] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1391'. [ 242.852273][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 242.852304][ C1] lec:lec_tx_timeout: lec0 [ 242.852752][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.018145][T10537] dummy0: entered promiscuous mode [ 243.018167][T10537] dummy0: entered allmulticast mode [ 243.044571][T10537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.097872][T10537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.265405][T10545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 243.857839][T10570] netlink: 'syz.4.1410': attribute type 4 has an invalid length. [ 243.929156][T10575] netlink: 'syz.4.1410': attribute type 4 has an invalid length. [ 244.846840][T10605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.902493][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.961838][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'. [ 246.066674][T10629] Bluetooth: MGMT ver 1.23 [ 246.195167][T10622] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.196219][T10622] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 246.500718][T10654] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1439'. [ 246.696293][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.749921][T10659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.311661][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 247.432926][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1449'. [ 247.467581][T10685] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1450'. [ 247.503306][T10681] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.504424][T10681] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 247.862226][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.862255][ C1] lec:lec_tx_timeout: lec0 [ 247.862411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.899731][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 248.125653][T10716] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1462'. [ 248.351856][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1468'. [ 248.685009][T10743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1474'. [ 249.134728][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1479'. [ 249.685309][T10757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1480'. [ 250.279999][T10770] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1486'. [ 252.396757][T10789] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.444469][T10792] __nla_validate_parse: 2 callbacks suppressed [ 252.444488][T10792] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1497'. [ 252.596655][T10801] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1498'. [ 252.596758][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'. [ 252.710350][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 252.715007][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 252.872249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.872280][ C1] lec:lec_tx_timeout: lec0 [ 252.872407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.919898][T10820] ieee802154 phy1 wpan1: encryption failed: -22 [ 253.164077][T10828] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1514'. [ 253.164189][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1514'. [ 255.663663][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058416][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 256.058443][T10832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1516'. [ 256.058459][T10832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'. [ 256.229333][T10841] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.564910][T10863] __nla_validate_parse: 2 callbacks suppressed [ 257.564928][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.564945][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.564961][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.565166][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 257.678142][T10867] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1531'. [ 257.678244][T10867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1531'. [ 257.892242][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 257.892275][ C1] lec:lec_tx_timeout: lec0 [ 257.892447][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.852745][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 258.962456][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 259.113396][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1534'. [ 259.115670][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 259.115691][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 259.115705][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 259.251504][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.251523][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.251533][ T44] usb 3-1: Product: syz [ 259.251541][ T44] usb 3-1: Manufacturer: syz [ 259.251548][ T44] usb 3-1: SerialNumber: syz [ 259.367915][ T44] usb 3-1: config 0 descriptor?? [ 259.393327][T10875] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.424334][T10879] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.424863][T10879] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 259.520816][T10891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1539'. [ 259.537251][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1537'. [ 259.673852][T10874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 260.768489][T10924] netlink: 'syz.3.1551': attribute type 4 has an invalid length. [ 261.047341][ T5877] usb 3-1: USB disconnect, device number 2 [ 261.108103][T10929] netlink: 'syz.1.1554': attribute type 16 has an invalid length. [ 261.108123][T10929] netlink: 'syz.1.1554': attribute type 17 has an invalid length. [ 261.280990][T10929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.288668][T10929] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.289446][T10929] dummy0: left promiscuous mode [ 261.289467][T10929] dummy0: left allmulticast mode [ 261.322491][T10929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.453483][T10943] netlink: 'syz.4.1559': attribute type 39 has an invalid length. [ 261.698042][T10952] netlink: 'syz.2.1563': attribute type 4 has an invalid length. [ 262.451425][T10980] syz_tun: entered allmulticast mode [ 262.465260][T10977] syz_tun: left allmulticast mode [ 262.902233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.902265][ C1] lec:lec_tx_timeout: lec0 [ 262.902406][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.983320][T10987] __nla_validate_parse: 8 callbacks suppressed [ 264.983339][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 264.992092][T10985] netlink: 'syz.1.1574': attribute type 39 has an invalid length. [ 265.196313][T10997] syzkaller0: entered promiscuous mode [ 265.196338][T10997] syzkaller0: entered allmulticast mode [ 265.440718][T11004] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1581'. [ 265.563223][T11006] syz_tun: entered allmulticast mode [ 265.564359][T11005] syz_tun: left allmulticast mode [ 266.527537][ T5880] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 266.681966][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 266.681997][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.682017][ T5880] usb 5-1: Product: syz [ 266.682029][ T5880] usb 5-1: Manufacturer: syz [ 266.682043][ T5880] usb 5-1: SerialNumber: syz [ 266.738725][ T5880] usb 5-1: config 0 descriptor?? [ 266.963998][ T5880] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 266.985603][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.063293][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.124310][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.660630][T11040] syzkaller0: entered promiscuous mode [ 267.660658][T11040] syzkaller0: entered allmulticast mode [ 267.912257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.912286][ C1] lec:lec_tx_timeout: lec0 [ 267.912375][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 268.406374][ T5880] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 268.446953][ T5880] usb 5-1: USB disconnect, device number 2 [ 269.092473][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.298732][T11082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1607'. [ 272.922287][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.922322][ C1] lec:lec_tx_timeout: lec0 [ 272.922408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 277.932243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.932277][ C1] lec:lec_tx_timeout: lec0 [ 277.932352][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.457187][T11057] tipc: Enabled bearer , priority 0 [ 280.460689][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1601'. [ 280.486788][T11059] syzkaller0: entered promiscuous mode [ 280.486811][T11059] syzkaller0: entered allmulticast mode [ 280.572620][T11059] tipc: Resetting bearer [ 280.724293][T11059] tipc: Disabling bearer [ 280.887767][T11102] dummy0: entered promiscuous mode [ 280.887793][T11102] dummy0: entered allmulticast mode [ 280.930705][T11099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.972293][T11095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.026802][T11095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.846089][T11117] syzkaller0: entered promiscuous mode [ 281.846115][T11117] syzkaller0: entered allmulticast mode [ 282.294527][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1621'. [ 282.758704][T11128] syzkaller0: entered promiscuous mode [ 282.758732][T11128] syzkaller0: entered allmulticast mode [ 282.897783][T11154] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1624'. [ 282.942261][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.942283][ C1] lec:lec_tx_timeout: lec0 [ 282.942370][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.532490][T11166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.585007][T11166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.915371][T11169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.952246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.952280][ C1] lec:lec_tx_timeout: lec0 [ 287.952496][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.962300][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 292.962335][ C1] lec:lec_tx_timeout: lec0 [ 292.962416][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 294.813235][T11165] dummy0: entered promiscuous mode [ 294.813261][T11165] dummy0: entered allmulticast mode [ 295.182322][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 295.310203][T11197] fuse: Unknown parameter '0x0000000000000004' [ 295.339445][ T5877] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 295.339472][ T5877] usb 1-1: config 0 has no interface number 0 [ 295.352353][ T5881] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 295.379064][ T5877] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 295.379100][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.379118][ T5877] usb 1-1: Product: syz [ 295.379131][ T5877] usb 1-1: Manufacturer: syz [ 295.379144][ T5877] usb 1-1: SerialNumber: syz [ 295.428519][ T5877] usb 1-1: config 0 descriptor?? [ 295.534895][ T5881] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 295.534974][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.534995][ T5881] usb 2-1: Product: syz [ 295.535009][ T5881] usb 2-1: Manufacturer: syz [ 295.535022][ T5881] usb 2-1: SerialNumber: syz [ 295.599504][ T5881] usb 2-1: config 0 descriptor?? [ 295.659548][ T5881] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 295.672423][ T5877] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 295.730131][T11205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.783002][T11205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.793367][T11207] syzkaller0: entered promiscuous mode [ 295.793391][T11207] syzkaller0: entered allmulticast mode [ 295.829866][ T5877] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 295.843043][ T5877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 295.846663][ T5877] usb 1-1: media controller created [ 295.910078][T11213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.952570][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.018528][T11209] xfrm0 speed is unknown, defaulting to 1000 [ 296.096121][ T5877] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 296.418362][ T5877] usb 1-1: USB disconnect, device number 2 [ 297.082419][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 297.483621][ T5881] gspca_stk1135: reg_w 0xf err -110 [ 297.484915][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.484948][ T5881] gspca_stk1135: Sensor write failed [ 297.485082][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.485115][ T5881] gspca_stk1135: Sensor write failed [ 297.485270][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.485302][ T5881] gspca_stk1135: Sensor read failed [ 297.485446][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.485478][ T5881] gspca_stk1135: Sensor read failed [ 297.485507][ T5881] gspca_stk1135: Detected sensor type unknown (0x0) [ 297.485747][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.485780][ T5881] gspca_stk1135: Sensor read failed [ 