last executing test programs: 14.122120692s ago: executing program 3 (id=1940): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r0, 0x0) syz_clone3(0x0, 0x0) sync() socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, &(0x7f00000008c0)="66b9f80800000f3266b9dc0100000f32baf80c66b8eed4f88d66efbafc0cb80000ef260f792566b95d08000066b80140000066ba000000000f30670f0f03a70f8a3639660f513165640f01d1656466660f3a147d8604", 0x56}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) 13.915390408s ago: executing program 3 (id=1943): socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000001480)='afs\x00', 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000380)=""/4096, 0x1000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="210028bd7000fddbdf250f0000001400018008000900300000000700060073680000300002800e004e2100001400010020010000"], 0x64}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x400) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x30}}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000240)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x3d, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\xa5\x1c-Wk\f=\xd5\x15]\xdc\x81\x06\xb4\x94\xe1', 0xfffffffffffffd93, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) r6 = dup3(r1, r2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001640)=0x14) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_disconnect(r7) memfd_create(&(0x7f0000002240)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\xe0\x9b\xc3\x0fF\xc9\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x8b8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6V\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6BCB\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12C\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe1\x0eC\xdf\x1c\xad&\xff\\1\xcc\x0eFV\x00\n#\xf8\x06\xf0/\xe5\xeeOa\v$\xdbi\x03\x8b\xdco\x13_\xcc\'bI\x177\x90A\x91\xf2\xdau\xdbnS\xb3\x06,@\x16k\x96i:\x8d\xa3\x02]R@A s{\x84a\xa0-\xac\xea\xe4\x96A?\xcf\xe8\x9eIZ\x1f\xff\aAy1\'\xdd\xc2I\xe0\xe0\xbe\x1a\xa7\xf1Y*\x8a\x02\x8cI\'O\x9b\xe9w\x80\x1e\x18uNS\xa1\x95\r\xb9f3Q\x10s\xbe\x02\xf9\xd9q^\xdewf\x82\x11N\x7f\xf3d\xe5\n\xbdUl\xe8J\x02\xf1K\xb0\xb3WbE\xc2\xd3\x99\x9e^}1\x88W\x8d\xa4vM\xc1\x04\x02\xdf\a\x8f\x13\xf1eB\xe2\x86\xb0\x99\xc2\xe7)\xec\xf3@a\xb1\x8e\xa4\x9b\xee{\x1dq\xe5\x01e>\x1c\xe8\xe4\xc1B0\xf6\xf0\x11c+U\xdb\x1b\x04@\xbf\xb5\x06,\xc3\v\x8f\x16\x9c%\xf0\x83\x92+\xab%^\x90\xf7%=\xd5\xe4^\xa6\xcaD\xfb\xdfm\xe1\xf5\x9fg\x81>\xd9:\xa4\x90\x89\x86\x1ftM[\xbfm`\x92\xfe\xfc[I\x1bxVam\xb5%\xb3\xf8\xe7\xbd\x81\xf7\x86\xe4\xd5\xea\x88i3Vu+\xc4z\xc7\xbe\x90\xc3 d\xc0\x86\xa0\xb7\xa5\x9d\x16g\xab\x7f\xc7\xdf/\x84\xb4\'\xf5\xbbC\x8f\xaa\xdc\x9cs!\xc6zJ{\xbc\xb5o?#S\x14\x1b\xacM\xf1\xb7\xca\x9d\xc5\f\x1d\xc6\xdd\x1d\x12\r\x9fc\xe4f\x12\x17\xc5\xd6\x02/E\x86]\xe0\x94?Qa\xc7I`\xd1\xbd\xe4L\xb08$Y\xa7*\xcd\xa4\xe2\xe6z\xc8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00m4\xc6\xf4\x90\x93\xde\x91\x02\xde\x9c\x1f\xbd\xb2\xd5\x8a\xb1\xce\xd7k\xbb\xe1\ag\x86fe\xeb\xf2\xdd\x19N*\x91{\xb7\xb4(\x90\x01\xd0\x18\xabi)\xdd\xd5\a\x92f;C\xef\x98\xae#S\xa1\xf5\xac\xb2\r>\xfeHq\xbf\x1aH`\xc9.\xa7N\xbe\xa93\xaa\xa0', 0x6) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) 12.070274379s ago: executing program 2 (id=1949): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x4a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x458, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0xfffffdb9}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x4a8}}, 0x0) 12.049812205s ago: executing program 2 (id=1950): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) fremovexattr(r3, &(0x7f0000002340)=@known='system.posix_acl_access\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockopt(r0, 0x4, 0xfffffff8, &(0x7f00000004c0)=""/130, &(0x7f0000000080)=0x82) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) r7 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4900) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50104}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 11.775257377s ago: executing program 2 (id=1951): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r0) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000100)=[&(0x7f0000000780)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhAT\x95jS\a\x1c\x94\b0Y\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\x02\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000002cc0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xe9\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xOO\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', &(0x7f00000012c0)='gcB\xc6+\xbf\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xdf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0vl\v\x03\b\xadT\a\x14\xd7\xd7\xb5\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m\xb3\fv\xc5\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x16\xf0\xf9s\x9af$\xb3x\x8d\xf1\xe7\xe2\xad\xdd\xdf\xb7\xe8Ac*t\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x10(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xba\xd1\x91]]\xb26\xbfA\x96\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x16\xf0\xcc\a\x10dxb\xc2\x13m[xS\rO\x880\xf1P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5^\xf5\x05\xec\xa3\x98\f1\t\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xcex\xdb\xf6zG!3\xb9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x01\xfd\xb8\x99\x9c\x19\xb4\xac%~\x12\x7ft\xa9A\x1brx\x87\xa16\x93\xd5fap\x83k\xf6O\v\xae\x9c\xf3\xb0\xb9\t\x8d\xb9p\xcb\xe3csR\xe2\xfbL\x9f\xb3\xa4^\xc1\xf7m0\xa8\x1b\xd0\xfdY\\d\x03(\x89\xe7\xe1G\xcd\xce\xf5o@\xfdi\xd1w~\xc8\x95\x94\xea\xd4\xe8\xcaP\x89\x9b\x12\xa7\xdb\x95c=\x16\xd5\x06\xf9O\xa6+\xcf\n\xd5\xad\x15^\xa0\xe8\x9a\x9e>O\xbf\xd3Fd\xfe\xe7\xc7X\xeaf\x9cn0\xdd\x7f\x85^\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`DK\x17\xe9s2\xe0\xe2[IZS5\xa9\x00\x00\x00\x00\x00\xd5\x84\xc4\x91d\\L\xa0|o\xa9\"f\x9ah\xbda~H\xdf\xaf\xa1c\x83+\x00\xb5t\xc28\xb9\x15\xb1\r[g\xab\x1f\xe74N\xa1\xbe\'x\xf7\xfe\xd3=\xfa\nP\xf8\x89M\xd2\xefk.\xaa.\xc3\xddmr\xa3f\t\xfcC\xd7\xc8\xde\xbb\xa6\xf0\x06\xca\xbb\xf4\x0f\xfd\xc1\xca\xd9\x1d\xf0\x12\x94\x02\xdc\xe5`\xfc\x92_\xfe\x82\xcf\xc4\xa1\x8f\x95\xf9e\xbd$\x93V\xf0\xd6\xd9iu\x1d\x00\x00\x00\x00\xed\x9f\n\'\x00\x00\x00\x00\x00\x00\x00\x00x(\xbd\xfd.\xb1I<\xc31H\xe37\xecM:\xc0N\xdd\x81\xb0g\xf7;I)\xff\xc0\x9d|\x14D\xb2L2\xa4\xacBg=\xb8\xe9\xd0zh\x1d\x1d\xa0\xc8\xacJ\xf2\xe8W\xd9\xa9+6V!\x94\xbd\xec\xac\xad\x8cY\x05\xc4e\xdfc\x9a\xa4u\xad\x01\xf8:\xc0\xea\xae\xd4\xf66A\xf9\x15\xb5]\xf9\x18)v%?g6j\xdd\xd4\xe8\x98\xa3\xbaoi\x802\xd1\xfaZ\xf3!\x983\xb1\xfbH\x9a\x94\xf0\xf0l\xdd[\x99\x9f\x8ftPO`z\x94\xdd\x04_-u\x1aP>W3\xbc\xc9\x9fw<\x97C\xa8\x90\xf0\xe7\xfeUN\xeb\xf7\xf06\xc2\xd8l\x14\xd9>\xa27[R\x02K\x82\x01\x10\x16\x93\'\xafL\x81\x8c\xef\"\x1a\xa8\x15*u\xbb\xbc7u}\x877\xa5s[\x13\xa6\x99Iv~\xf4`+\xdf\xe2\xd1\xfe\x03\b\xcf\x81\xd6\xc5\xcb\xb6\x7f\x8a\xbf#\xc4\xdbq\xd0J\x862iG\xfc\x7fIl\xb9!\x0e\x14\xdcLor\xeb\x16D\x83\xf2f\xfb\at\xd8F\x12\xbe-\n\x04k\x01k\xd7?\x03~h\x9a\b\xae\x1b\xd1\xb2\xbd\xe8\x1c\x8d\xcd\xcbUh\xf6\xfd\xd3\x9c\x06\xd7\x99\t\x0e\xdc\x11\x15\r\x8a\x86X\xdfq\xb2\xc2\x12(\xab\xd2\xca\xd0\x05\xe3u\xfbM\xe0\xf9\xd8\x98\x8b91\x9cJH\xd3\x9c\xd2\xa9\x80M\x96\"\x01\b\xfc\x9a\n\v\x19}?\f\xb6\xd4w\x12r\xba\x90!\xd40\xdaA\x82b\x92\x9f_\xe9\xf5\xba\xf3k\xe4\x9f\xa4\xfd\x15\xa5::\x86\xa7>\xabU\xa5\xe9{Yh\xec\xe9\x14\x12\x19\xb0\x93s\xb6\xe3\x15\xdd\xd4\xf9~$)\xf5\x95\xabU\xec\xc3\xa0!Ac\xe8E\xf1\xc0\x0f\xb0$4\x93n\xd3\xeb$\xaf\xca\xae&\xb7\x03\rs\x116\x88\xbd-\xd4H\xf7)\xb0\x9a\x11\xd7\x86\x93\xdc\xd8\xa5\xe8\xff2\x1fl\x91\xee\x18\x99\xdd\xec\xa9h\x95\x16\xc4\xf3\x912\xcb/\xa4\x17U\rL\xa6\xf4\x90YN\x1e\xa10\xec\xe1\x06\xca\x00'/684]) 11.689880424s ago: executing program 2 (id=1952): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r0, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) futex(&(0x7f0000000180), 0x6, 0x0, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1, 0x0, 0x0) 11.586337889s ago: executing program 2 (id=1953): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r0, 0x0) syz_clone3(0x0, 0x0) sync() socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000940)=[@textreal={0x8, &(0x7f00000008c0)="66b9f80800000f3266b9dc0100000f32baf80c66b8eed4f88d66efbafc0cb80000ef260f792566b95d08000066b80140000066ba000000000f30670f0f03a70f8a3639660f513165640f01d1656466660f3a147d8604", 0x56}], 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9a8a5b3317d93f48"}}, 0x48}}, 0x0) 11.539082898s ago: executing program 3 (id=1955): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, 0x0) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0x0) 11.481482495s ago: executing program 2 (id=1956): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002280)={0x18, 0x10, 0xa, 0x401, 0x0, 0x0, {}, [@generic="84"]}, 0x18}}, 0x0) syz_io_uring_setup(0x5e0, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r2, 0xb15, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) close(r4) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') pwritev(r7, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f00000001c0), 0x8, 0x4e0080) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8, {0x3}}, './file0\x00'}) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000000140)={0x3033, 0x7}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2ca9}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 11.430180653s ago: executing program 3 (id=1957): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800110300000000002174000a001400000000000028000014000500000000000071"], 0x30}}, 0x0) 11.417858707s ago: executing program 3 (id=1958): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) landlock_create_ruleset(&(0x7f0000000040)={0x10}, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x20000000) keyctl$setperm(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 11.320754296s ago: executing program 3 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x188}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x6f21bc113630f07f}, 0xc) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x20004880, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}]}, 0x0, 0x1}, 0x90) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_pressure(r5, &(0x7f00000001c0)={'some'}, 0x4cdad095) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4, 0x8}}]}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x9, 0x7, 0x4, 0x1a50, r6, 0x2, '\x00', r9, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001540)={'syztnl0\x00', &(0x7f00000014c0)={'tunl0\x00', r9, 0x8, 0x80, 0x3, 0x0, {{0xe, 0x4, 0x2, 0x4, 0x38, 0x67, 0x0, 0xf7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @empty, {[@timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x6, [{@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe0000000}, {@multicast1, 0x3}, {@loopback, 0x87}]}]}}}}}) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40d81, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1440, 0x1170, 0x1170, 0x1170, 0x1170, 0x1170, 0x1370, 0x1398, 0x1398, 0x1370, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x88}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0xfe, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @local, @remote, @mcast2, @loopback, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @local, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14a0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 8.446418939s ago: executing program 1 (id=1973): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2, 0x7}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x33, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x50}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x7, 0x6, {0x6, 0x24, "c6874085"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x20, 0x30, 0x99, "a9575a2b467fda99f97d303d0b3a0b644a0d854100d4960b8641a016bc969e253437cb2978934417c3373d435d45ceaa657f4b7a589879f64f6fb00fea8a55403754fe6d1941f87ea0f7928e820350980bfbb59ed72c26e96306c89a583fff81a3f99250ccde9cfc86fa877ad979c7e093046b918312532082e4baef667386a3044b2461563ec6571f303c3e5a443ba1cc3505b7b514074034"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x81, 0x1, "f1"}, &(0x7f0000000380)={0x20, 0x82, 0x2, "c383"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "bcb9ed"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "b5"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "978f7e"}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect(0x0, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xca, 0x1b, 0xae, 0x10, 0x1f4d, 0x3100, 0x90a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x62, 0xf3, 0x2, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x62, 0x0, "ce02d9d8c5e4de9509c71f8a6fe7bb3fb019a63eb33461e149b853b771865e56c2962a5f624b7f4b419defeeb9c48c14581c11be89f4b0a3336926d5f9bbc73ec8c2eece54d2f61a3b485b29d0656e49c8857e738a9e9391468c80a532f93911"}]}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) 5.878897857s ago: executing program 1 (id=1976): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x121080, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x408c1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'ipvlan0\x00', {0x2, 0x4e24, @multicast2}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'geneve0\x00', {0x2, 0x4e21, @remote}}) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f00000001c0)) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x10001, 0x0, &(0x7f0000fff000/0x1000)=nil}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7f, 0xfffff4ee}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8d, 0xbe, "5b4f26d0f67e35bf2f63c9dd8ebba273978ec3648ade7db1a341d34b6dbd9d676db0f3d6b906acd1f2b4b2504318338c21d6460212fb0a5fce9780e50c35243821412e4b3331e0214102969d8d9b3b48ccabc40f8a821e63a54259a160acb0482d8a19d65955048f9bd9fcb9a12499d3b4c31b56a9e3eb389692cd68cf5110dfe4e4f6a2692fe99226"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x44) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xd, 0x100, 0xc, 0x8, 0x100, r0, 0xad5, '\x00', r1, r0, 0x1, 0x5, 0x4}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)=@flushpolicy={0x210, 0x1d, 0x710, 0x70bd2b, 0x25dfdbfc, "", [@sec_ctx={0xf1, 0x8, {0xed, 0x8, 0x1, 0x3, 