297.485918][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.485950][ T5881] gspca_stk1135: Sensor read failed [ 297.486110][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.486142][ T5881] gspca_stk1135: Sensor write failed [ 297.486285][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 297.486316][ T5881] gspca_stk1135: Sensor write failed [ 297.487083][ T5881] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 297.969843][T11238] fuse: Unknown parameter '0x0000000000000004' [ 297.972403][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 297.972429][ C1] lec:lec_tx_timeout: lec0 [ 297.972514][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.013929][T11236] macvlan2: entered promiscuous mode [ 298.013954][T11236] macvlan2: entered allmulticast mode [ 298.099978][T11244] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1654'. [ 298.140187][T11242] syzkaller0: entered promiscuous mode [ 298.140212][T11242] syzkaller0: entered allmulticast mode [ 298.194717][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 300.007041][ T5880] usb 2-1: USB disconnect, device number 2 [ 300.672691][T11278] fuse: Unknown parameter '0x0000000000000004' [ 300.874208][T11286] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1665'. [ 300.895642][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 300.994318][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 301.113061][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 301.223096][T11291] macvlan2: entered promiscuous mode [ 301.223122][T11291] macvlan2: entered allmulticast mode [ 301.372416][ T5809] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 301.506493][T11307] fuse: Unknown parameter 'fd0x0000000000000004' [ 301.530459][ T5809] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 301.530476][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.530486][ T5809] usb 3-1: Product: syz [ 301.530493][ T5809] usb 3-1: Manufacturer: syz [ 301.530500][ T5809] usb 3-1: SerialNumber: syz [ 301.544142][ T5809] usb 3-1: config 0 descriptor?? [ 301.580502][ T5809] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 301.702279][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 301.852409][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 301.861518][ T5881] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 301.861553][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.861571][ T5881] usb 4-1: Product: syz [ 301.861585][ T5881] usb 4-1: Manufacturer: syz [ 301.861598][ T5881] usb 4-1: SerialNumber: syz [ 301.907801][ T5881] usb 4-1: config 0 descriptor?? [ 301.921936][ T5881] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 302.129819][T11323] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1678'. [ 302.426703][T11330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.441474][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 302.534046][ T5881] gspca_ov534_9: reg_w failed -71 [ 302.789087][T11340] fuse: Unknown parameter 'fd0x0000000000000004' [ 302.842488][ T5881] gspca_ov534_9: Unknown sensor 0000 [ 302.842582][ T5881] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 302.849591][ T5881] usb 4-1: USB disconnect, device number 2 [ 302.982268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 302.982301][ C1] lec:lec_tx_timeout: lec0 [ 302.982363][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.319804][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 303.659060][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 303.745364][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1698'. [ 303.864293][T11385] macvlan2: entered promiscuous mode [ 303.864320][T11385] macvlan2: entered allmulticast mode [ 304.125995][T11389] fuse: Unknown parameter 'fd0x0000000000000004' [ 304.558958][T11397] overlay: Unknown parameter '/' [ 304.576151][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1703'. [ 305.140557][ T5809] gspca_stk1135: reg_w 0x18 err -71 [ 305.142565][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142578][ T5809] gspca_stk1135: Sensor write failed [ 305.142602][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142611][ T5809] gspca_stk1135: Sensor write failed [ 305.142636][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142645][ T5809] gspca_stk1135: Sensor read failed [ 305.142669][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142677][ T5809] gspca_stk1135: Sensor read failed [ 305.142684][ T5809] gspca_stk1135: Detected sensor type unknown (0x0) [ 305.142712][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142721][ T5809] gspca_stk1135: Sensor read failed [ 305.142745][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142753][ T5809] gspca_stk1135: Sensor read failed [ 305.142777][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142786][ T5809] gspca_stk1135: Sensor write failed [ 305.142809][ T5809] gspca_stk1135: serial bus timeout: status=0x00 [ 305.142818][ T5809] gspca_stk1135: Sensor write failed [ 305.142899][ T5809] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 305.164342][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1705'. [ 305.279537][ T5809] usb 3-1: USB disconnect, device number 3 [ 305.451967][T11405] team_slave_0: entered promiscuous mode [ 305.452004][T11405] team_slave_1: entered promiscuous mode [ 305.454781][T11405] veth0_to_bond: entered promiscuous mode [ 305.455313][T11405] vlan3: entered promiscuous mode [ 305.455329][T11405] team0: entered promiscuous mode [ 305.455699][T11405] vlan2: entered promiscuous mode [ 306.193291][T11424] netlink: 'syz.0.1709': attribute type 16 has an invalid length. [ 306.193313][T11424] netlink: 'syz.0.1709': attribute type 17 has an invalid length. [ 306.277484][T11424] dummy0: left promiscuous mode [ 306.277512][T11424] dummy0: left allmulticast mode [ 306.312507][T11424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.792319][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.954707][ T5809] usb 5-1: config 0 has no interfaces? [ 306.957034][ T5809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.957058][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.957068][ T5809] usb 5-1: Product: syz [ 306.957075][ T5809] usb 5-1: Manufacturer: syz [ 306.957083][ T5809] usb 5-1: SerialNumber: syz [ 306.998310][ T5809] usb 5-1: config 0 descriptor?? [ 308.476341][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 308.476375][ C1] lec:lec_tx_timeout: lec0 [ 308.477019][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.554139][ T5809] usb 5-1: USB disconnect, device number 3 [ 311.452258][ T5809] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 312.913336][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 312.916131][ T5809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 312.916162][ T5809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.918998][ T5809] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.919024][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.919043][ T5809] usb 1-1: Product: syz [ 312.919056][ T5809] usb 1-1: Manufacturer: syz [ 312.919070][ T5809] usb 1-1: SerialNumber: syz [ 313.008964][ T5809] usb 1-1: config 0 descriptor?? [ 313.027657][ T5809] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.027690][ T5809] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 314.020062][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 314.020085][ C1] lec:lec_tx_timeout: lec0 [ 314.020532][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.268680][ T5809] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 314.272077][ T5809] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 314.488009][ T5809] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 314.488031][ T5809] em28xx 1-1:0.0: No AC97 audio processor [ 314.528765][ T5809] usb 1-1: USB disconnect, device number 3 [ 314.530902][ T5809] em28xx 1-1:0.0: Disconnecting em28xx [ 314.578061][ T5809] em28xx 1-1:0.0: Freeing device [ 314.716828][T11543] macvlan2: entered promiscuous mode [ 314.716853][T11543] macvlan2: entered allmulticast mode [ 316.152298][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 316.363183][ T5880] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 316.390142][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.390204][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.390231][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.393380][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.393430][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.393454][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.395262][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.395310][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.395335][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.397119][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.397173][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.397198][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.398680][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.398727][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.398752][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.400402][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.400451][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.400475][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.402769][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.402826][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.402851][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.416235][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.416286][ T5880] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.416311][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 316.421328][ T5880] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 316.421353][ T5880] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 316.421373][ T5880] usb 4-1: Product: syz [ 316.421385][ T5880] usb 4-1: Manufacturer: syz [ 316.421398][ T5880] usb 4-1: SerialNumber: syz [ 316.448156][ T5880] usb 4-1: config 0 descriptor?? [ 316.628885][ T5880] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 316.632289][ T5809] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 316.787059][ T5809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.787085][ T5809] usb 2-1: config 0 has no interface number 0 [ 316.791688][ T5809] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 316.791714][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.791733][ T5809] usb 2-1: Product: syz [ 316.791746][ T5809] usb 2-1: Manufacturer: syz [ 316.791760][ T5809] usb 2-1: SerialNumber: syz [ 316.842340][ T5880] usb 4-1: USB disconnect, device number 3 [ 316.884368][ T5809] usb 2-1: config 0 descriptor?? [ 316.905817][ T5880] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 317.103068][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.137970][ T5809] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 317.155961][ T5809] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.156323][ T5809] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 317.156373][ T5809] usb 2-1: media controller created [ 317.196886][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.614638][ T5809] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 318.785520][ T5809] usb 2-1: USB disconnect, device number 3 [ 319.257306][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1771'. [ 319.386304][T11587] tipc: Enabled bearer , priority 0 [ 319.387147][T11587] syzkaller0: entered promiscuous mode [ 319.387169][T11587] syzkaller0: entered allmulticast mode [ 319.546139][T11598] tipc: Resetting bearer [ 320.882314][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6870 ms [ 320.882349][ C1] lec:lec_tx_timeout: lec0 [ 320.882713][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 320.932824][T11585] tipc: Resetting bearer [ 321.012485][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 321.133109][T11585] tipc: Disabling bearer [ 321.163202][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 321.166032][ T5881] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 321.166057][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.169967][ T5881] usb 1-1: config 0 descriptor?? [ 321.199607][ T5881] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 321.284675][ T5880] tipc: Node number set to 1509832844 [ 321.290928][T11605] syzkaller0: entered promiscuous mode [ 321.290955][T11605] syzkaller0: entered allmulticast mode [ 321.342461][ T5809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 321.514433][ T5809] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.514460][ T5809] usb 3-1: config 0 has no interface number 0 [ 321.517431][ T5809] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 321.517456][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.517476][ T5809] usb 3-1: Product: syz [ 321.517489][ T5809] usb 3-1: Manufacturer: syz [ 321.517503][ T5809] usb 3-1: SerialNumber: syz [ 321.583673][ T5809] usb 3-1: config 0 descriptor?? [ 321.777935][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'. [ 321.798646][T11616] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 321.810086][ T5809] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 321.833644][ T5809] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.833939][ T5809] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 321.833984][ T5809] usb 3-1: media controller created [ 321.873042][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.010488][ T5881] gspca_sonixj: reg_r err -71 [ 322.010594][ T5881] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 322.035336][ T5881] usb 1-1: USB disconnect, device number 4 [ 322.050280][ T5809] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 322.245018][ T5809] usb 3-1: USB disconnect, device number 4 [ 322.316806][T11634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.373734][T11634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.429046][T11634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.568935][T11649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1797'. [ 322.781909][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 323.009825][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1807'. [ 323.009850][T11671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 323.009873][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1807'. [ 323.010084][T11671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 323.010871][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 323.272358][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 323.352355][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.392294][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 323.446437][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 323.448319][ T31] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 323.448346][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.454651][ T31] usb 5-1: config 0 descriptor?? [ 323.470886][ T31] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 323.515678][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.515704][ T5881] usb 3-1: config 0 has no interface number 0 [ 323.518090][ T5881] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 323.518118][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.518136][ T5881] usb 3-1: Product: syz [ 323.518149][ T5881] usb 3-1: Manufacturer: syz [ 323.518162][ T5881] usb 3-1: SerialNumber: syz [ 323.568439][ T5881] usb 3-1: config 0 descriptor?? [ 323.695867][T11696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.759727][T11699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.786193][ T5881] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 323.794753][ T5881] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.795101][ T5881] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 323.795150][ T5881] usb 3-1: media controller created [ 323.824522][T11696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.858673][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.989470][ T5881] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 324.072042][ T5881] usb 3-1: USB disconnect, device number 5 [ 324.279694][ T31] gspca_sonixj: reg_r err -71 [ 324.279789][ T31] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 324.284804][ T31] usb 5-1: USB disconnect, device number 4 [ 325.032895][T11726] __nla_validate_parse: 1 callbacks suppressed [ 325.032916][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 325.216964][T11741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.269833][T11741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.325977][T11741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.732978][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1846'. [ 325.896061][ T5880] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 326.318989][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 326.319030][ C1] lec:lec_tx_timeout: lec0 [ 326.319726][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.542302][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 326.544829][ T5880] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 326.544856][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.551209][ T5880] usb 2-1: config 0 descriptor?? [ 326.587208][ T5880] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 326.822243][ T31] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 326.914348][T11784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1856'. [ 326.995287][ T31] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 326.995318][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.995345][ T31] usb 5-1: Product: syz [ 326.995360][ T31] usb 5-1: Manufacturer: syz [ 326.995374][ T31] usb 5-1: SerialNumber: syz [ 327.000106][ T31] usb 5-1: config 0 descriptor?? [ 327.019606][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 327.504232][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 327.985326][ T5880] gspca_sonixj: reg_r err -110 [ 327.985422][ T5880] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 328.064275][ T5880] usb 2-1: USB disconnect, device number 4 [ 328.685131][T11810] Process accounting resumed [ 329.169152][T11830] netlink: 'syz.0.1875': attribute type 16 has an invalid length. [ 329.169176][T11830] netlink: 'syz.0.1875': attribute type 17 has an invalid length. [ 329.294247][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1874'. [ 329.391975][T11830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.161451][ T31] gspca_stk1135: reg_w 0x200 err -71 [ 330.162489][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162504][ T31] gspca_stk1135: Sensor write failed [ 330.162528][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162537][ T31] gspca_stk1135: Sensor write failed [ 330.162560][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162568][ T31] gspca_stk1135: Sensor read failed [ 330.162592][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162600][ T31] gspca_stk1135: Sensor read failed [ 330.162606][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 330.162632][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162641][ T31] gspca_stk1135: Sensor read failed [ 330.162665][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162674][ T31] gspca_stk1135: Sensor read failed [ 330.162697][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162706][ T31] gspca_stk1135: Sensor write failed [ 330.162729][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 330.162738][ T31] gspca_stk1135: Sensor write failed [ 330.162819][ T31] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 330.263816][ T31] usb 5-1: USB disconnect, device number 5 [ 330.417795][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1882'. [ 331.056805][ T5880] Process accounting resumed [ 331.792676][T11903] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 331.812243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 331.812276][ C1] lec:lec_tx_timeout: lec0 [ 331.812409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.687684][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.208680][T11937] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 334.514732][T11939] bond3: (slave gretap1): making interface the new active one [ 334.517224][T11939] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 334.591451][T11942] vlan3: entered allmulticast mode [ 334.591466][T11942] bond3: entered allmulticast mode [ 334.591473][T11942] gretap1: entered allmulticast mode [ 335.421905][T11942] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 336.829754][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 336.829787][ C1] lec:lec_tx_timeout: lec0 [ 336.978424][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 337.225324][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 337.262708][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1924'. [ 337.572333][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.781630][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1937'. [ 338.796358][T12037] netlink: 'syz.0.1937': attribute type 16 has an invalid length. [ 338.796385][T12037] netlink: 'syz.0.1937': attribute type 17 has an invalid length. [ 338.882356][T12037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.779943][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1954'. [ 340.780576][T12072] netlink: 'syz.1.1954': attribute type 16 has an invalid length. [ 340.780592][T12072] netlink: 'syz.1.1954': attribute type 17 has an invalid length. [ 340.792834][T12072] dummy0: left promiscuous mode [ 340.792858][T12072] dummy0: left allmulticast mode [ 340.832365][T12072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.148118][T12078] syzkaller0: entered promiscuous mode [ 341.148143][T12078] syzkaller0: entered allmulticast mode [ 341.239163][T12082] syzkaller0: entered promiscuous mode [ 341.239179][T12082] syzkaller0: entered allmulticast mode [ 341.871325][T12106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 341.992154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 341.992188][ C1] lec:lec_tx_timeout: lec0 [ 341.992290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.202233][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 342.372429][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 342.380806][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 342.380836][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.388222][ T44] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.388249][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.388268][ T44] usb 5-1: Product: syz [ 342.388281][ T44] usb 5-1: Manufacturer: syz [ 342.388294][ T44] usb 5-1: SerialNumber: syz [ 342.402896][ T44] usb 5-1: config 0 descriptor?? [ 342.423055][ T44] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 342.423085][ T44] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 342.690536][T12123] input: syz1 as /devices/virtual/input/input14 [ 343.762445][ T44] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 343.787621][ T44] em28xx 5-1:0.0: Config register raw data: 0x41 [ 344.703488][ T44] usb 5-1: USB disconnect, device number 6 [ 344.705569][ T44] em28xx 5-1:0.0: Disconnecting em28xx [ 344.736419][ T44] em28xx 5-1:0.0: Freeing device [ 344.968623][T12151] syzkaller0: entered promiscuous mode [ 344.968650][T12151] syzkaller0: entered allmulticast mode [ 344.990165][T12146] syzkaller0: entered promiscuous mode [ 344.990189][T12146] syzkaller0: entered allmulticast mode [ 346.208843][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 346.712387][ T44] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 346.870420][ T44] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.870439][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.870449][ T44] usb 5-1: Product: syz [ 346.870457][ T44] usb 5-1: Manufacturer: syz [ 346.870464][ T44] usb 5-1: SerialNumber: syz [ 346.879075][ T44] usb 5-1: config 0 descriptor?? [ 347.082305][ T5880] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 347.162911][ T44] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 347.262506][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 347.265043][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 347.265073][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 347.268227][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 347.268255][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.268275][ T5880] usb 4-1: Product: syz [ 347.268289][ T5880] usb 4-1: Manufacturer: syz [ 347.268302][ T5880] usb 4-1: SerialNumber: syz [ 347.339493][ T5880] usb 4-1: config 0 descriptor?? [ 347.353425][ T5880] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 347.353459][ T5880] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 347.848395][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 347.849340][ C1] lec:lec_tx_timeout: lec0 [ 347.856721][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.296704][ T5880] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 348.309445][ T5880] em28xx 4-1:0.0: Config register raw data: 0x41 [ 348.516753][ T5880] usb 4-1: USB disconnect, device number 4 [ 348.518502][ T5880] em28xx 4-1:0.0: Disconnecting em28xx [ 348.547562][ T5880] em28xx 4-1:0.0: Freeing device [ 348.816109][ T44] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 348.857865][ T44] usb 5-1: USB disconnect, device number 7 [ 348.952408][T12220] syzkaller0: entered promiscuous mode [ 348.952573][T12220] syzkaller0: entered allmulticast mode [ 349.038220][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 350.554940][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 351.896507][T12277] syzkaller0: entered promiscuous mode [ 351.896532][T12277] syzkaller0: entered allmulticast mode [ 352.874230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 352.874354][ C1] lec:lec_tx_timeout: lec0 [ 352.875349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 353.316774][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'. [ 354.628861][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2036'. [ 354.772475][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 354.883048][T12364] geneve2: entered allmulticast mode [ 354.943093][ T5880] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 354.943121][ T5880] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 354.943173][ T5880] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 354.943195][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.018420][ T5880] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 355.220688][ T5880] gspca_sn9c2028: read1 error -32 [ 355.220839][ T31] kernel write not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 355.337802][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 355.422517][ T5880] gspca_sn9c2028: read1 error -71 [ 355.422597][ T5880] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 355.429532][ T5880] usb 2-1: USB disconnect, device number 5 [ 355.705500][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2049'. [ 355.705743][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2049'. [ 355.996751][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'. [ 357.015864][T12434] overlay: Unknown parameter '/' [ 357.033016][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 357.166674][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2063'. [ 357.439767][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 357.439928][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2067'. [ 358.167906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms [ 358.167942][ C1] lec:lec_tx_timeout: lec0 [ 358.169680][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.333036][T12460] __nla_validate_parse: 2 callbacks suppressed [ 358.333055][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2069'. [ 359.595007][T12478] overlay: Unknown parameter '/' [ 359.629753][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2075'. [ 359.686343][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 359.822500][ T6554] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 359.872382][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.987512][ T6554] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 359.987543][ T6554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.987562][ T6554] usb 1-1: Product: syz [ 359.987576][ T6554] usb 1-1: Manufacturer: syz [ 359.987588][ T6554] usb 1-1: SerialNumber: syz [ 360.012335][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 360.044397][ T6554] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 360.063366][ T44] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 360.063392][ T44] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 360.063433][ T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 360.063454][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.122093][ T44] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 360.192460][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 360.204263][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 360.204294][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 360.233778][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 360.233807][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.233826][ T31] usb 3-1: Product: syz [ 360.233837][ T31] usb 3-1: Manufacturer: syz [ 360.233849][ T31] usb 3-1: SerialNumber: syz [ 360.248147][ T31] usb 3-1: config 0 descriptor?? [ 360.262278][ T5881] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 360.313572][ T44] gspca_sn9c2028: read1 error -71 [ 360.314924][ T44] gspca_sn9c2028: read1 error -71 [ 360.315212][ T44] gspca_sn9c2028: read1 error -71 [ 360.315263][ T44] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 360.324913][ T44] usb 2-1: USB disconnect, device number 6 [ 360.329631][ T31] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 360.329660][ T31] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 360.399482][ T5866] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 360.456589][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 360.456627][ T5881] usb 5-1: can't read configurations, error -61 [ 360.602394][ T5881] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 360.755119][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 360.755157][ T5881] usb 5-1: can't read configurations, error -61 [ 360.755586][ T5881] usb usb5-port1: attempt power cycle [ 361.122323][ T5881] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 361.709134][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.709174][ T5881] usb 5-1: can't read configurations, error -61 [ 361.832417][ T5881] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 361.865638][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.865675][ T5881] usb 5-1: can't read configurations, error -61 [ 361.867712][ T5881] usb usb5-port1: unable to enumerate USB device [ 361.960133][T12503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2084'. [ 361.991008][ T31] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 361.991131][ T5866] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 361.991487][ T5866] ath9k_htc: Failed to initialize the device [ 362.009755][ T44] usb 1-1: USB disconnect, device number 5 [ 362.043285][ T44] usb 1-1: ath9k_htc: USB layer deinitialized [ 362.052022][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 362.057839][ T31] em28xx 3-1:0.0: Config register raw data: 0x41 [ 362.256379][ T5881] usb 3-1: USB disconnect, device number 6 [ 362.258774][ T5881] em28xx 3-1:0.0: Disconnecting em28xx [ 362.261026][ T5881] em28xx 3-1:0.0: Freeing device [ 363.175035][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.525916][T12527] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2089'. [ 363.812166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 363.812199][ C1] lec:lec_tx_timeout: lec0 [ 363.812436][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 364.767503][T12510] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 364.891489][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2090'. [ 365.312778][T12541] overlay: Unknown parameter '/' [ 365.339823][T12544] 9p: Bad value for 'wfdno' [ 365.353712][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'. [ 365.446479][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2095'. [ 365.453435][T12548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2094'. [ 365.528554][T12551] dummy0: entered promiscuous mode [ 365.528580][T12551] dummy0: entered allmulticast mode [ 365.537538][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.572313][ T44] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 365.590234][T12551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.722781][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 366.097996][ T44] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 366.098014][ T44] usb 5-1: config 179 has no interface number 0 [ 366.098052][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 366.098065][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 366.098079][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 366.098092][ T44] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 366.098105][ T44] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 366.098127][ T44] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 366.098139][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.213334][T12538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 366.674877][ T992] usb 5-1: USB disconnect, device number 12 [ 366.674950][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 366.675012][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 366.713131][ T44] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15 [ 366.898978][T12585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2103'. [ 367.220578][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 368.661487][T12599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2107'. [ 368.822177][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.822213][ C1] lec:lec_tx_timeout: lec0 [ 368.822308][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.853616][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.865526][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 369.331913][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.675569][T12624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2117'. [ 371.430436][T12649] overlay: Unknown parameter '/' [ 371.552512][T12650] netlink: 'syz.1.2125': attribute type 21 has an invalid length. [ 371.552618][T12650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2125'. [ 371.552661][T12650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2125'. [ 371.704987][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 372.088962][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 372.260736][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2131'. [ 372.412285][ T5866] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 372.565546][ T5866] usb 1-1: config 0 has no interfaces? [ 372.568171][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 372.568199][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.568218][ T5866] usb 1-1: Product: syz [ 372.568230][ T5866] usb 1-1: Manufacturer: syz [ 372.568243][ T5866] usb 1-1: SerialNumber: syz [ 372.586310][ T5866] usb 1-1: config 0 descriptor?? [ 372.835083][ T5866] usb 1-1: USB disconnect, device number 6 [ 372.883330][ T44] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 372.928419][T12686] netlink: 'syz.3.2138': attribute type 21 has an invalid length. [ 372.928479][T12686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2138'. [ 372.928501][T12686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2138'. [ 373.036720][ T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 373.036751][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.036771][ T44] usb 3-1: Product: syz [ 373.036785][ T44] usb 3-1: Manufacturer: syz [ 373.036799][ T44] usb 3-1: SerialNumber: syz [ 373.058413][ T44] usb 3-1: config 0 descriptor?? [ 373.289561][ T44] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 374.656175][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 374.656209][ C1] lec:lec_tx_timeout: lec0 [ 374.764030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 374.767432][ T44] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 375.546159][T12725] netlink: 'syz.3.2151': attribute type 21 has an invalid length. [ 375.546228][T12725] __nla_validate_parse: 1 callbacks suppressed [ 375.546241][T12725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2151'. [ 375.546274][T12725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2151'. [ 375.666216][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 376.269178][ T5866] usb 3-1: USB disconnect, device number 7 [ 376.451069][T12732] netlink: 'syz.2.2152': attribute type 1 has an invalid length. [ 376.451091][T12732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2152'. [ 376.580014][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2153'. [ 377.750703][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 377.832250][ T5880] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 377.866979][T12772] netlink: 'syz.3.2165': attribute type 1 has an invalid length. [ 377.866999][T12772] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2165'. [ 377.989197][ T5880] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 377.989226][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.989245][ T5880] usb 3-1: Product: syz [ 377.989259][ T5880] usb 3-1: Manufacturer: syz [ 377.989273][ T5880] usb 3-1: SerialNumber: syz [ 378.036429][ T5880] usb 3-1: config 0 descriptor?? [ 378.057284][T12777] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2166'. [ 378.331707][ T5880] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 378.538063][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.659618][T12794] netlink: 'syz.4.2170': attribute type 21 has an invalid length. [ 379.659739][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2170'. [ 379.659760][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2170'. [ 379.812171][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 379.812205][ C1] lec:lec_tx_timeout: lec0 [ 379.812471][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.079375][ T5880] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 380.109141][ T5880] usb 3-1: USB disconnect, device number 8 [ 382.454358][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 382.505162][T12820] netlink: 'syz.4.2178': attribute type 1 has an invalid length. [ 382.505175][T12820] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2178'. [ 383.482353][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 384.644603][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 384.644632][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.644650][ T31] usb 4-1: Product: syz [ 384.644663][ T31] usb 4-1: Manufacturer: syz [ 384.644675][ T31] usb 4-1: SerialNumber: syz [ 384.652458][ T31] usb 4-1: config 0 descriptor?? [ 384.822291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 384.822323][ C1] lec:lec_tx_timeout: lec0 [ 384.822427][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.763506][ T31] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 385.763571][ T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 387.964744][ T992] usb 4-1: USB disconnect, device number 5 [ 388.216827][T12863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2191'. [ 388.913669][T12861] netlink: 'syz.1.2192': attribute type 1 has an invalid length. [ 388.913684][T12861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2192'. [ 389.426095][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2196'. [ 