0xe5, "c3e218d66dd5c42b53494c252551f6ba87ff6a790def59a930ea826dc03ff21526d0c9eb5309ba12d0ff8700fe73c608e5a9627cd5366107b83d3b2c2154a9fe129ec46f7f0b661365a7ad7c97e7ba4daf7ca5bfc90ca16eed9fbbe7de2f6bd46009fb4be222181059815d7d77dd1e064cf41deb431ae70d8b47180970de978a722c00f62b817c6a1f2203d8d37e60e97f58bcbf07dca3f8928d7f7221aa0a7af36c25511a2b584da5ce2ae4675fad256016a6b3e01019c827c0f0e6202c55e38704784acc9c20518ba46da4cae8681c52021fe21ccd9c95414ddccabd068937f236e60e37"}}, @tmpl={0x104, 0x5, [{{@in6=@remote, 0x4d3, 0x2b}, 0xa, @in=@local, 0x3501, 0x1, 0x0, 0x7f, 0xffff1c0f, 0x7, 0xd5e}, {{@in6=@remote, 0x4d3, 0xff}, 0xa, @in6=@local, 0x3505, 0x0, 0x2, 0x3, 0x1, 0x101, 0x200}, {{@in6=@private1, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x0, 0x2, 0x1, 0x4, 0x2}, {{@in6=@remote, 0x4d3, 0x32}, 0xa, @in6=@mcast1, 0x3503, 0x1, 0x3, 0x93, 0x8000, 0x400, 0x9}]}, @XFRMA_SET_MARK={0x8, 0x1d, 0xbc}]}, 0x210}, 0x1, 0x0, 0x0, 0x44050}, 0x20004010) sendmsg$nl_xfrm(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@getae={0x74, 0x1f, 0x100, 0x70bd2a, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x2, 0x33}, @in=@rand_addr=0x64010102, 0x6, 0x3506}, [@policy_type={0xa}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @replay_thresh={0x8, 0xb, 0xa7}, @policy_type={0xa, 0x10, {0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40040b4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x0, 0x2, 0x7, 0x1, 0x81, 0x8, 0x4}, &(0x7f0000000ac0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b00)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1, 0x3}, 0x90) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x80, 0x453, 0x100, 0x70bd25, 0x25dfdbfc, "6a5f513751ff778be756f5cbda0012b04c44ebf296e81549559a9a5dc57162117f1835114af432a2648ca2839046088a7fb7dff5ad4308f27948c6d7ce4e707c624651bb39af399a650a948935a83a741be067753288f30107e7281273798b6f6dac22cf9e1146c449ea66af7aad15e4", ["", "", "", "", "", ""]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x6c, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x59}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2400c041}, 0x40050) shutdown(r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x7c, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x54}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d15cd25284c64e0268b533f5b1"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000}, 0x4) write$cgroup_subtree(r0, &(0x7f0000001180)={[{0x2d, 'blkio'}, {0x2d, 'perf_event'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}, {0x2b, 'net'}, {0x2d, 'rlimit'}, {0x2b, 'cpu'}, {0x600907ac2c229826, 'cpuacct'}, {0x2d, 'cpuacct'}]}, 0x4a) newfstatat(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) fchown(r3, r9, r10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc014) r11 = syz_open_dev$ndb(&(0x7f0000001400), 0x0, 0x40) close_range(r11, r0, 0x0) 5.746127737s ago: executing program 1 (id=1977): rmdir(&(0x7f0000000000)='./file0\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0x4d344492}], 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000040)='./file0\x00', 0x0) llistxattr(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x82, &(0x7f0000000040), 0x8) sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', '', [{0x20, '\r\xbf\xd7\x00\x938\xe2\x10\x7f\x00{\xf0\xb4p\xfat\xa9c9\xb78\xd9\x80\x1d\x06\xc2\xc0\xdd\xfap2\xdaz\x85X\xc2\x9a\x15\x1ay_m\xb0P\xf6\xa7\xe7\n]f\xdb\x06G\x01\r\x86\x9e\x9a\xca>=\x85V\x86\x1cb\b\xb7\x90\xff\x00\xac\xfdX\xa6\x06\xa9.\x84\x80\b\xe3\xcb\xfa\x1a!\x19>[\xcd\xac\xdd\xe5\xacF\xf27|\xdcS>\xc9\xeb\xd4\xc5\x82c\x9e\x8a\x1f\xde7\x1a\xe0Ac5\xa8\xe2%\xd1\x8d\xfe\xfd\x10\x82\x8fF\xcc\xfce\xc0\x14]aS\xd5\xa3\xbf\x84\x92\x04\x9a\xdc\xf66\xc5\x82j\x9d~\xd3\x99H\x10Q\xd6UeDO@6\x00'}, {0x20, '\x00\x00\x7f)/[A'}, {0x20, '\x00\x01\x00'}, {0x20, '/dev/hwrng\x00'}], 0xa, "001f003df8bf4b9d84b880a6cab5b61e0442078bdba8b60e8bc0be28de0a31e8478e4a60a0feb079a59ab1a71319d21d01a63319bc111b4a7f364298b62508510504c64457aaef42c7d5a775f807b99000bf190a"}, 0x115) 5.637972368s ago: executing program 0 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xb931}, &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f00000042c0)="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", 0x1a3, 0x40041, &(0x7f0000000240)={0xa, 0x4e21, 0x3c5d, @loopback, 0x5318}, 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e050027200000"], 0x8) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x7) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xe7fd936cd574bc22, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000600)="49dfc139c2c3d9ee765a3c0b0e2777677ab4df4c2d452a6f477bd95ec5620b13df6daeb37b26bbc7b78d8b70308d973633de7c2e11dea029e61eaafe8989994f718ad692e486794aa2038df725665f2d2495d32642b35f2ccb1acce68d17225e16aa6a464fb82c1c62c88a40bceffa642cae76a9994e2d2bf501ef543d68c3cd4fd81340e17d544d004abc035c9c872a3c852556057e3e5f1b7abc3441441c6a0ba17010ffa51294d632d1d7ec61543ba228d4cb043d", 0xb6, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x20, @private2}, 0x1c) shutdown(r3, 0x1) getpeername(r3, &(0x7f0000000500)=@nfc, &(0x7f0000000380)=0x80) getsockopt$bt_hci(r3, 0x84, 0x70, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7fffffff, 0x7, 0x559, 0xf351, 0x4000000000009, 0x7, 0x1, 0x1, 0x6, 0x3, 0x4, 0x80, 0x1, 0x10001, 0xffffffffffffff00]}, &(0x7f00000008c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000900)={r4, 0x2b, "ea9e46a02af4b96afed651b691d9a61d3804d0f7245a22ed6810d06e7c61c90b35ff746c37bb98c4cbaa22"}, &(0x7f0000000940)=0x33) r5 = fsmount(0xffffffffffffffff, 0x1, 0xa7) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=""/65, 0x41}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x81}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e21, 0x1, @empty, 0xff}, 0x1c) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="7b2c0eaaaaaa89aa2f15e8224c3abdf48510212e49f4c86681318c5bfa8a9a1bd499c5c555b76002259db0e423238e0a6ac760d567bfec607cfe22606184511b8631f4014f54224e7c15c210dd8ddf3be78b7c99349e368f4e2719898cba02063819736da7a78651519bce319aab7311b3f7b6c4a93e9c20ac69"], 0xa) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup3(r7, r6, 0x0) mremap(&(0x7f0000480000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000000000/0x1000)=nil) 5.398856106s ago: executing program 0 (id=1979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5.244329493s ago: executing program 0 (id=1980): r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) landlock_create_ruleset(&(0x7f0000000040)={0x10}, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x20000000) keyctl$setperm(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="dd4be2b39b8b00954184813dec7eccbb4335ad0b1bc269e2d77295beddcf82aa62b6ed737a38440fb540bbec4cacb3bda557a8b6a0a3b8c410dc98fea83d4347fe36b751b36eb262f5559cc5b94a28486f66e7283f670674e24b6646950f9c067b2afdd9f315b37eeabe33cade967ddad4518dd6da51b5802a4d3fd7a3b78e08ef5c694e68721dab56ca2628", 0x8c}, {&(0x7f0000000480)="04e6abda887eca3701ecfb9999ffe87d8a3dd411ca25b1e546c4a3fe8b2876ee6b10e63fd6706ae442c8825aaa9c337b07580d3fec698a9bc3b9294dc8f0e30df44f6f7f7c73ebf153b8b4e4219754b30c9d170fa5cdfafd9c0bd09ce0352e4a052804e39e36d84af7db0e7967273b7123e01234800522b64a1b12b23a16d656337cc8fd3c20396c16c7571b71c6bab1f72f241b6d043b60a683b37b771249", 0x9f}, {&(0x7f00000000c0)='s', 0x1}], 0x3}, 0x0) 5.149623526s ago: executing program 0 (id=1981): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000380)="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", 0x206}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6302}, 0x1c) (async, rerun: 32) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5a8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (rerun: 32) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209ffffffffffff091f08a8118225c693a81bd147af421774e1757405a8305fd6c223aa530c240bd93bd0b5492208f21f74cd3f2d51e3e428"], 0xc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setlease(r1, 0x400, 0x0) 4.866137773s ago: executing program 0 (id=1982): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x4a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x458, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0xfffffdb9}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x4a8}}, 0x0) 4.842204298s ago: executing program 0 (id=1983): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000111100fc010000000000000000000000000000ff"], 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="041817aaaaaaaaaa10"], 0x1a) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='kvm_ioapic_set_irq\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0x4376ea830d55d49b, 0x0, [0x0, 0x0, 0x7]}) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001bc0)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x0, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="0f01cbea0058000004010f20e035000200000f22e0ea000000003500c4e17ae67a7466ba610066ed2e26660f3881b12cd877aac4e3dd5edf62b8010000000f01d90f06", 0x43}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.520750983s ago: executing program 1 (id=1984): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) socket$inet_udplite(0x2, 0x2, 0x88) socket$l2tp(0x2, 0x2, 0x73) dup(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000003100)="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", 0xdd0}], 0x2}}], 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000380), 0x3fc, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x230000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x6, 0x4, 0x30314742, 0x9, 0x9, [{0x202, 0x1}, {0x3, 0x5}, {0x10001, 0x101}, {0xfffb, 0x92a}, {0xfffffff8, 0x7f}, {0x2, 0x6}, {0x401, 0x2364}, {0x75, 0xc02}], 0x81, 0x96, 0x0, 0x0, 0x7}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x4, 0x1, 0x0, "e47fbe3ba88330e7014de9e7c29ee67dea4dfd1563e7ee944e41c38b555c6ac2"}) r7 = dup3(r5, r4, 0x0) recvmmsg$unix(r7, &(0x7f0000000e00)=[{{0x0, 0x1a, &(0x7f0000000680)=[{&(0x7f0000000e40)=""/4099, 0x1003}, {&(0x7f0000000280)=""/204}, {&(0x7f0000000480)=""/67}, {&(0x7f0000000200)}, {&(0x7f0000000500)=""/134}, {&(0x7f00000005c0)=""/143}], 0x1}}], 0x1, 0x0, 0x0) 4.472665405s ago: executing program 1 (id=1985): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = eventfd(0x1f) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1, 0x1}) (async) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={r4}, 0x8) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f00000001c0)='\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c) 4.405798593s ago: executing program 1 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.406474219s ago: executing program 4 (id=1987): syz_usb_connect(0x0, 0x3bf, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004af96b40b822276082d2010203010902ad0301000000000904b90010020a000009050503000200074a0725010002ff07192182acae1590b4004eab0796d4324e594781cfcebd2cd709050b00000401064009050908000400010829076ab627d88c8745ccd26bcb1f83ccee0729e68170d834d94e87d8f3bbfd11eeda59c44aafd59a5409050800000401084e0725010300060009050a10400006040873318bde6a0c5e822d14e97ba7d26839db586071ee79dccfea9053ed575dbba7f544b8a64f1d8789dc4d4bc37d3b305fa95abeb40cc05ad53a9cb6dc8079000d3ef3decd10e35cfc58b3d95af6d7c1f948a87ab466e9dd15a6e3603fab4addc2662b48f7a61e8a519d7439407ccff5045946c4733054d8693fbe57920111f73f5af526217c8eba15b274766d29010cc168ecf4483b8d8225de1b2192b879e7031aed8bbf4b2c4f65e256e87a570cc50016a4cffd599c6940e543e00dcefeaca980f99ec93f2c9480516bb74dcb24357e7153ef8a5e32516ed6e0ff2e222072c276f1099af07c09050600000206f9f9bb0aedef0bd21aee7bb6150b1c4089ba5e657be97b184359bacbeee4ecdbaba9894c80f0ee63e2c90edadb4e4b8f39251b9ea253a80c45560db3736e3f1777fcaf5cbcf026c054b9f8c97af77f8e97c1437874940a7f4a40a7462e1c596fbfb2d379cd3978d0491c152368809b328ea884e7c58605f4d94387997f2ec9a9208627c2863f2760bf3dcf52a10657aad7b52e2d9d43e942d56f7373259849cfd55c8fbf718f9282a7d59c701dc7a126bc0d7d88a9cea6e2888492ba0609050f10000204800209050c001000083f08090504002000ff0c2009050d0320001f0504c905685bc0b0fee8dc6571eaacf359776f8d69806bbe79d0838940bc0ad20fc67b052a60177af68ee0fa35692a7d53cdf57b6ec41d8b31be7046c61c6e7a6e12f11e2066a49effb6cc5fb0c9d9e4901f45ba019a9e5cd31be4a62a998634017a1ef571a39acbaa54dfb2a1ae77277546bd9ea8be4c891909f8897a1f3952259dd88928c65fee0e9200e1a28c0281e2ef9359b522b6157c19e6e9ac5146cfba7367f475519ce8a5ce7753cafaa63ead6122832ef843484b4616c3d9557c39afed65671d4f21e1be0e7009050b02000481070709050803200008ff08072501016502002f0ef8c11a9896f3a6162d8512ce6ab594cfa667cee639d5288f0b5b1d9a1bef4f69ee6b5d75d4e82e417fed4b45050905041040000007020725010301ff0f072501027f0700090508102000f7090109050b01ff031f0779072501c406090007250182010500090506000002017f094f9d7218adac0509a12d65d2c6e362a3a42419e09e627bbab1fb33ccfbc6363915ba3fd5aac8071a7dbc"], 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000003c0), 0x0, 0x802) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000400)={0x1}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @initdev}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020601080000000009000005ca29660754408d33564e000000000005000400000000000900020073797a31000000000500000300686173683a6e25742c696661636500000c0007800800130000000000050005000a0000000000000000000045cf81b77b5678d728"], 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0x2}}, './mnt\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r8, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_usb_connect$hid(0x5fffabd0907d9e55, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x20, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x2, 0x2, 0x1, {0x22, 0xc7b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5d, 0x3, 0x30}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x3, 0x1f, 0x40, 0x7f}, 0x17, &(0x7f0000000240)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0xffffffffffffff6c, 0x10, 0x2, 0x10, 0x5, 0x3, 0x69}, @wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x80, 0xf9, 0xfff7, 0xf8}]}, 0x1, [{0x63, &(0x7f0000000280)=@string={0x63, 0x3, "5e7337132a249c3ed400006ea5bdaf81942470118282d56de09e5385d0aed248e12d6360a491834204ff11b93d5a35e1573fd25738e2f48a8406cc6b1c33c2f66b48cb40c62a347010e778e3ff2d2dab4018584502d179242b58a2003163f6adb0"}}]}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r9, 0x29, 0x28, 0x6, 0x7, 0x5e, @loopback, @mcast2, 0x7800, 0x8, 0x1, 0x4}}) 1.821141854s ago: executing program 4 (id=1988): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x20, 0x4ef7e228, 0x95f, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x7, [{@rand_addr=0x64010100, 0x3481}]}]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x80}]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="90050ee7ff07babe"], 0x120) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000001c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="185a00000d0000000000000000000000950000000000000018", @ANYRES32=r0, @ANYRES16=r2, @ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYBLOB="c1d19bf7e93a28be686922e8f36132f62a44145f7addd6ded85f9783e1a98d7bb189cbe669cd539f270f61", @ANYRESHEX=r0, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x24854}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000000101040000000000000000020000000800164000000659240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bfa9d4084f041ca013bb01020301090224000100000000090400000214099f000905050000000000050c000000004000"], 0x0) 195.454789ms ago: executing program 4 (id=1991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 149.674343ms ago: executing program 4 (id=1992): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xc0000004}) 62.35343ms ago: executing program 4 (id=1993): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000001000/0x3000)=nil], &(0x7f0000000100)=[0x0, 0x9, 0xb74], &(0x7f0000000140)=[0x0], 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xfffffd4b, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="996e0600000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="9c000000", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x8094) ptrace(0x10, r0) mlockall(0x5) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f0000000240)=0x2, 0xc, 0x2, &(0x7f0000000740), 0x0, 0x1) socket$inet6(0xa, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x7, @tid=r7}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r8 = memfd_create(&(0x7f0000001c80)='\x01\fD\xd1\x1e\x803\x00\x00\xbf\xecs \xc5\xb55nVg\x1b\xa3\x8a\xcc\xf2!PmENs\xe5\x83Uz\xc0W\xc1\xcc\x97\xd1\x8e\x81\n\xc0\xb3Ac\xfe(\x00\x13\xaeZ\x8bp\x1e\xdc\x18\xddf\xe9\xe1\t\bR) \xa9P9(\xe1-q \xb3\x80\xb9\xdfj\xed\xc2_o\xe6\x04\xf5\x9f\x04\xf1\xd5\xe3\xfa\xfd\x16=q\x93u\xf1\xde\xef\xac\x171\x13r\xc49\x80\x86\x1a\xbf\xaa&\xf0\xe8Gwm\x80]\xe8\xc2\x90w\xf8H\xe8Cc\x84\xa6y\xb7\xbe\xcbX\x891\xae\a\xf9\xa6\xd8\xd0\x03\x00\x00\x00\x00\x00\x00\x00\']\by\xb5\xbcIv\xe6\xd1\xb5\xbf\xacw\xda\xed\xf0^\xd35\xeb=\xc7\x82;\xb32;\xc5\xa3\xc8\xb9\xf2\xe5\xf4\x93[\x91F\x83?\xfe\xd9\x7ffvQ\xff\xc0\x8f\xe4\xb8\xa3\xbf\xceAT\x17\xc6\x81\xc0m}O\xfd\xe0\x05$\xcd\xfd\x05\x00\x00\x00Q\xd8z\xe0\xd6\xe2\xbe\xf4\xd5\x16\x94\xe0\xbf0\xde\xcaS/\xf7\xeb\x89b,8X\xee\rSJQ\x94{}\xd5\xaf\xa9mX0\x94T\x95\x9dx@\xce:]\xb68\xa2W\xcb\x86\b#s\xb4q6\xe88\x19\x1a\x14Z\xf3\xd7\x92\xe4b\xfc\xf9\xb1\xe0\xdd2\xfd\xda\x84\xbd\xaf\x88\xb3\x91P6t\xf3\xcc\x03\xb8\x9a\x043|A\f\xd4\x1a?h \f\x7f\x92\xb5\x98/J\xd1\x8eW\xfd\xf4o\xd4[\x90\xb3\xc3\xf9\x18\x86\xd1\xeb\x13PIwg\xbe\xbb\"\xfce:\xae\xa9\xc57\xe7\xf6G\x93\xe1X\x9f\xfb\xa5\xe4$>L\xe5]\xc3\x88\xca\xb7\x8b\xfcCn\xcc7>\xa7\xf6mF\xc2\x96q\xc48\xeeP%\x89d\x942\x84r]S\x18{\xd8\xbfT\x0f\xcb\xf7\x84D\xac\x03F+Nj\xd5\x81\x10\xfe\xa6\xf9l\x96N\x1f\xae\xab\xf67\xf1e4v*\x8et\xd3}}\xee\xaf5\x123\x15\xa0\x05\xf4B\x9c\x127\xc42\xab\xf2\xcd\x9a\xcdu\xa9A\xa4\x1f?y\xf0p\x9a\xd7o\xcd\xd0X.\xfa\x15(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe8\x97\xb7\xb6:\aD\x92\x007\xf0\xe2\x1e\xbf9%\x10\xdb\xd69\xfa6e\xef\xf3\xbf{!H1\xd6+\xde\x7f\xe9\x98\xe4\x1do\xfc\xa3\x9b@z\xe5\xbf\xbce\xdd4d\\\x97\x17\xec\x8c\xc0;\xb9\x17`-\x1d\xc4~\x1f\xbcW\"\xb9\x8e~\xc8|\xeb.\x90\x8f\xe5\xf8\x8fM\x1a\xb3\x12j\xae\xffX\xca\xd3\xa4[]\xfe\xc1\x01\x14\xd7\xcdb\xff\b4`\xcd$\x81R\xe5\xbf\xe1\v\xcf,\xd9&\x1a\xfc\x134\xf40P\xd5J\xec\x15-\f\xf0ls9{\xb1\x8f\xb2\xa5', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r8, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x0, 0x0, @thr={0xfffffffffffffffe, &(0x7f00000002c0)="f436a9b28abbae7c87a25bf266b2dcb24bf5206e9d0f712f429d2cb3edd82f2eda9b37b4d53eb912b660c5dca96a1a3c985a759abf3ce83a3c2afd7dc49c14d88e4ba6a5986575a84196aa2331689b3dfd86016dfdec70c9be05fe6252155ba857b0b640fa9244b5bbb003438c1aa586ea60a560c9b7b4edb209a04d751b2605c6d64b891875317394ece81c1239099f86ee550b8de352ee1a"}}, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x2, 0x6) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace(0x8, r0) waitid(0x3, r0, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff) (async) r2 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0}) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="595a0000000000000000450000000e0001006e657464657673696d0000000f0022006e6574646576d72fef478697c97373696d30000008008e000300000063754de2ec97f448868c326b9c58ec2f2588c84bca4bf9488e539c6545ea2dc2944a629beaf0000e79d1eab2cdca31992479c9837e1ea6b74518d684db1d7b47b2e21a1a1b04d4277c119d304c3fad27fc95f4aab9a95e1877d81076ef4624989282a108d5e7c7e5fc3eb0de018b51f6b32872730f412517f35ca04e91046f5fea3fe8e198db6dae755e825dc64285a172ab5d962cc55b3132d21b4a60d2bd1188a029f32a7af72234a64ac5efead55907f52b538f7079d879720e594a1af24477319f20c236852e2bf3aaba90db0b1d7e"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ady present! [ 538.971058][T13278] Cannot create hsr debugfs directory [ 539.253656][T12114] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 539.575067][ T5144] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 539.724906][ T929] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 539.729783][ T25] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 539.758101][ T5144] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.781889][ T5144] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.805417][ T5144] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 539.819142][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.830617][ T5144] usb 2-1: SerialNumber: syz [ 539.925718][ T929] usb 5-1: Using ep0 maxpacket: 16 [ 539.933173][ T929] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 539.945015][ T929] usb 5-1: config 0 has no interface number 0 [ 539.945134][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 539.959308][ T929] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=cc.8d [ 539.972586][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.978863][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.987384][T13278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.010971][ T929] usb 5-1: Product: syz [ 540.012392][ T25] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 540.031543][ T929] usb 5-1: Manufacturer: syz [ 540.032695][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.044754][ T929] usb 5-1: SerialNumber: syz [ 540.047696][T13278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.056669][ T25] usb 4-1: Product: syz [ 540.062014][ T25] usb 4-1: Manufacturer: syz [ 540.070390][T13278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.078052][ T929] usb 5-1: config 0 descriptor?? [ 540.083127][ T5141] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 540.091310][ T25] usb 4-1: SerialNumber: syz [ 540.100995][T13278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.125549][ T25] usb 4-1: config 0 descriptor?? [ 540.138473][ T25] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 540.150243][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 540.164806][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 540.181172][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.196374][T12114] Bluetooth: hci4: command tx timeout [ 540.207199][ T25] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 540.226593][T13440] netlink: 'syz.1.1729': attribute type 9 has an invalid length. [ 540.244092][ T25] usb 4-1: media controller created [ 540.251016][T13440] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1729'. [ 540.262936][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.282238][ T25] dw2102: i2c transfer failed. [ 540.294998][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 540.307506][ T5141] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 540.325378][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.333514][ T5141] usb 3-1: config 0 has no interface number 0 [ 540.341456][ T25] dw2102: i2c transfer failed. [ 540.366705][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.381637][ T5141] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice=cc.8d [ 540.389560][ T929] rtl8150 5-1:0.153: couldn't reset the device [ 540.402745][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.415245][ T25] dw2102: i2c transfer failed. [ 540.415619][ T929] rtl8150 5-1:0.153: probe with driver rtl8150 failed with error -5 [ 540.420033][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.451753][ T5141] usb 3-1: Product: syz [ 540.470532][ T929] usb 5-1: USB disconnect, device number 69 [ 540.471305][ T5141] usb 3-1: Manufacturer: syz [ 540.492405][T13278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.499093][ T5141] usb 3-1: SerialNumber: syz [ 540.500453][ T25] dw2102: i2c transfer failed. [ 540.516421][ T5141] usb 3-1: config 0 descriptor?? [ 540.563296][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.573174][ T25] dw2102: i2c transfer failed. [ 540.580840][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 540.589501][ T25] dw2102: i2c transfer failed. [ 540.593320][T13278] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.594299][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 540.604173][ T5144] usb 2-1: 0:2 : does not exist [ 540.621739][ T5144] usb 2-1: unit 252 not found! [ 540.636428][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.643674][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.652522][ T5144] usb 2-1: USB disconnect, device number 85 [ 540.664111][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.691857][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.699163][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.761719][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 540.772199][ T25] dw2102: command 0x0e transfer failed. [ 540.778931][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 540.791764][ T25] dw2102: command 0x0e transfer failed. [ 540.821078][ T5141] rtl8150 3-1:0.153: couldn't reset the device [ 540.839666][ T5141] rtl8150 3-1:0.153: probe with driver rtl8150 failed with error -5 [ 540.863301][ T5141] usb 3-1: USB disconnect, device number 109 [ 540.926596][T12543] udevd[12543]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.978387][T13278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.117691][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 541.124212][T13278] veth0_vlan: entered promiscuous mode [ 541.150642][ T25] dw2102: command 0x0e transfer failed. [ 541.162620][T13457] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1734'. [ 541.163476][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 541.178992][ T25] dw2102: command 0x0e transfer failed. [ 541.190879][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 541.217962][T13278] veth1_vlan: entered promiscuous mode [ 541.237432][ T25] dw2102: command 0x51 transfer failed. [ 541.305352][T12114] Bluetooth: hci3: command 0x0406 tx timeout [ 541.338390][T13278] veth0_macvtap: entered promiscuous mode [ 541.361754][ T25] DVB: Unable to find symbol ds3000_attach() [ 541.380884][T13278] veth1_macvtap: entered promiscuous mode [ 541.405243][ T25] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 541.519345][ T25] rc_core: IR keymap rc-su3000 not found [ 541.566352][ T25] Registered IR keymap rc-empty [ 541.572037][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.591234][ T25] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 541.610189][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.630392][ T25] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input60 [ 541.655801][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.682971][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 541.710487][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.724767][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 541.734913][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 541.753439][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.772263][ T25] usb 4-1: USB disconnect, device number 104 [ 541.780736][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.827720][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.870694][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.903182][T13278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.937420][ T929] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 541.980924][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.038839][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.043084][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 542.069243][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.082869][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.094783][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.156453][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 542.166857][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.182843][ T929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 542.196697][T13278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 542.210175][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.219874][T13278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.239538][ T929] usb 5-1: config 0 descriptor?? [ 542.257309][T13278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.333633][T13278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.427686][T13278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.443722][T13278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.475690][T13278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.498322][ T929] ath6kl: Failed to submit usb control message: -71 [ 542.529610][ T929] ath6kl: unable to send the bmi data to the device: -71 [ 542.580427][ T929] ath6kl: Unable to send get target info: -71 [ 542.605483][ T929] ath6kl: Failed to init ath6kl core: -71 [ 542.635863][ T929] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 542.676133][ T929] usb 5-1: USB disconnect, device number 70 [ 542.872969][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.896720][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.938050][ T2473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.948546][ T2473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.055993][ T5144] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 543.200044][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.267159][ T5144] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 543.288344][ T5144] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 543.326253][ T5144] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 543.366791][ T5144] usb 4-1: config 0 has no interface number 0 [ 543.372945][ T5144] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 543.441748][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.455902][ T5144] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 543.514103][ T5144] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 543.572725][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.604885][ T5144] usb 4-1: Product: syz [ 543.609099][ T5144] usb 4-1: Manufacturer: syz [ 543.613712][ T5144] usb 4-1: SerialNumber: syz [ 543.678510][ T5144] usb 4-1: config 0 descriptor?? [ 543.715551][ T5144] cdc_ether 4-1:0.185: skipping garbage [ 543.721149][ T5144] cdc_ether 4-1:0.185: skipping garbage [ 543.764168][ T5144] cdc_ether 4-1:0.185: skipping garbage [ 543.785685][ T5144] usb 4-1: bad CDC descriptors [ 543.786770][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.804256][ T5144] usb 4-1: unsupported MDLM descriptors [ 544.059394][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.117173][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.129253][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.141672][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.168802][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.177202][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 544.184593][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.225569][ T25] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 544.455235][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 544.482090][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 544.533208][ T25] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 544.567776][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.591242][ T11] bridge_slave_1: left allmulticast mode [ 544.595297][T13505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1743'. [ 544.602147][ T25] usb 3-1: Product: syz [ 544.621069][ T11] bridge_slave_1: left promiscuous mode [ 544.638148][ T25] usb 3-1: Manufacturer: syz [ 544.643066][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.662971][ T25] usb 3-1: SerialNumber: syz [ 544.670967][ T11] bridge_slave_0: left allmulticast mode [ 544.685823][ T11] bridge_slave_0: left promiscuous mode [ 544.695292][ T25] usb 3-1: config 0 descriptor?? [ 544.704955][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.729248][ T25] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 544.760997][ T25] dw2102: su3000_power_ctrl: 1, initialized 0 [ 544.778201][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 544.805481][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.833371][ T25] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 544.853289][ T25] usb 3-1: media controller created [ 544.868265][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 544.889891][ T25] dw2102: i2c transfer failed. [ 544.899781][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 544.940771][ T25] dw2102: i2c transfer failed. [ 544.958517][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 544.964287][ T25] dw2102: i2c transfer failed. [ 545.012129][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 545.030648][ T25] dw2102: i2c transfer failed. [ 545.044791][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 545.062456][ T25] dw2102: i2c transfer failed. [ 545.078109][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 545.102330][ T25] dw2102: i2c transfer failed. [ 545.113015][ T25] dvb-usb: MAC address: 02:02:02:02:02:02 [ 545.186387][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 545.242831][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 545.255890][ T25] dw2102: command 0x0e transfer failed. [ 545.267592][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 545.288750][ T25] dw2102: command 0x0e transfer failed. [ 545.475111][ T4493] Bluetooth: hci3: unexpected cc 0x2027 length: 2 > 1 [ 545.486475][ T4493] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 545.626818][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 545.641576][ T25] dw2102: command 0x0e transfer failed. [ 545.654824][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 545.665915][ T25] dw2102: command 0x0e transfer failed. [ 545.678877][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 545.709897][ T25] dw2102: command 0x51 transfer failed. [ 545.797673][ T25] DVB: Unable to find symbol ds3000_attach() [ 545.803776][ T25] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 545.895699][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.908005][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.919722][ T11] bond0 (unregistering): Released all slaves [ 545.925963][ T25] rc_core: IR keymap rc-su3000 not found [ 545.931934][ T25] Registered IR keymap rc-empty [ 545.946483][ T25] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 545.961156][ T25] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input61 [ 545.979333][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 545.992257][ T25] dw2102: su3000_power_ctrl: 0, initialized 1 [ 546.004911][T13589] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1756'. [ 546.018463][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 546.045461][ T25] usb 3-1: USB disconnect, device number 110 [ 546.067086][ T5140] usb 4-1: USB disconnect, device number 105 [ 546.268427][ T4493] Bluetooth: hci2: command tx timeout [ 546.418781][ T25] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 546.836171][ T11] hsr_slave_0: left promiscuous mode [ 546.844797][ T25] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 546.871106][ T11] hsr_slave_1: left promiscuous mode [ 546.902711][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.920597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.974339][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.002564][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.051564][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 547.059471][ T11] veth1_macvtap: left promiscuous mode [ 547.079138][ T25] usb 3-1: config 0 has an invalid interface number: 206 but max is 1 [ 547.082271][ T11] veth0_macvtap: left promiscuous mode [ 547.104038][ T25] usb 3-1: config 0 has no interface number 1 [ 547.110980][T13637] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 547.120958][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.136951][ T11] veth1_vlan: left promiscuous mode [ 547.142333][ T11] veth0_vlan: left promiscuous mode [ 547.170182][ T25] usb 3-1: config 0 interface 206 has no altsetting 0 [ 547.222032][ T25] usb 3-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 547.266703][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.298511][ T25] usb 3-1: Product: syz [ 547.338780][ T25] usb 3-1: Manufacturer: syz [ 547.344851][ T25] usb 3-1: SerialNumber: syz [ 547.374275][ T25] usb 3-1: config 0 descriptor?? [ 547.435033][ T4493] Bluetooth: hci4: unexpected cc 0x2027 length: 2 > 1 [ 547.796503][T13657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.862935][T13657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 548.359458][ T4493] Bluetooth: hci2: command tx timeout [ 548.455301][ T11] team0 (unregistering): Port device team_slave_1 removed [ 548.495842][ T11] team0 (unregistering): Port device team_slave_0 removed [ 548.568148][ T929] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 548.757616][ T929] usb 4-1: Using ep0 maxpacket: 16 [ 548.767237][ T929] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.799403][ T929] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 548.809694][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.817881][ T929] usb 4-1: Product: syz [ 548.822068][ T929] usb 4-1: Manufacturer: syz [ 548.828326][ T929] usb 4-1: SerialNumber: syz [ 548.836089][ T929] usb 4-1: config 0 descriptor?? [ 548.859677][ T929] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 548.868452][ T929] dw2102: su3000_power_ctrl: 1, initialized 0 [ 548.874559][ T929] dvb-usb: bulk message failed: -22 (2/0) [ 548.898429][ T929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.909277][ T929] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 548.918940][ T929] usb 4-1: media controller created [ 548.924580][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.931034][ T929] dw2102: i2c transfer failed. [ 548.936557][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.943879][ T929] dw2102: i2c transfer failed. [ 548.949354][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.956473][ T929] dw2102: i2c transfer failed. [ 548.961360][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.969076][ T929] dw2102: i2c transfer failed. [ 548.973951][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.984107][ T929] dw2102: i2c transfer failed. [ 548.989025][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 548.995119][ T929] dw2102: i2c transfer failed. [ 548.999918][ T929] dvb-usb: MAC address: 02:02:02:02:02:02 [ 549.023238][ T929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.046178][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 549.052005][ T929] dw2102: command 0x0e transfer failed. [ 549.057689][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 549.067186][ T929] dw2102: command 0x0e transfer failed. [ 549.100077][T13550] chnl_net:caif_netlink_parms(): no params data found [ 549.166505][ T5141] usb 3-1: USB disconnect, device number 111 [ 549.302635][T13675] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1769'. [ 549.397893][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 549.434813][ T929] dw2102: command 0x0e transfer failed. [ 549.440416][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 549.480537][ T929] dw2102: command 0x0e transfer failed. [ 549.496084][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.518476][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.523545][ T929] dvb-usb: bulk message failed: -22 (1/0) [ 549.533931][T13550] bridge_slave_0: entered allmulticast mode [ 549.538733][ T929] dw2102: command 0x51 transfer failed. [ 549.552342][ T4493] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 549.563348][ T4493] Bluetooth: hci3: Injecting HCI hardware error event [ 549.572653][T12114] Bluetooth: hci3: hardware error 0x00 [ 549.582329][T13550] bridge_slave_0: entered promiscuous mode [ 549.655856][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.686262][ T929] DVB: Unable to find symbol ds3000_attach() [ 549.692295][ T929] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 549.703798][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.744340][T13550] bridge_slave_1: entered allmulticast mode [ 549.779806][T13550] bridge_slave_1: entered promiscuous mode [ 549.795108][ T929] rc_core: IR keymap rc-su3000 not found [ 549.813148][ T929] Registered IR keymap rc-empty [ 549.829512][ T929] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 549.863518][ T929] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input62 [ 549.911056][ T929] dvb-usb: schedule remote query interval to 150 msecs. [ 549.920606][ T4493] Bluetooth: hci0: unexpected cc 0x2027 length: 2 > 1 [ 549.928319][ T4493] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 549.933636][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.936788][ T929] dw2102: su3000_power_ctrl: 0, initialized 1 [ 549.950858][ T929] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 549.966871][ T929] usb 4-1: USB disconnect, device number 106 [ 550.004763][ T5145] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 550.016289][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.026511][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.090178][ T929] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 550.102906][T13708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.188448][ T5145] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 550.215476][ T5145] usb 5-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 550.243702][ T5145] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 550.254484][T13550] team0: Port device team_slave_0 added [ 550.268985][ T5145] usb 5-1: config 0 has no interface number 0 [ 550.282941][T13550] team0: Port device team_slave_1 added [ 550.300299][ T5145] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 550.338771][ T5145] usb 5-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 550.395110][ T5145] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 550.430002][ T5145] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.440126][ T4493] Bluetooth: hci2: command tx timeout [ 550.449859][T13721] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 550.470296][ T5145] usb 5-1: Product: syz [ 550.471349][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.474483][ T5145] usb 5-1: Manufacturer: syz [ 550.474503][ T5145] usb 5-1: SerialNumber: syz [ 550.482371][ T5145] usb 5-1: config 0 descriptor?? [ 550.501365][ T5145] cdc_ether 5-1:0.185: skipping garbage [ 550.514016][ T5145] cdc_ether 5-1:0.185: skipping garbage [ 550.523078][ T5145] cdc_ether 5-1:0.185: skipping garbage [ 550.529305][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.555473][ T5145] usb 5-1: bad CDC descriptors [ 550.560766][ T5145] usb 5-1: unsupported MDLM descriptors [ 550.584556][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.602626][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.611884][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.641056][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.688914][T13723] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1781'. [ 550.768390][T13725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 550.775842][T13550] hsr_slave_0: entered promiscuous mode [ 550.787130][T13550] hsr_slave_1: entered promiscuous mode [ 550.823145][T13550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.840866][T13550] Cannot create hsr