389.832287][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.832372][ C1] lec:lec_tx_timeout: lec0 [ 389.833087][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.581390][T12882] macvlan0: entered promiscuous mode [ 390.581409][T12882] macvlan0: entered allmulticast mode [ 391.308155][ T5881] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 391.979010][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 391.979085][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.979141][ T5881] usb 3-1: Product: syz [ 391.979207][ T5881] usb 3-1: Manufacturer: syz [ 391.979264][ T5881] usb 3-1: SerialNumber: syz [ 392.212925][ T5881] usb 3-1: config 0 descriptor?? [ 393.117708][ T5881] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.842180][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 394.842214][ C1] lec:lec_tx_timeout: lec0 [ 394.842319][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 395.454967][ T5881] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 395.607877][ T5881] usb 3-1: USB disconnect, device number 9 [ 396.958030][T12923] Illegal XDP return value 4294967274 on prog (id 301) dev syz_tun, expect packet loss! [ 397.008867][T12922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 397.030101][T12924] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2209'. [ 398.278251][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'. [ 398.305216][T12931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 398.437466][T12940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2214'. [ 399.165682][ T5877] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 399.589574][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.589604][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.589623][ T5877] usb 1-1: Product: syz [ 399.589637][ T5877] usb 1-1: Manufacturer: syz [ 399.589651][ T5877] usb 1-1: SerialNumber: syz [ 399.852541][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.852618][ C1] lec:lec_tx_timeout: lec0 [ 399.852869][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.460745][ T5877] usb 1-1: config 0 descriptor?? [ 402.297828][ T5877] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 402.297925][ T5877] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 402.326955][ T5877] usb 1-1: USB disconnect, device number 7 [ 402.501101][T12975] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2225'. [ 402.544232][T12976] random: crng reseeded on system resumption [ 402.672859][T12980] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2224'. [ 404.632305][ T5881] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 404.791565][ T5881] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 404.791596][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.791617][ T5881] usb 4-1: Product: syz [ 404.791630][ T5881] usb 4-1: Manufacturer: syz [ 404.791644][ T5881] usb 4-1: SerialNumber: syz [ 404.834401][ T5881] usb 4-1: config 0 descriptor?? [ 404.862194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.862231][ C1] lec:lec_tx_timeout: lec0 [ 404.862337][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 404.868638][ T5881] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 404.946828][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2241'. [ 406.436383][ T5881] gspca_stk1135: reg_w 0x5 err -110 [ 406.437423][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437434][ T5881] gspca_stk1135: Sensor write failed [ 406.437459][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437468][ T5881] gspca_stk1135: Sensor write failed [ 406.437494][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437503][ T5881] gspca_stk1135: Sensor read failed [ 406.437528][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437537][ T5881] gspca_stk1135: Sensor read failed [ 406.437544][ T5881] gspca_stk1135: Detected sensor type unknown (0x0) [ 406.437574][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437583][ T5881] gspca_stk1135: Sensor read failed [ 406.437608][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437616][ T5881] gspca_stk1135: Sensor read failed [ 406.437640][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437649][ T5881] gspca_stk1135: Sensor write failed [ 406.437673][ T5881] gspca_stk1135: serial bus timeout: status=0x00 [ 406.437681][ T5881] gspca_stk1135: Sensor write failed [ 406.437774][ T5881] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 408.375338][ T992] usb 4-1: USB disconnect, device number 6 [ 409.785553][T13066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2253'. [ 409.882194][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 409.882227][ C1] lec:lec_tx_timeout: lec0 [ 409.885616][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 412.694552][T13093] evm: overlay not supported [ 413.738504][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 413.862292][ T992] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 415.188876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 415.188911][ C1] lec:lec_tx_timeout: lec0 [ 415.189381][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 415.284417][ T992] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 415.284475][ T992] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.284514][ T992] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 415.284534][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.303559][ T992] usb 3-1: config 0 descriptor?? [ 415.521360][ T992] usb 3-1: string descriptor 0 read error: -71 [ 415.679727][ T992] usb 3-1: USB disconnect, device number 10 [ 416.963568][ T5859] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 417.064601][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 417.122937][ T5859] usb 5-1: Using ep0 maxpacket: 16 [ 417.149333][ T5859] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.149359][ T5859] usb 5-1: config 0 has no interface number 0 [ 417.149403][ T5859] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.149427][ T5859] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.149465][ T5859] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 417.149486][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.208729][ T5859] usb 5-1: config 0 descriptor?? [ 417.460827][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 417.614945][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 417.753597][T13162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2281'. [ 418.012431][ T5866] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 418.035197][ T5866] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.048559][ T5866] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.344592][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 418.344626][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 418.344706][ T5866] usb 3-1: Product: syz [ 418.344720][ T5866] usb 3-1: Manufacturer: syz [ 418.344732][ T5866] usb 3-1: SerialNumber: syz [ 418.390576][ T5866] usb 3-1: config 0 descriptor?? [ 418.550329][ T5866] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 418.631498][ T992] usb 3-1: USB disconnect, device number 11 [ 418.765482][T12391] udevd[12391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.946518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 420.946553][ C1] lec:lec_tx_timeout: lec0 [ 420.946697][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.074769][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 422.410628][ T44] Process accounting resumed [ 422.816225][ T5859] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -110 [ 422.816417][ T5859] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -110 [ 422.853812][ T5859] uclogic 0003:28BD:0071.0001: pen probing failed: -110 [ 422.853842][ T5859] uclogic 0003:28BD:0071.0001: failed probing parameters: -110 [ 422.853954][ T5859] uclogic 0003:28BD:0071.0001: probe with driver uclogic failed with error -110 [ 423.174959][ T9] usb 5-1: USB disconnect, device number 13 [ 423.329529][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 423.436754][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'. [ 424.282264][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 424.545034][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 425.307706][ T44] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.307732][ T44] usb 3-1: config 0 has no interface number 0 [ 425.329233][ T44] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.329264][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.329284][ T44] usb 3-1: Product: syz [ 425.329298][ T44] usb 3-1: Manufacturer: syz [ 425.329309][ T44] usb 3-1: SerialNumber: syz [ 425.391238][ T44] usb 3-1: config 0 descriptor?? [ 425.420129][ T44] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 425.476415][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 425.952167][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 425.952200][ C1] lec:lec_tx_timeout: lec0 [ 425.952318][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.172244][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 426.333380][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 426.351575][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.351603][ T5881] usb 1-1: config 0 has no interface number 0 [ 426.351653][ T5881] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.351677][ T5881] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.351715][ T5881] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 426.351738][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.418430][ T5881] usb 1-1: config 0 descriptor?? [ 428.056225][ T44] usb 3-1: qt2_attach - failed to power on unit: -71 [ 428.056759][ T44] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 428.607431][ T44] usb 3-1: USB disconnect, device number 12 [ 428.703039][ T5859] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 429.025846][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 429.176067][ T5859] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 429.176098][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.176117][ T5859] usb 2-1: Product: syz [ 429.176130][ T5859] usb 2-1: Manufacturer: syz [ 429.176144][ T5859] usb 2-1: SerialNumber: syz [ 429.237411][ T5859] usb 2-1: config 0 descriptor?? [ 429.481483][ T5859] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 430.132683][ T5859] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 430.972212][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 430.972248][ C1] lec:lec_tx_timeout: lec0 [ 431.244015][ T5859] usb 2-1: USB disconnect, device number 7 [ 431.972520][ T5881] uclogic 0003:28BD:0071.0002: failed retrieving string descriptor #100: -110 [ 431.972556][ T5881] uclogic 0003:28BD:0071.0002: failed retrieving pen parameters: -110 [ 431.972566][ T5881] uclogic 0003:28BD:0071.0002: pen probing failed: -110 [ 431.972575][ T5881] uclogic 0003:28BD:0071.0002: failed probing parameters: -110 [ 431.972678][ T5881] uclogic 0003:28BD:0071.0002: probe with driver uclogic failed with error -110 [ 432.212981][ T5859] usb 1-1: USB disconnect, device number 8 [ 432.362028][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 432.366176][T13259] Process accounting resumed [ 432.682234][ T5859] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 432.782256][ T5881] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 432.853878][ T5859] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 432.853937][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.855165][ T5859] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 432.855191][ T5859] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 432.855210][ T5859] usb 4-1: Manufacturer: syz [ 432.865618][ T5859] usb 4-1: config 0 descriptor?? [ 432.957284][ T5881] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.957319][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0 [ 432.966978][ T5881] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.967008][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 432.967026][ T5881] usb 3-1: Product: syz [ 432.967039][ T5881] usb 3-1: Manufacturer: syz [ 432.967052][ T5881] usb 3-1: SerialNumber: syz [ 433.019141][ T5881] usb 3-1: config 0 descriptor?? [ 433.062290][ T5859] rc_core: IR keymap rc-hauppauge not found [ 433.062309][ T5859] Registered IR keymap rc-empty [ 433.092641][ T5859] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 433.126934][ T5859] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 433.167503][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 433.198475][ T5881] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 433.222258][ T5881] usb 4-1: USB disconnect, device number 7 [ 433.229056][ T9] usb 3-1: USB disconnect, device number 13 [ 433.280692][T12391] udevd[12391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 433.662186][ T5859] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 433.827291][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 433.838238][ T5859] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 433.838264][ T5859] usb 2-1: config 0 has no interface number 0 [ 433.860011][ T5859] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 433.860029][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.860039][ T5859] usb 2-1: Product: syz [ 433.860047][ T5859] usb 2-1: Manufacturer: syz [ 433.860054][ T5859] usb 2-1: SerialNumber: syz [ 433.875345][ T5859] usb 2-1: config 0 descriptor?? [ 433.926417][ T5859] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 434.131913][ T6554] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 434.664213][ T6554] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 434.664609][ T6554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.664631][ T6554] usb 4-1: Product: syz [ 434.664645][ T6554] usb 4-1: Manufacturer: syz [ 434.664659][ T6554] usb 4-1: SerialNumber: syz [ 434.767219][ T6554] usb 4-1: config 0 descriptor?? [ 434.973275][ T6554] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.313983][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'. [ 435.590137][ T6554] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 436.607269][ T5859] usb 2-1: qt2_attach - failed to power on unit: -71 [ 436.607530][ T5859] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 436.637444][ T5859] usb 2-1: USB disconnect, device number 8 [ 438.124538][ T5881] usb 4-1: USB disconnect, device number 8 [ 439.826252][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2343'. [ 440.002816][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.005900][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 440.082216][ T5881] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 440.307229][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.307285][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 440.307305][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 440.307319][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 440.307331][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.310459][ T5881] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 440.310487][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 440.310506][ T5881] usb 4-1: Product: syz [ 440.310517][ T5881] usb 4-1: Manufacturer: syz [ 440.310524][ T5881] usb 4-1: SerialNumber: syz [ 441.172322][ T5881] usb 4-1: config 0 descriptor?? [ 441.432275][ T5881] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 441.432301][ T5881] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 441.607112][ T5881] radio-si470x 4-1:0.0: software version 51, hardware version 126 [ 441.607139][ T5881] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 441.808622][ T5881] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 441.808675][ T5881] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 441.809081][ T5881] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 441.809439][ T5881] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 441.814260][ T5881] usb 4-1: USB disconnect, device number 9 [ 443.535059][T13429] netlink: 'syz.1.2347': attribute type 4 has an invalid length. [ 443.643703][ T5881] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 444.035465][ T5881] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 444.035496][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.035552][ T5881] usb 5-1: Product: syz [ 444.035599][ T5881] usb 5-1: Manufacturer: syz [ 444.035615][ T5881] usb 5-1: SerialNumber: syz [ 444.111722][ T5881] usb 5-1: config 0 descriptor?? [ 444.373082][ T5880] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 444.888198][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.888227][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.248280][ T5880] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 445.248318][ T5880] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 445.248455][ T5880] usb 1-1: Manufacturer: syz [ 445.738587][ T5881] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 445.738863][ T5881] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 445.822166][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 445.822199][ C1] lec:lec_tx_timeout: lec0 [ 445.828485][ T5880] usb 1-1: config 0 descriptor?? [ 446.236901][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'. [ 446.721151][ T5880] usb 1-1: USB disconnect, device number 9 [ 447.111376][ T5859] usb 5-1: USB disconnect, device number 14 [ 452.442214][ T44] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 452.449429][T13496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.502512][T13496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.586547][T13496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.602233][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 452.604535][ T44] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 452.610629][ T44] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 452.610654][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.610672][ T44] usb 1-1: Product: syz [ 452.610686][ T44] usb 1-1: Manufacturer: syz [ 452.610698][ T44] usb 1-1: SerialNumber: syz [ 452.617434][ T44] usb 1-1: config 0 descriptor?? [ 452.633027][ T44] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 452.635253][ T44] usb 1-1: Detected FT232R [ 452.820246][T13508] netlink: 'syz.4.2394': attribute type 4 has an invalid length. [ 452.825582][ T44] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 453.450140][ T44] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 453.498309][ T44] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 453.547584][ T44] usb 1-1: USB disconnect, device number 10 [ 453.645017][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 453.648009][ T44] ftdi_sio 1-1:0.0: device disconnected [ 456.826263][ T9350] lec:lec_start_xmit: lec0:No lecd attached [ 457.472531][ T6554] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 457.612351][ T6554] usb 4-1: device descriptor read/64, error -71 [ 457.789859][ T5859] Process accounting resumed [ 457.942253][ T6554] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 458.072326][ T6554] usb 4-1: device descriptor read/64, error -71 [ 458.201184][ T6554] usb usb4-port1: attempt power cycle [ 459.332300][ T6554] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 459.352702][ T6554] usb 4-1: device descriptor read/8, error -71 [ 459.466373][ T5880] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 460.642150][ T6554] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 460.858945][ T6554] usb 4-1: device descriptor read/8, error -71 [ 460.883940][ T5880] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 460.883971][ T5880] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 460.883996][ T5880] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 460.884011][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.886990][ T5880] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.887017][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 460.887036][ T5880] usb 5-1: Product: syz [ 460.887049][ T5880] usb 5-1: Manufacturer: syz [ 460.887058][ T5880] usb 5-1: SerialNumber: syz [ 460.904238][ T5880] usb 5-1: config 0 descriptor?? [ 460.912805][T13570] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 460.928630][ T5880] usb 5-1: selecting invalid altsetting 0 [ 460.972480][ T6554] usb usb4-port1: unable to enumerate USB device [ 461.154182][ T5880] usb 5-1: USB disconnect, device number 15 [ 461.274426][T13370] udevd[13370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.660702][T13601] netlink: 'syz.0.2434': attribute type 4 has an invalid length. [ 461.693781][T13601] netlink: 'syz.0.2434': attribute type 4 has an invalid length. [ 462.987237][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6160 ms [ 462.987273][ C1] lec:lec_tx_timeout: lec0 [ 464.293481][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 465.933273][ T5881] Process accounting resumed [ 466.498819][T13649] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 466.932971][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 467.009026][T13661] macvlan3: entered promiscuous mode [ 467.009054][T13661] macvlan3: entered allmulticast mode [ 467.010246][T13661] bond3: (slave macvlan3): Opening slave failed [ 467.145689][T13667] netlink: 'syz.3.2457': attribute type 21 has an invalid length. [ 468.036760][T13667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2457'. [ 468.036788][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2457'. [ 470.742220][ T5859] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 470.895766][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 470.898210][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.898272][ T5859] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.930748][ T5859] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 470.930778][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.930799][ T5859] usb 2-1: Product: syz [ 470.930813][ T5859] usb 2-1: Manufacturer: syz [ 470.930828][ T5859] usb 2-1: SerialNumber: syz [ 470.967872][ T5859] usb 2-1: config 0 descriptor?? [ 471.016390][T13718] dummy0: entered promiscuous mode [ 471.016414][T13718] dummy0: entered allmulticast mode [ 471.038002][T13718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.093120][T13720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.157517][T13715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.305000][T13726] syzkaller0: entered promiscuous mode [ 471.305026][T13726] syzkaller0: entered allmulticast mode [ 472.015625][T13758] random: crng reseeded on system resumption [ 473.515239][ T5859] usb 2-1: USB disconnect, device number 9 [ 475.519480][T13841] random: crng reseeded on system resumption [ 476.524451][T13850] syzkaller0: entered promiscuous mode [ 476.524477][T13850] syzkaller0: entered allmulticast mode [ 477.011975][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 478.572208][ T6554] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 478.734551][ T6554] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.734569][ T6554] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.736585][ T6554] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.736601][ T6554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.736611][ T6554] usb 5-1: SerialNumber: syz [ 479.858705][ T6554] usb 5-1: 0:2 : does not exist [ 479.858827][ T6554] usb 5-1: unit 1 not found! [ 480.019521][ T6554] usb 5-1: USB disconnect, device number 16 [ 480.410331][T12391] udevd[12391]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.427243][T13928] tipc: Enabled bearer , priority 0 [ 481.555644][T13935] tipc: Resetting bearer [ 483.178265][T13927] tipc: Disabling bearer [ 484.211654][T13976] netlink: 'syz.4.2585': attribute type 21 has an invalid length. [ 484.211726][T13976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2585'. [ 484.211760][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2585'. [ 485.182849][T13986] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 486.594194][T13991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2574'. [ 488.619848][T14043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2608'. [ 490.253981][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 490.388787][T14060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 497.092187][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 497.222246][ T5866] usb 1-1: device descriptor read/64, error -71 [ 498.572319][ T5866] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 499.622417][ T5866] usb 1-1: device descriptor read/64, error -71 [ 500.020479][ T5866] usb usb1-port1: attempt power cycle [ 500.417345][ T992] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 501.262181][ T992] usb 5-1: device descriptor read/64, error -71 [ 501.365984][T14160] Bluetooth: MGMT ver 1.23 [ 501.417361][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.419044][ T1319] lec:lec_start_xmit: lec0:No lecd attached [ 501.502259][ T992] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 501.642295][ T992] usb 5-1: device descriptor read/64, error -71 [ 501.822868][ T992] usb usb5-port1: attempt power cycle [ 502.162217][ T992] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 502.183057][ T992] usb 5-1: device descriptor read/8, error -71 [ 502.422290][ T992] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 502.443080][ T992] usb 5-1: device descriptor read/8, error -71 [ 502.632806][ T992] usb usb5-port1: unable to enumerate USB device [ 503.464816][T14194] netlink: 'syz.4.2665': attribute type 21 has an invalid length. [ 503.464883][T14194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2665'. [ 503.464914][T14194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2665'. [ 503.742184][ T5809] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 503.892146][ T5809] usb 1-1: Using ep0 maxpacket: 16 [ 503.894468][ T5809] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.894507][ T5809] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 503.894530][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.939039][ T5809] usb 1-1: config 0 descriptor?? [ 504.134460][T14204] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.154549][T14204] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.156236][T14204] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.189924][T14204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.209480][T14204] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.001743][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.058109][T14203] xfrm0 