debugfs directory [ 550.844597][T13732] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1774'. [ 550.982792][ T5140] usb 5-1: USB disconnect, device number 71 [ 551.465201][ T4493] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 551.473890][ T4493] Bluetooth: hci4: Injecting HCI hardware error event [ 551.483135][ T5099] Bluetooth: hci4: hardware error 0x00 [ 551.616067][ T5140] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 551.709449][T12114] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 551.834798][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 551.846951][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 551.864885][ T5140] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 551.886934][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.912480][ T5140] usb 4-1: config 0 descriptor?? [ 551.995508][ T5141] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 552.123622][T13550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.150814][T13550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.179331][T13550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.204607][T13550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.224733][ T5141] usb 5-1: Using ep0 maxpacket: 16 [ 552.252969][ T5141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 552.295063][ T5141] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 552.315652][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.345750][ T25] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 552.370198][ T5141] usb 5-1: config 0 descriptor?? [ 552.405168][ T929] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 552.509283][T12114] Bluetooth: hci2: command tx timeout [ 552.555375][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 552.563739][ T25] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 552.576521][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.578598][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.606344][ T25] usb 1-1: config 0 descriptor?? [ 552.627340][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 552.645836][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 552.666664][ T929] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.708785][ T929] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 552.720068][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.729280][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.767344][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.774571][ T929] usb 3-1: Product: syz [ 552.778770][ T929] usb 3-1: Manufacturer: syz [ 552.778899][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.794455][ T929] usb 3-1: SerialNumber: syz [ 552.796683][T13763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.827337][T13763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.839458][ T929] usb 3-1: config 0 descriptor?? [ 552.886140][ T5141] hid (null): invalid report_size 540876853 [ 552.887126][ T929] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 552.904253][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.911526][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.924479][ T929] dw2102: su3000_power_ctrl: 1, initialized 0 [ 552.927879][ T5141] hid (null): invalid report_size 29285 [ 552.955389][ T929] dvb-usb: bulk message failed: -22 (2/0) [ 552.961243][ T5141] hid (null): unknown global tag 0x83 [ 552.961288][ T5141] hid (null): unknown global tag 0xc [ 552.964560][ T5141] hid-generic 0003:0158:0100.0036: unknown main item tag 0x1 [ 553.046567][ T929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 553.069571][T13771] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 553.081377][ T5141] hid-generic 0003:0158:0100.0036: unexpected long global item [ 553.117737][ T5141] hid-generic 0003:0158:0100.0036: probe with driver hid-generic failed with error -22 [ 553.132695][ T929] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 553.226242][ T929] usb 3-1: media controller created [ 553.262708][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.264879][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.308868][ T929] dw2102: i2c transfer failed. [ 553.313717][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.361405][ T929] dw2102: i2c transfer failed. [ 553.380679][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.403516][ T929] dw2102: i2c transfer failed. [ 553.440494][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.465108][ T929] dw2102: i2c transfer failed. [ 553.471178][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.534167][T13550] veth0_vlan: entered promiscuous mode [ 553.545492][ T5099] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 553.574827][ T929] dw2102: i2c transfer failed. [ 553.595575][ T929] dvb-usb: bulk message failed: -22 (6/0) [ 553.599954][T13550] veth1_vlan: entered promiscuous mode [ 553.602506][T13750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1787'. [ 553.639764][ T929] dw2102: i2c transfer failed. [ 553.663946][ T929] dvb-usb: MAC address: 02:02:02:02:02:02 [ 553.875318][T13550] veth0_macvtap: entered promiscuous mode [ 553.898970][ T929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.930258][T13550] veth1_macvtap: entered promiscuous mode [ 553.948817][ T5099] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 553.968123][ T5099] Bluetooth: hci0: Injecting HCI hardware error event [ 553.980018][T12114] Bluetooth: hci0: hardware error 0x00 [ 554.016110][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.022161][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 554.032998][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.043455][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.054273][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.064327][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.079903][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.094182][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.105887][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.129109][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.136631][ T929] dw2102: command 0x0e transfer failed. [ 554.146201][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.146225][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.170439][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.175397][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.239616][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.252714][ T5140] hid (null): unknown global tag 0xd [ 554.267232][ T25] gspca_sunplus: reg_w_riv err -110 [ 554.274894][ T25] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 554.284073][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 554.294223][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.302215][ T929] dw2102: command 0x0e transfer failed. [ 554.321798][ T5140] hid-generic 0003:0158:0100.0037: unknown main item tag 0x1 [ 554.354536][ T5140] hid-generic 0003:0158:0100.0037: unexpected long global item [ 554.356720][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.400815][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.406140][ T5140] hid-generic 0003:0158:0100.0037: probe with driver hid-generic failed with error -22 [ 554.419340][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.453303][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.467656][ T5141] usb 4-1: USB disconnect, device number 107 [ 554.507342][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.528205][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.559421][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.595745][T13550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.624950][T13550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.651872][T13550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.665025][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 554.673359][ T929] dw2102: command 0x0e transfer failed. [ 554.693817][T13550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.708508][ T929] dvb-usb: bulk message failed: -22 (3/0) [ 554.734057][ T5141] usb 5-1: USB disconnect, device number 72 [ 554.756066][ T929] dw2102: command 0x0e transfer failed. [ 554.790392][ T929] dvb-usb: bulk message failed: -22 (1/0) [ 554.836721][ T929] dw2102: command 0x51 transfer failed. [ 555.014937][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.041485][ T929] DVB: Unable to find symbol ds3000_attach() [ 555.042188][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.064466][ T929] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 555.076100][ T5140] usb 1-1: USB disconnect, device number 78 [ 555.087448][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.101240][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.207777][T13810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.242206][T13810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.274842][ T929] rc_core: IR keymap rc-su3000 not found [ 555.290754][ T929] Registered IR keymap rc-empty [ 555.307675][ T929] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 555.337507][ T929] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input63 [ 555.362951][ T929] dvb-usb: schedule remote query interval to 150 msecs. [ 555.383243][ T929] dw2102: su3000_power_ctrl: 0, initialized 1 [ 555.394413][ T929] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 555.423810][ T929] usb 3-1: USB disconnect, device number 112 [ 555.495190][ T5144] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 555.527267][T13822] sctp: [Deprecated]: syz.1.1746 (pid 13822) Use of int in max_burst socket option deprecated. [ 555.527267][T13822] Use struct sctp_assoc_value instead [ 555.551502][ T929] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 555.717120][ T5144] usb 5-1: Using ep0 maxpacket: 32 [ 555.726236][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.740240][ T5144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.751566][ T5144] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 555.764453][ T5144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.804433][ T5144] usb 5-1: config 0 descriptor?? [ 555.924843][ T929] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 555.954963][ T5158] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 556.024985][T12114] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 556.036275][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.045172][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.116688][ T929] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 556.128257][ T929] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 556.162663][ T929] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 556.178418][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.185473][ T5158] usb 2-1: Using ep0 maxpacket: 32 [ 556.211032][ T5158] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 556.276011][ T5144] hid (null): global environment stack underflow [ 556.283111][ T5158] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 556.302958][ T5144] wacom 0003:056A:0314.0038: global environment stack underflow [ 556.304725][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.340442][ T5158] usb 2-1: config 0 descriptor?? [ 556.350825][ T5158] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 556.375435][ T5144] wacom 0003:056A:0314.0038: item 0 0 1 11 parsing failed [ 556.397149][ T5144] wacom 0003:056A:0314.0038: parse failed [ 556.407609][ T5144] wacom 0003:056A:0314.0038: probe with driver wacom failed with error -22 [ 556.562421][T13812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.590532][T13812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.604945][ T45] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 556.617186][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 556.630731][ T5158] usb 5-1: USB disconnect, device number 73 [ 556.641416][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.660602][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.814821][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 556.823216][ T45] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 556.831947][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.842775][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.860965][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.862979][ T9] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 556.871613][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.897533][ T9] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 556.908585][ T9] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 556.919657][ T9] usb 4-1: config 0 has no interface number 0 [ 556.936377][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 556.946771][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.963226][ T9] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 556.987918][ T9] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 557.016021][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 557.029555][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.038997][ T9] usb 4-1: Product: syz [ 557.043687][ T929] usb 3-1: string descriptor 0 read error: -71 [ 557.066335][ T929] usb 3-1: USB disconnect, device number 113 [ 557.072592][ T9] usb 4-1: Manufacturer: syz [ 557.092898][ T9] usb 4-1: SerialNumber: syz [ 557.108093][ T9] usb 4-1: config 0 descriptor?? [ 557.116127][ T9] cdc_ether 4-1:0.185: skipping garbage [ 557.121823][ T9] cdc_ether 4-1:0.185: skipping garbage [ 557.127725][ T9] cdc_ether 4-1:0.185: skipping garbage [ 557.133814][ T9] usb 4-1: bad CDC descriptors [ 557.148682][ T9] usb 4-1: unsupported MDLM descriptors [ 557.195105][ T45] usb 1-1: usb_control_msg returned -32 [ 557.206602][ T45] usbtmc 1-1:16.0: can't read capabilities [ 557.366896][T13826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1798'. [ 557.406404][ T929] usb 4-1: USB disconnect, device number 108 [ 557.554899][ T45] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 557.794908][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 557.810817][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 557.833986][ T45] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 557.853678][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.874554][ T45] usb 5-1: config 0 descriptor?? [ 557.901155][ T45] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 558.352143][ T929] usb 2-1: USB disconnect, device number 86 [ 558.549012][T13853] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1806'. [ 558.734798][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 558.844880][ T5140] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 558.934891][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 558.951287][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.973122][T13863] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 558.977729][ T9] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 559.004950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.013150][ T9] usb 3-1: Product: syz [ 559.018550][ T9] usb 3-1: Manufacturer: syz [ 559.027031][ T9] usb 3-1: SerialNumber: syz [ 559.039509][ T9] usb 3-1: config 0 descriptor?? [ 559.044752][ T5140] usb 4-1: Using ep0 maxpacket: 16 [ 559.056011][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 559.069739][ T9] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 559.077859][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 559.087528][ T5140] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 559.097585][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 559.103966][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.128776][ T5140] usb 4-1: config 0 descriptor?? [ 559.137049][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 559.166712][ T9] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 559.174867][ T9] usb 3-1: media controller created [ 559.183689][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.191147][ T9] dw2102: i2c transfer failed. [ 559.197177][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.206233][ T9] dw2102: i2c transfer failed. [ 559.211603][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.220180][ T9] dw2102: i2c transfer failed. [ 559.228189][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.234210][ T9] dw2102: i2c transfer failed. [ 559.275318][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.281487][ T9] dw2102: i2c transfer failed. [ 559.299550][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 559.309089][ T9] dw2102: i2c transfer failed. [ 559.317690][ T9] dvb-usb: MAC address: 02:02:02:02:02:02 [ 559.359387][ T5144] usb 1-1: USB disconnect, device number 79 [ 559.489278][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.572167][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.582095][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 559.593971][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.619854][ T9] dw2102: command 0x0e transfer failed. [ 559.653186][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 559.669377][ T9] dw2102: command 0x0e transfer failed. [ 559.851103][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1807'. [ 560.005658][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 560.025101][ T9] dw2102: command 0x0e transfer failed. [ 560.030734][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 560.054207][ T9] dw2102: command 0x0e transfer failed. [ 560.062809][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 560.070761][ T9] dw2102: command 0x51 transfer failed. [ 560.135495][ T929] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 560.147113][ T9] DVB: Unable to find symbol ds3000_attach() [ 560.158489][ T9] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 560.315270][ T9] rc_core: IR keymap rc-su3000 not found [ 560.321381][ T9] Registered IR keymap rc-empty [ 560.338247][ T9] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 560.349445][ T929] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 560.358283][ T929] usb 2-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 560.370658][ T9] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input65 [ 560.383332][ T929] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 560.401689][ T929] usb 2-1: config 0 has no interface number 0 [ 560.408301][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 560.422286][ T9] dw2102: su3000_power_ctrl: 0, initialized 1 [ 560.429387][ T9] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 560.434794][ T5141] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 560.438196][ T929] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 560.463522][ T9] usb 3-1: USB disconnect, device number 114 [ 560.470587][ T929] usb 2-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 560.497483][T13855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.524310][T13855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.532303][ T929] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 560.550517][ T929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.573052][ T929] usb 2-1: Product: syz [ 560.573710][T13855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.594628][ T929] usb 2-1: Manufacturer: syz [ 560.597975][T13855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.601788][ T9] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 560.618180][ T929] usb 2-1: SerialNumber: syz [ 560.625481][ T929] usb 2-1: config 0 descriptor?? [ 560.633851][ T5140] hid (null): unknown global tag 0xd [ 560.645578][ T929] cdc_ether 2-1:0.185: skipping garbage [ 560.645817][ T5141] usb 1-1: Using ep0 maxpacket: 8 [ 560.658624][ T929] cdc_ether 2-1:0.185: skipping garbage [ 560.681094][ T5140] hid-generic 0003:0158:0100.0039: unknown main item tag 0x1 [ 560.696572][ T929] cdc_ether 2-1:0.185: skipping garbage [ 560.704625][ T5140] hid-generic 0003:0158:0100.0039: unexpected long global item [ 560.717708][ T929] usb 2-1: bad CDC descriptors [ 560.723005][ T929] usb 2-1: unsupported MDLM descriptors [ 560.739447][ T5140] hid-generic 0003:0158:0100.0039: probe with driver hid-generic failed with error -22 [ 560.771771][ T5141] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 560.790509][ T45] usb 5-1: USB disconnect, device number 74 [ 560.813203][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.852679][ T5142] usb 4-1: USB disconnect, device number 109 [ 560.869099][ T5141] usb 1-1: Product: syz [ 560.886983][ T5141] usb 1-1: Manufacturer: syz [ 560.893972][ T5141] usb 1-1: SerialNumber: syz [ 560.903400][ T5141] usb 1-1: config 0 descriptor?? [ 561.009402][T13874] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1813'. [ 561.025048][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 561.114121][ T5142] usb 2-1: USB disconnect, device number 87 [ 561.234858][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 561.250342][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 561.261096][T13895] binder: BINDER_SET_CONTEXT_MGR already set [ 561.264137][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 561.284037][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 561.302359][T13895] binder: 13894:13895 ioctl 4018620d 20000040 returned -16 [ 561.303102][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 561.360693][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 561.388675][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 561.405749][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.514284][T13900] random: crng reseeded on system resumption [ 562.025820][ T5141] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 562.072391][ T5141] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 562.129818][ T9] usb 3-1: usb_control_msg returned -71 [ 562.154515][ T9] usbtmc 3-1:16.0: can't read capabilities [ 562.188573][ T9] usb 3-1: USB disconnect, device number 115 [ 562.385007][ T784] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 562.586734][ T784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 562.617106][ T784] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 562.628263][ T784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.644276][ T784] usb 2-1: config 0 descriptor?? [ 562.897589][ T784] ath6kl: Failed to submit usb control message: -71 [ 562.904258][ T784] ath6kl: unable to send the bmi data to the device: -71 [ 563.034545][ T784] ath6kl: Unable to send get target info: -71 [ 563.047275][ T9] usb 1-1: USB disconnect, device number 80 [ 563.056354][ T784] ath6kl: Failed to init ath6kl core: -71 [ 563.086809][ T784] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 563.136833][ T784] usb 2-1: USB disconnect, device number 88 [ 563.157744][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'. [ 563.228585][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235180][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.564775][ T45] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 563.635737][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 563.754905][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 563.761695][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.776950][ T45] usb 4-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 563.786201][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.794258][ T45] usb 4-1: Product: syz [ 563.798623][ T5140] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 563.806773][ T45] usb 4-1: Manufacturer: syz [ 563.814941][ T45] usb 4-1: SerialNumber: syz [ 563.825509][ T45] usb 4-1: config 0 descriptor?? [ 563.841631][ T45] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 563.849194][ T45] dw2102: su3000_power_ctrl: 1, initialized 0 [ 563.857388][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.860647][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 563.881562][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 563.884809][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 563.894104][ T45] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 563.911900][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 563.912836][ T45] usb 4-1: media controller created [ 563.929103][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 563.937217][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 563.937239][ T45] dw2102: i2c transfer failed. [ 563.948753][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 563.955251][ T45] dw2102: i2c transfer failed. [ 563.957301][ T9] usb 1-1: SerialNumber: syz [ 563.960942][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 563.972608][ T45] dw2102: i2c transfer failed. [ 563.977680][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 563.983613][ T45] dw2102: i2c transfer failed. [ 563.989394][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 564.004717][ T45] dw2102: i2c transfer failed. [ 564.009700][ T45] dvb-usb: bulk message failed: -22 (6/0) [ 564.012358][ T5140] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 564.015763][ T45] dw2102: i2c transfer failed. [ 564.031070][ T5140] usb 2-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 564.038531][ T45] dvb-usb: MAC address: 02:02:02:02:02:02 [ 564.041713][ T5140] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 564.083990][ T5140] usb 2-1: config 0 has no interface number 0 [ 564.099728][ T5140] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 564.102650][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 564.116235][ T5140] usb 2-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 564.144842][ T5140] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 564.164455][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.181862][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 564.183516][ T45] dw2102: command 0x0e transfer failed. [ 564.183533][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 564.183550][ T45] dw2102: command 0x0e transfer failed. [ 564.189400][ T5140] usb 2-1: Product: syz [ 564.212596][ T5140] usb 2-1: Manufacturer: syz [ 564.217387][ T5140] usb 2-1: SerialNumber: syz [ 564.257542][ T5140] usb 2-1: config 0 descriptor?? [ 564.273965][ T5140] cdc_ether 2-1:0.185: skipping garbage [ 564.289276][ T5140] cdc_ether 2-1:0.185: skipping garbage [ 564.297661][ T5140] cdc_ether 2-1:0.185: skipping garbage [ 564.305732][ T5140] usb 2-1: bad CDC descriptors [ 564.312297][ T5140] usb 2-1: unsupported MDLM descriptors [ 564.321208][T13935] netlink: 'syz.0.1829': attribute type 9 has an invalid length. [ 564.334450][T13935] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1829'. [ 564.494474][T13942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1832'. [ 564.503672][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 564.514927][ T45] dw2102: command 0x0e transfer failed. [ 564.518037][ T9] usb 1-1: 0:2 : does not exist [ 564.525391][ T45] dvb-usb: bulk message failed: -22 (3/0) [ 564.525411][ T45] dw2102: command 0x0e transfer failed. [ 564.525422][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 564.525436][ T45] dw2102: command 0x51 transfer failed. [ 564.555245][T11117] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 564.585137][ T9] usb 1-1: USB disconnect, device number 81 [ 564.605490][ T45] DVB: Unable to find symbol ds3000_attach() [ 564.611520][ T45] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 564.631948][ T784] usb 2-1: USB disconnect, device number 89 [ 564.704800][ T45] rc_core: IR keymap rc-su3000 not found [ 564.710487][ T45] Registered IR keymap rc-empty [ 564.718361][ T45] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 564.729539][ T45] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input66 [ 564.745079][T11117] usb 3-1: Using ep0 maxpacket: 8 [ 564.752984][ T45] dvb-usb: schedule remote query interval to 150 msecs. [ 564.756401][T11117] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.769698][ T45] dw2102: su3000_power_ctrl: 0, initialized 1 [ 564.769720][ T45] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 564.778844][ T45] usb 4-1: USB disconnect, device number 110 [ 564.791458][T11117] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 564.825838][T11117] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 564.826340][T13084] udevd[13084]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.861202][T11117] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 564.871871][T11117] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.886651][T11117] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 564.896133][T11117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.952975][ T45] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 565.129369][T11117] usb 3-1: usb_control_msg returned -71 [ 565.135918][T11117] usbtmc 