speed is unknown, defaulting to 1000 [ 505.099621][ T992] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 505.256892][ T992] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 505.256920][ T992] usb 2-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 505.256955][ T992] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 505.256974][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.388496][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.948016][ T5881] usb 1-1: USB disconnect, device number 14 [ 506.108155][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.292231][ T5804] Bluetooth: hci5: command tx timeout [ 506.347955][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.522374][ T5881] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 506.545373][T14203] chnl_net:caif_netlink_parms(): no params data found [ 506.772099][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 506.772136][ C1] lec:lec_tx_timeout: lec0 [ 506.814146][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.814173][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.815349][ T5881] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.815375][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.815394][ T5881] usb 1-1: SerialNumber: syz [ 507.928657][ T5866] usb 2-1: USB disconnect, device number 10 [ 507.966586][ T5881] usb 1-1: 0:2 : does not exist [ 508.013265][ T5881] usb 1-1: USB disconnect, device number 15 [ 508.124951][T12391] udevd[12391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.332266][T13443] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 508.372169][ T5804] Bluetooth: hci5: command tx timeout [ 508.372211][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.372488][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.372720][T14203] bridge_slave_0: entered allmulticast mode [ 508.379259][T14203] bridge_slave_0: entered promiscuous mode [ 508.393010][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.393165][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.393368][T14203] bridge_slave_1: entered allmulticast mode [ 508.396234][T14203] bridge_slave_1: entered promiscuous mode [ 508.499915][T13443] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 508.499945][T13443] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.499964][T13443] usb 4-1: Product: syz [ 508.499977][T13443] usb 4-1: Manufacturer: syz [ 508.499991][T13443] usb 4-1: SerialNumber: syz [ 508.554575][T13443] usb 4-1: config 0 descriptor?? [ 508.618566][T13443] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 508.635891][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.637589][ T58] bridge_slave_1: left allmulticast mode [ 508.637614][ T58] bridge_slave_1: left promiscuous mode [ 508.664428][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.737444][ T58] bridge_slave_0: left allmulticast mode [ 508.737474][ T58] bridge_slave_0: left promiscuous mode [ 508.759783][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.452206][ T5866] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 509.612801][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 509.616989][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.617028][ T5866] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 509.617051][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.625562][ T5866] usb 2-1: config 0 descriptor?? [ 510.496883][ T5804] Bluetooth: hci5: command tx timeout [ 511.107326][T14277] random: crng reseeded on system resumption [ 511.572278][ T5881] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 511.782977][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 511.784935][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.784951][ T5881] usb 1-1: config 0 has no interface number 0 [ 511.784975][ T5881] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 511.784986][ T5881] usb 1-1: config 0 interface 1 has no altsetting 0 [ 511.787895][ T5881] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 511.787911][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.787921][ T5881] usb 1-1: Product: syz [ 511.787928][ T5881] usb 1-1: Manufacturer: syz [ 511.787935][ T5881] usb 1-1: SerialNumber: syz [ 511.797076][ T5881] usb 1-1: config 0 descriptor?? [ 512.031203][ T5881] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 512.066845][ T5881] cx231xx 1-1:0.1: Failed to read PCB config [ 512.067237][ T5881] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 512.081236][ T5881] usb 1-1: USB disconnect, device number 16 [ 512.299825][ T5866] usb 2-1: USB disconnect, device number 11 [ 512.367106][T13443] gspca_stk1135: reg_w 0x18 err -71 [ 512.368131][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368139][T13443] gspca_stk1135: Sensor write failed [ 512.368152][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368157][T13443] gspca_stk1135: Sensor write failed [ 512.368170][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368175][T13443] gspca_stk1135: Sensor read failed [ 512.368188][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368193][T13443] gspca_stk1135: Sensor read failed [ 512.368196][T13443] gspca_stk1135: Detected sensor type unknown (0x0) [ 512.368213][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368217][T13443] gspca_stk1135: Sensor read failed [ 512.368231][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368235][T13443] gspca_stk1135: Sensor read failed [ 512.368248][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368253][T13443] gspca_stk1135: Sensor write failed [ 512.368268][T13443] gspca_stk1135: serial bus timeout: status=0x00 [ 512.368277][T13443] gspca_stk1135: Sensor write failed [ 512.368378][T13443] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 512.380252][T13443] usb 4-1: USB disconnect, device number 14 [ 512.532707][ T5804] Bluetooth: hci5: command tx timeout [ 512.542289][ T5881] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 512.692304][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 512.694905][ T5881] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 512.694929][ T5881] usb 1-1: config 0 has no interface number 0 [ 512.694973][ T5881] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 512.694992][ T5881] usb 1-1: config 0 interface 1 has no altsetting 0 [ 512.699218][ T5881] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 512.699236][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.699246][ T5881] usb 1-1: Product: syz [ 512.699253][ T5881] usb 1-1: Manufacturer: syz [ 512.699260][ T5881] usb 1-1: SerialNumber: syz [ 512.724206][ T5881] usb 1-1: config 0 descriptor?? [ 512.957045][ T5881] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 512.997443][ T5881] cx231xx 1-1:0.1: Failed to read PCB config [ 512.997492][ T5881] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 513.005687][ T5881] usb 1-1: USB disconnect, device number 17 [ 513.094469][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.213567][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.260255][ T58] bond0 (unregistering): Released all slaves [ 513.282474][ T58] bond1 (unregistering): Released all slaves [ 513.306018][ T58] bond2 (unregistering): Released all slaves [ 513.329067][ T58] bond3 (unregistering): Released all slaves [ 513.360987][ T58] bond4 (unregistering): Released all slaves [ 513.426862][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.503965][ T5866] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 513.596113][ T58] tipc: Left network mode [ 513.616985][T14296] overlay: Unknown parameter '/' [ 513.620884][T14203] team0: Port device team_slave_0 added [ 513.649145][T14203] team0: Port device team_slave_1 added [ 513.707245][ T5866] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 513.707277][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.707297][ T5866] usb 5-1: Product: syz [ 513.707311][ T5866] usb 5-1: Manufacturer: syz [ 513.707324][ T5866] usb 5-1: SerialNumber: syz [ 513.752928][ T5866] usb 5-1: config 0 descriptor?? [ 513.787260][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.787275][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.787289][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.789538][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.789551][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.789576][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.961220][ T5866] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.008630][T14203] hsr_slave_0: entered promiscuous mode [ 514.013048][T14203] hsr_slave_1: entered promiscuous mode [ 514.015239][T14203] debugfs: 'hsr0' already exists in 'hsr' [ 514.015263][T14203] Cannot create hsr debugfs directory [ 515.633176][ T5866] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 515.662579][ T5866] usb 5-1: USB disconnect, device number 21 [ 515.840090][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'. [ 515.962346][ T992] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 516.112156][ T992] usb 2-1: Using ep0 maxpacket: 16 [ 516.127681][ T992] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 516.127710][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.132619][ T992] usb 2-1: config 0 descriptor?? [ 516.188240][ T992] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 516.571192][ T992] gspca_sonixj: reg_r err -32 [ 516.571273][ T992] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 517.442653][T14358] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2707'. [ 517.602226][ T58] hsr_slave_0: left promiscuous mode [ 517.642267][ T58] hsr_slave_1: left promiscuous mode [ 517.643535][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.643552][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.693005][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.693033][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.792456][ T992] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 517.809950][ T58] veth1_macvtap: left promiscuous mode [ 517.810044][ T58] veth0_macvtap: left promiscuous mode [ 517.810277][ T58] veth1_vlan: left promiscuous mode [ 517.810437][ T58] veth0_vlan: left promiscuous mode [ 517.943600][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 517.945446][ T992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 517.950311][ T992] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.950337][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.950356][ T992] usb 1-1: Product: syz [ 517.950370][ T992] usb 1-1: Manufacturer: syz [ 517.950383][ T992] usb 1-1: SerialNumber: syz [ 517.964044][ T992] usb 1-1: config 0 descriptor?? [ 517.990416][ T992] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.990449][ T992] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 518.594883][ T992] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 518.716163][T13443] usb 2-1: USB disconnect, device number 12 [ 519.238155][ T992] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 519.238176][ T992] em28xx 1-1:0.0: board has no eeprom [ 519.302279][ T992] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 519.302308][ T992] em28xx 1-1:0.0: dvb set to bulk mode. [ 519.308036][ T5881] em28xx 1-1:0.0: Binding DVB extension [ 519.354217][ T992] usb 1-1: USB disconnect, device number 18 [ 519.403001][ T992] em28xx 1-1:0.0: Disconnecting em28xx [ 519.446070][ T5881] em28xx 1-1:0.0: Registering input extension [ 519.447190][ T992] em28xx 1-1:0.0: Closing input extension [ 519.520706][ T992] em28xx 1-1:0.0: Freeing device [ 519.719516][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 521.022788][ T58] team0 (unregistering): Port device team_slave_1 removed [ 521.242765][ T58] team0 (unregistering): Port device team_slave_0 removed [ 523.245595][T14371] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 523.245636][T14371] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 523.245667][T14371] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 523.640224][T14396] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2718'. [ 525.161286][ T6554] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 525.813521][ T6554] usb 5-1: Using ep0 maxpacket: 16 [ 526.295396][ T6554] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 526.295427][ T6554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.300699][ T6554] usb 5-1: config 0 descriptor?? [ 526.516218][ T6554] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 526.726404][ T6554] gspca_sonixj: reg_r err -32 [ 526.726495][ T6554] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 527.299208][ T9350] lec:lec_start_xmit: lec0:No lecd attached [ 527.849117][ T5881] usb 5-1: USB disconnect, device number 22 [ 527.911948][T14203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 528.088794][T14203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 528.152869][ T58] IPVS: stop unused estimator thread 0... [ 528.159210][T14203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 528.240027][T14203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 528.641289][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.666858][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.675868][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.678209][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.691054][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.691245][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.989230][T14494] genirq: Flags mismatch irq 4. 