3-1:16.0: can't read capabilities [ 565.165744][T11117] usb 3-1: USB disconnect, device number 116 [ 565.194059][T13964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.519048][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 565.814962][T11117] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 566.005780][T11117] usb 4-1: Using ep0 maxpacket: 32 [ 566.028975][T11117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 566.058386][T11117] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 566.075213][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 566.094460][T11117] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 566.105488][T11117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.126185][T11117] usb 4-1: Product: syz [ 566.130390][T11117] usb 4-1: Manufacturer: syz [ 566.147740][T11117] usb 4-1: SerialNumber: syz [ 566.156104][T11117] usb 4-1: config 0 descriptor?? [ 566.259240][T11117] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 566.306567][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.326350][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.348601][T12475] udevd[12475]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.366563][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 566.393574][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 566.429375][ T9] usb 3-1: SerialNumber: syz [ 566.540739][ T45] usb 4-1: USB disconnect, device number 111 [ 566.575190][ T5141] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 566.624892][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 566.638415][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 566.648750][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 566.659428][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 566.667471][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 566.677407][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 566.737599][T13992] netlink: 'syz.2.1851': attribute type 9 has an invalid length. [ 566.768120][T13992] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1851'. [ 566.784747][ T5141] usb 1-1: Using ep0 maxpacket: 16 [ 566.798024][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 566.822762][ T5141] usb 1-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 566.832375][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.840885][ T5141] usb 1-1: Product: syz [ 566.845531][ T5141] usb 1-1: Manufacturer: syz [ 566.850225][ T5141] usb 1-1: SerialNumber: syz [ 566.858404][ T5141] usb 1-1: config 0 descriptor?? [ 566.870435][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.886120][ T5141] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 566.893267][ T5141] dw2102: su3000_power_ctrl: 1, initialized 0 [ 566.911349][ T5141] dvb-usb: bulk message failed: -22 (2/0) [ 566.943909][ T5141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.967359][ T5141] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 566.980630][ T5141] usb 1-1: media controller created [ 566.991153][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.006239][ T5141] dw2102: i2c transfer failed. [ 567.011094][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.024501][ T5141] dw2102: i2c transfer failed. [ 567.031693][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.038713][ T5141] dw2102: i2c transfer failed. [ 567.040311][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.043588][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.067789][ T5141] dw2102: i2c transfer failed. [ 567.072599][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.080637][ T5141] dw2102: i2c transfer failed. [ 567.098532][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 567.124424][ T5141] dw2102: i2c transfer failed. [ 567.172003][ T5141] dvb-usb: MAC address: 02:02:02:02:02:02 [ 567.205503][ T9] usb 3-1: 0:2 : does not exist [ 567.232168][ T9] usb 3-1: USB disconnect, device number 117 [ 567.253683][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.270421][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.359584][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 567.389362][ T5141] dw2102: command 0x0e transfer failed. [ 567.406103][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 567.417516][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.434858][ T5141] dw2102: command 0x0e transfer failed. [ 567.499841][T12543] udevd[12543]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.563567][T14018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1858'. [ 567.583267][T14005] chnl_net:caif_netlink_parms(): no params data found [ 567.601990][ T29] audit: type=1326 audit(1719726185.664:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.631849][ T29] audit: type=1326 audit(1719726185.664:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.654528][ T29] audit: type=1326 audit(1719726185.664:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.660534][ T929] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 567.676808][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.676893][ T29] audit: type=1326 audit(1719726185.664:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.676935][ T29] audit: type=1326 audit(1719726185.664:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.676975][ T29] audit: type=1326 audit(1719726185.664:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 567.754977][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 567.773885][T14018] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1858'. [ 567.783422][T14018] bridge_slave_1: left allmulticast mode [ 567.789650][T14018] bridge_slave_1: left promiscuous mode [ 567.796188][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.797629][ T5141] dw2102: command 0x0e transfer failed. [ 567.832036][T14018] bridge_slave_0: left allmulticast mode [ 567.849289][T14018] bridge_slave_0: left promiscuous mode [ 567.857986][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 567.863747][ T5141] dw2102: command 0x0e transfer failed. [ 567.872735][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.883618][ T5141] dvb-usb: bulk message failed: -22 (1/0) [ 567.922975][ T5141] dw2102: command 0x51 transfer failed. [ 567.956636][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 567.969055][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 567.978634][ T929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 567.991594][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.999105][ T5141] DVB: Unable to find symbol ds3000_attach() [ 568.005379][ T929] usb 4-1: config 0 descriptor?? [ 568.010975][ T5141] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 568.066252][ T29] audit: type=1326 audit(1719726186.134:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 568.106564][ T29] audit: type=1326 audit(1719726186.134:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14017 comm="syz.1.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa607375b99 code=0x7ffc0000 [ 568.136234][ T5141] rc_core: IR keymap rc-su3000 not found [ 568.144933][ T5145] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 568.156193][ T5141] Registered IR keymap rc-empty [ 568.171349][ T5141] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 568.187498][ T5141] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input67 [ 568.199984][ T5141] dvb-usb: schedule remote query interval to 150 msecs. [ 568.212070][ T5141] dw2102: su3000_power_ctrl: 0, initialized 1 [ 568.220724][ T5141] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 568.231353][ T5141] usb 1-1: USB disconnect, device number 82 [ 568.295689][T14032] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1861'. [ 568.326069][ T5141] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 568.341135][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.360389][ T5145] usb 3-1: Using ep0 maxpacket: 8 [ 568.393232][ T5145] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.404539][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.421346][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.442569][T14005] bridge_slave_0: entered allmulticast mode [ 568.474458][ T5145] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 568.476293][T14005] bridge_slave_0: entered promiscuous mode [ 568.495012][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 568.507603][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.528578][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.537300][ T5145] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.550171][T14005] bridge_slave_1: entered allmulticast mode [ 568.551955][ T929] ath6kl: Failed to submit usb control message: -71 [ 568.566107][T14005] bridge_slave_1: entered promiscuous mode [ 568.577891][ T929] ath6kl: unable to send the bmi data to the device: -71 [ 568.595617][ T5145] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 568.620027][ T929] ath6kl: Unable to send get target info: -71 [ 568.629166][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.648657][ T929] ath6kl: Failed to init ath6kl core: -71 [ 568.665409][ T12] bridge_slave_1: left allmulticast mode [ 568.677553][ T929] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 568.690735][ T12] bridge_slave_1: left promiscuous mode [ 568.717136][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.735836][ T929] usb 4-1: USB disconnect, device number 112 [ 568.744968][T12114] Bluetooth: hci3: command tx timeout [ 568.785153][ T12] bridge_slave_0: left allmulticast mode [ 568.790872][ T12] bridge_slave_0: left promiscuous mode [ 568.876863][ T5145] usb 3-1: usb_control_msg returned -71 [ 568.892859][ T5145] usbtmc 3-1:16.0: can't read capabilities [ 568.899803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.927694][ T5145] usb 3-1: USB disconnect, device number 118 [ 569.225226][T11117] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 569.434809][T11117] usb 1-1: Using ep0 maxpacket: 8 [ 569.447373][T11117] usb 1-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 569.469898][T11117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 569.489460][T11117] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.513423][T11117] usb 1-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 569.528630][T11117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.550559][T11117] usb 1-1: Product: syz [ 569.556006][T11117] usb 1-1: Manufacturer: syz [ 569.560809][T11117] usb 1-1: SerialNumber: syz [ 569.576949][T11117] usb 1-1: config 0 descriptor?? [ 569.696410][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.715286][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.727082][ T12] bond0 (unregistering): Released all slaves [ 569.751387][T14041] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1864'. [ 569.786623][T11117] usb 1-1: USB disconnect, device number 83 [ 569.834081][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.857686][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.980419][T14005] team0: Port device team_slave_0 added [ 570.006437][T14005] team0: Port device team_slave_1 added [ 570.136446][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.154357][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.180393][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.254821][ T5140] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 570.260403][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.327622][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.363729][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.402386][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.435200][ T5140] usb 2-1: device descriptor read/64, error -71 [ 570.555733][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1871'. [ 570.725342][ T5140] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 570.728949][T14005] hsr_slave_0: entered promiscuous mode [ 570.783746][T14005] hsr_slave_1: entered promiscuous mode [ 570.824863][T12114] Bluetooth: hci3: command tx timeout [ 570.838063][T14005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.875012][T14005] Cannot create hsr debugfs directory [ 570.911483][ T5140] usb 2-1: device descriptor read/64, error -71 [ 570.983801][ T12] hsr_slave_0: left promiscuous mode [ 571.020588][ T12] hsr_slave_1: left promiscuous mode [ 571.026530][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 571.036439][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.044810][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.055521][ T5140] usb usb2-port1: attempt power cycle [ 571.070689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.091464][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.114792][ T5141] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 571.176548][ T12] veth1_macvtap: left promiscuous mode [ 571.182209][ T12] veth0_macvtap: left promiscuous mode [ 571.191010][ T12] veth1_vlan: left promiscuous mode [ 571.198334][ T12] veth0_vlan: left promiscuous mode [ 571.308956][ T5141] usb 3-1: Using ep0 maxpacket: 16 [ 571.334357][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.357480][ T5141] usb 3-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 571.366824][ T5141] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.376277][ T5141] usb 3-1: Product: syz [ 571.380593][ T5141] usb 3-1: Manufacturer: syz [ 571.390727][ T5141] usb 3-1: SerialNumber: syz [ 571.406171][ T5141] usb 3-1: config 0 descriptor?? [ 571.419546][ T5141] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 571.427062][ T5141] dw2102: su3000_power_ctrl: 1, initialized 0 [ 571.433210][ T5141] dvb-usb: bulk message failed: -22 (2/0) [ 571.446736][ T5145] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 571.447436][ T5141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 571.472026][ T5141] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 571.479741][ T5141] usb 3-1: media controller created [ 571.485206][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.489635][ T5140] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 571.490928][ T5141] dw2102: i2c transfer failed. [ 571.490955][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.510999][ T5141] dw2102: i2c transfer failed. [ 571.515866][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.521608][ T5141] dw2102: i2c transfer failed. [ 