00202000 (das16m1) vs. 00202080 (ttyS0) [ 530.662245][ T5866] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 530.740477][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.814314][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.814370][ T5866] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 530.814392][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.820071][ T5866] usb 1-1: config 0 descriptor?? [ 530.822390][T14502] netlink: 'syz.3.2740': attribute type 4 has an invalid length. [ 530.898795][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 531.116546][T14203] veth0_vlan: entered promiscuous mode [ 531.167668][T14203] veth1_vlan: entered promiscuous mode [ 532.540935][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5240 ms [ 532.540972][ C1] lec:lec_tx_timeout: lec0 [ 532.566985][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 532.594705][T14203] veth0_macvtap: entered promiscuous mode [ 532.600919][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 532.611490][T14203] veth1_macvtap: entered promiscuous mode [ 532.617976][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 532.622004][ T5866] pwc: recv_control_msg error -32 req 04 val 1000 [ 532.635736][ T5866] pwc: recv_control_msg error -32 req 04 val 1300 [ 532.636433][ T5866] pwc: recv_control_msg error -32 req 04 val 1400 [ 532.637140][ T5866] pwc: recv_control_msg error -32 req 02 val 2000 [ 532.641053][ T5866] pwc: recv_control_msg error -32 req 02 val 2100 [ 532.800231][T14203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.845147][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 532.845630][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 532.846107][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 532.846632][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 532.847100][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 532.847807][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 532.895332][T14203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.910715][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 532.944396][ T5866] pwc: Registered as video103. [ 532.949812][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 532.987031][ T5866] usb 1-1: USB disconnect, device number 19 [ 533.002240][ T6631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.003929][ T6631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.006582][ T6631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.055561][ T6631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.617391][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.617411][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.172318][ T992] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 535.326739][ T6631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.326760][ T6631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.342461][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 535.345923][ T992] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.345959][ T992] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.345995][ T992] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 535.346015][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.766398][ T992] usbhid 5-1:128.0: can't add hid device: -71 [ 535.768405][ T992] usbhid 5-1:128.0: probe with driver usbhid failed with error -71 [ 535.817000][ T992] usb 5-1: USB disconnect, device number 23 [ 536.184026][ T992] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 536.764233][T13443] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 537.432224][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 537.505876][ T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.534499][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.534529][ T44] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.534551][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.535325][ T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.543701][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.543730][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.543749][ T44] usb 2-1: Product: syz [ 538.543762][ T44] usb 2-1: Manufacturer: syz [ 538.543775][ T44] usb 2-1: SerialNumber: syz [ 538.630748][ T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 538.673864][ T44] hub 2-1:1.0: bad descriptor, ignoring hub [ 538.673902][ T44] hub 2-1:1.0: probe with driver hub failed with error -5 [ 538.887444][ T44] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 539.495435][ T44] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 539.497914][T14584] random: crng reseeded on system resumption [ 539.584193][T14565] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 540.002841][T13443] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 540.894389][T13443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.894416][T13443] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 540.896017][T13443] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 540.896043][T13443] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.896060][T13443] usb 1-1: Manufacturer: syz [ 540.914111][T13443] usb 1-1: config 0 descriptor?? [ 540.932241][ T44] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 541.202205][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 541.248552][ T44] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.248579][ T44] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.248600][ T44] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 541.248612][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.464346][T13443] usb 2-1: USB disconnect, device number 13 [ 541.471915][T13443] usblp0: removed [ 541.559687][ T5880] ------------[ cut here ]------------ [ 541.559698][ T5880] in_task() && kcov_mode_enabled(mode) [ 541.559709][ T5880] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#0: kworker/0:5/5880 [ 541.559767][ T5880] Modules linked in: [ 541.559804][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.559827][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 541.559836][ T5880] Workqueue: usb_hub_wq hub_event [ 541.559851][ T5880] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 541.559865][ T5880] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 25 cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 1a 35 4a 09 89 c0 48 c7 c7 a0 03 26 [ 541.559876][ T5880] RSP: 0018:ffffc900052ef768 EFLAGS: 00010202 [ 541.559892][ T5880] RAX: 0000000000000002 RBX: ffff888021715ac0 RCX: 0000000000000000 [ 541.559906][ T5880] RDX: 0000000000000000 RSI: ffffffff8b85e7e0 RDI: ffffffff8b85e7a0 [ 541.559919][ T5880] RBP: ffffc900052efa70 R08: ffffffff8b0fabf0 R09: ffffffff8dbc77c0 [ 541.559934][ T5880] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff88814537a000 [ 541.559950][ T5880] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888145378000 [ 541.559966][ T5880] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 541.559982][ T5880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.559996][ T5880] CR2: 0000200000060000 CR3: 000000003b4a2000 CR4: 00000000003526f0 [ 541.560008][ T5880] Call Trace: [ 541.560013][ T5880] [ 541.560024][ T5880] hub_event+0x150/0x4f60 [ 541.560035][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.560055][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.560080][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.560099][ T5880] ? look_up_lock_class+0x57/0x110 [ 541.560140][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.560167][ T5880] ? finish_task_switch+0x161/0x920 [ 541.560183][ T5880] ? lock_acquire+0x106/0x330 [ 541.560195][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.560215][ T5880] ? __pfx_hub_event+0x10/0x10 [ 541.560235][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.560274][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.560303][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.560332][ T5880] process_scheduled_works+0xaec/0x17a0 [ 541.560385][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.560415][ T5880] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.560445][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.560478][ T5880] ? schedule+0x90/0x360 [ 541.560512][ T5880] worker_thread+0xda6/0x1360 [ 541.560548][ T5880] ? __kthread_parkme+0x19c/0x1f0 [ 541.560576][ T5880] kthread+0x726/0x8b0 [ 541.560604][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 541.560623][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.560644][ T5880] ? rt_spin_unlock+0x14f/0x200 [ 541.560666][ T5880] ? rt_spin_unlock+0x160/0x200 [ 541.560675][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.560688][ T5880] ret_from_fork+0x51b/0xa40 [ 541.560701][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 541.560715][ T5880] ? __switch_to+0xc82/0x1410 [ 541.560749][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.560775][ T5880] ret_from_fork_asm+0x1a/0x30 [ 541.560822][ T5880] [ 541.560834][ T5880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 541.560843][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 541.560855][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 541.560862][ T5880] Workqueue: usb_hub_wq hub_event [ 541.560872][ T5880] Call Trace: [ 541.560879][ T5880] [ 541.560888][ T5880] vpanic+0x1e0/0x670 [ 541.560918][ T5880] panic+0xc5/0xd0 [ 541.560943][ T5880] ? __pfx_panic+0x10/0x10 [ 541.560980][ T5880] ? ret_from_fork_asm+0x1a/0x30 [ 541.561006][ T5880] __warn+0x315/0x4a0 [ 541.561019][ T5880] ? kcov_remote_start+0x5d8/0x710 [ 541.561033][ T5880] ? kcov_remote_start+0x5d8/0x710 [ 541.561053][ T5880] __report_bug+0x29a/0x540 [ 541.561085][ T5880] ? kcov_remote_start+0x5d8/0x710 [ 541.561112][ T5880] ? __pfx___report_bug+0x10/0x10 [ 541.561137][ T5880] ? unwind_next_frame+0xa5/0x23c0 [ 541.561161][ T5880] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 541.561175][ T5880] ? rt_spin_lock+0x1e0/0x400 [ 541.561185][ T5880] ? rt_spin_lock+0x1e0/0x400 [ 541.561197][ T5880] ? kcov_remote_start+0x5d8/0x710 [ 541.561214][ T5880] report_bug+0x16a/0x220 [ 541.561239][ T5880] ? kcov_remote_start+0x5d8/0x710 [ 541.561264][ T5880] ? kcov_remote_start+0x5da/0x710 [ 541.561288][ T5880] handle_bug+0x98/0x200 [ 541.561318][ T5880] exc_invalid_op+0x1a/0x50 [ 541.561335][ T5880] asm_exc_invalid_op+0x1a/0x20 [ 541.561346][ T5880] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 541.561359][ T5880] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 72 25 cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 1a 35 4a 09 89 c0 48 c7 c7 a0 03 26 [ 541.561368][ T5880] RSP: 0018:ffffc900052ef768 EFLAGS: 00010202 [ 541.561384][ T5880] RAX: 0000000000000002 RBX: ffff888021715ac0 RCX: 0000000000000000 [ 541.561398][ T5880] RDX: 0000000000000000 RSI: ffffffff8b85e7e0 RDI: ffffffff8b85e7a0 [ 541.561412][ T5880] RBP: ffffc900052efa70 R08: ffffffff8b0fabf0 R09: ffffffff8dbc77c0 [ 541.561428][ T5880] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff88814537a000 [ 541.561443][ T5880] R13: dffffc0000000000 R14: 0100000000000001 R15: ffff888145378000 [ 541.561472][ T5880] ? rt_spin_lock+0x1e0/0x400 [ 541.561493][ T5880] ? kcov_remote_start+0xe0/0x710 [ 541.561520][ T5880] hub_event+0x150/0x4f60 [ 541.561539][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.561564][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.561588][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.561606][ T5880] ? look_up_lock_class+0x57/0x110 [ 541.561639][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 541.561670][ T5880] ? finish_task_switch+0x161/0x920 [ 541.561697][ T5880] ? lock_acquire+0x106/0x330 [ 541.561719][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.561752][ T5880] ? __pfx_hub_event+0x10/0x10 [ 541.561772][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.561811][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.561831][ T5880] ? process_scheduled_works+0xa0f/0x17a0 [ 541.561847][ T5880] process_scheduled_works+0xaec/0x17a0 [ 541.561887][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.561915][ T5880] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.561948][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 541.561976][ T5880] ? schedule+0x90/0x360 [ 541.561995][ T5880] worker_thread+0xda6/0x1360 [ 541.562013][ T5880] ? __kthread_parkme+0x19c/0x1f0 [ 541.562040][ T5880] kthread+0x726/0x8b0 [ 541.562075][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 541.562094][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.562113][ T5880] ? rt_spin_unlock+0x14f/0x200 [ 541.562137][ T5880] ? rt_spin_unlock+0x160/0x200 [ 541.562155][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.562181][ T5880] ret_from_fork+0x51b/0xa40 [ 541.562203][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 541.562215][ T5880] ? __switch_to+0xc82/0x1410 [ 541.562232][ T5880] ? __pfx_kthread+0x10/0x10 [ 541.562248][ T5880] ret_from_fork_asm+0x1a/0x30 [ 541.562293][ T5880] [ 541.562664][ T5880] Kernel Offset: disabled