571.526723][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.532485][ T5141] dw2102: i2c transfer failed. [ 571.537973][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.543182][T11117] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 571.543751][ T5141] dw2102: i2c transfer failed. [ 571.543778][ T5141] dvb-usb: bulk message failed: -22 (6/0) [ 571.543795][ T5141] dw2102: i2c transfer failed. [ 571.543815][ T5141] dvb-usb: MAC address: 02:02:02:02:02:02 [ 571.559018][ T5140] usb 2-1: device descriptor read/8, error -71 [ 571.582845][ T5141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.605090][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 571.610876][ T5141] dw2102: command 0x0e transfer failed. [ 571.619669][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 571.636156][ T5141] dw2102: command 0x0e transfer failed. [ 571.676039][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 571.683838][ T5145] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 571.698249][ T5145] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 571.709641][ T5145] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 571.723039][ T5145] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 571.733831][ T5145] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.748468][ T5145] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.759600][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.780354][T11117] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 571.793556][T11117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.805953][T11117] usb 4-1: config 0 descriptor?? [ 571.864942][ T5140] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 571.918914][ T5140] usb 2-1: device descriptor read/8, error -71 [ 571.974965][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 571.980733][ T5141] dw2102: command 0x0e transfer failed. [ 571.986408][ T5141] dvb-usb: bulk message failed: -22 (3/0) [ 571.992148][ T5141] dw2102: command 0x0e transfer failed. [ 571.999413][ T5141] dvb-usb: bulk message failed: -22 (1/0) [ 572.009157][ T5141] dw2102: command 0x51 transfer failed. [ 572.025289][ T5145] usb 1-1: usb_control_msg returned -71 [ 572.033893][ T5145] usbtmc 1-1:16.0: can't read capabilities [ 572.043368][ T12] team0 (unregistering): Port device team_slave_1 removed [ 572.052157][ T5140] usb usb2-port1: unable to enumerate USB device [ 572.060213][ T5141] DVB: Unable to find symbol ds3000_attach() [ 572.071058][ T5145] usb 1-1: USB disconnect, device number 84 [ 572.077677][ T5141] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 572.147829][ T12] team0 (unregistering): Port device team_slave_0 removed [ 572.194833][ T5141] rc_core: IR keymap rc-su3000 not found [ 572.201265][ T5141] Registered IR keymap rc-empty [ 572.211024][ T5141] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 572.222824][ T5141] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input68 [ 572.244217][ T5141] dvb-usb: schedule remote query interval to 150 msecs. [ 572.253679][ T5141] dw2102: su3000_power_ctrl: 0, initialized 1 [ 572.264306][ T5141] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 572.275706][ T5141] usb 3-1: USB disconnect, device number 119 [ 572.376532][ T5141] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 572.762633][T14111] geneve1: entered allmulticast mode [ 572.817756][T14111] team0: Port device geneve1 added [ 572.905119][T12114] Bluetooth: hci3: command tx timeout [ 573.184935][ T5145] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 573.261085][T11117] pegasus 4-1:0.0: can't reset MAC [ 573.279645][T11117] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 573.294877][ T929] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 573.314857][T11117] usb 4-1: USB disconnect, device number 113 [ 573.332121][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1884'. [ 573.378517][ T5145] usb 3-1: too many configurations: 248, using maximum allowed: 8 [ 573.423126][ T5145] usb 3-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 573.446435][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 573.471543][ T5145] usb 3-1: Product: syz [ 573.483430][ T5145] usb 3-1: Manufacturer: syz [ 573.490989][ T5145] usb 3-1: SerialNumber: syz [ 573.500099][ T929] usb 1-1: device descriptor read/64, error -71 [ 573.524521][ T5145] usb 3-1: config 0 descriptor?? [ 573.542812][ T5145] cdc_acm 3-1:0.0: Zero length descriptor references [ 573.561244][ T5145] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 573.785230][ T929] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 573.890586][T14005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.915034][T14005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.931264][T14005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 573.942724][T14005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.974949][ T929] usb 1-1: device descriptor read/64, error -71 [ 574.013117][T14144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.060105][T14144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.096001][ T784] usb 3-1: USB disconnect, device number 120 [ 574.119307][ T929] usb usb1-port1: attempt power cycle [ 574.191493][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.219102][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.232756][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.239962][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.262966][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.270149][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.411144][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.435210][ T5141] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 574.498213][T14005] veth0_vlan: entered promiscuous mode [ 574.521294][T14005] veth1_vlan: entered promiscuous mode [ 574.545779][ T929] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 574.587844][ T929] usb 1-1: device descriptor read/8, error -71 [ 574.604402][T14005] veth0_macvtap: entered promiscuous mode [ 574.623806][T14005] veth1_macvtap: entered promiscuous mode [ 574.624922][ T5141] usb 4-1: Using ep0 maxpacket: 32 [ 574.656747][ T5141] usb 4-1: config 0 has an invalid interface number: 206 but max is 1 [ 574.667232][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.683500][ T5141] usb 4-1: config 0 has no interface number 1 [ 574.704773][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.710330][ T5141] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 574.735543][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.751813][ T5141] usb 4-1: config 0 interface 206 has no altsetting 0 [ 574.772497][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.774197][ T5141] usb 4-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 574.798536][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.802930][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.819748][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.826793][ T5141] usb 4-1: Product: syz [ 574.830718][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.833897][ T5141] usb 4-1: Manufacturer: syz [ 574.844781][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.866662][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.879116][ T5141] usb 4-1: SerialNumber: syz [ 574.885823][ T929] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 574.893605][ T5141] usb 4-1: config 0 descriptor?? [ 574.929809][ T929] usb 1-1: device descriptor read/8, error -71 [ 574.933644][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.946876][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.957874][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.969578][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.981344][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.998165][T12114] Bluetooth: hci3: command tx timeout [ 575.003906][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.014426][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.026181][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.038159][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.054730][T14005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.063683][T14005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.073074][ T5145] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 575.081630][ T929] usb usb1-port1: unable to enumerate USB device [ 575.091886][T14005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.100761][T14005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.211626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.228974][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.268697][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.277141][ T5145] usb 3-1: Using ep0 maxpacket: 8 [ 575.282804][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.293161][ T5145] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 575.311573][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 575.323615][ T5145] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 575.337328][ T5145] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 575.348056][ T5145] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 575.372736][ T5145] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 575.394024][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.631049][T14188] geneve1: entered allmulticast mode [ 575.653567][ T5145] usb 3-1: usb_control_msg returned -71 [ 575.675147][ T5145] usbtmc 3-1:16.0: can't read capabilities [ 575.677572][T14188] team0: Port device geneve1 added [ 575.730559][ T5145] usb 3-1: USB disconnect, device number 121 [ 575.911019][T14202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.477446][T14224] sctp: [Deprecated]: syz.4.1897 (pid 14224) Use of int in max_burst socket option deprecated. [ 576.477446][T14224] Use struct sctp_assoc_value instead [ 576.729656][T14242] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 576.800402][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'. [ 576.946247][ T784] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 577.138791][ T5141] usb 4-1: USB disconnect, device number 114 [ 577.159867][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 577.197134][ T784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 577.220773][ T784] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 577.234177][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.253930][ T784] usb 5-1: config 0 descriptor?? [ 577.271459][ T784] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 577.686287][T14259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.714771][ T5141] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 577.774881][ T784] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 577.924963][ T5141] usb 4-1: Using ep0 maxpacket: 8 [ 577.948938][ T5141] usb 4-1: config 0 has an invalid interface number: 63 but max is 0 [ 577.957322][ T784] usb 1-1: Using ep0 maxpacket: 8 [ 577.962456][ T5141] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.972886][ T5141] usb 4-1: config 0 has no interface number 0 [ 577.980048][ T5141] usb 4-1: config 0 interface 63 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 577.994977][ T784] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.005539][ T784] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.016500][ T784] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 578.028863][ T784] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 578.039252][ T5141] usb 4-1: New USB device found, idVendor=19d2, idProduct=1271, bcdDevice= 2.34 [ 578.049232][ T784] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.062383][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.072523][ T5141] usb 4-1: Product: syz [ 578.076799][ T784] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 578.086045][ T5141] usb 4-1: Manufacturer: syz [ 578.090663][ T5141] usb 4-1: SerialNumber: syz [ 578.096168][ T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.108400][ T5141] usb 4-1: config 0 descriptor?? [ 578.119337][ T5141] option 4-1:0.63: GSM modem (1-port) converter detected [ 578.214766][ T5158] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 578.322494][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.331066][ T784] usb 1-1: usb_control_msg returned -71 [ 578.341434][ T784] usbtmc 1-1:16.0: can't read capabilities [ 578.351631][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.372114][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.382216][ T784] usb 1-1: USB disconnect, device number 89 [ 578.393802][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.394959][ T5158] usb 3-1: Using ep0 maxpacket: 16 [ 578.407758][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.433798][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.451662][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 578.471834][ T5158] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 578.472877][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.487097][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.519145][ T5158] usb 3-1: config 0 descriptor?? [ 578.520594][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.547645][T14254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.564445][T14254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.609354][ T45] usb 4-1: USB disconnect, device number 115 [ 578.618352][ T45] option 4-1:0.63: device disconnected [ 579.079691][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1910'. [ 579.277714][ T784] usb 5-1: USB disconnect, device number 75 [ 579.436839][T14278] tipc: Started in network mode [ 579.441731][T14278] tipc: Node identity f0, cluster identity 4711 [ 579.494865][T14278] tipc: Node number set to 240 [ 579.722092][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.742885][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.752286][T14291] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1919'. [ 579.780132][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.793599][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.817557][ T5158] hid (null): unknown global tag 0xd [ 579.840503][ T5158] hid-generic 0003:0158:0100.003A: unknown main item tag 0x1 [ 579.848951][ T5158] hid-generic 0003:0158:0100.003A: unexpected long global item [ 579.859152][ T5158] hid-generic 0003:0158:0100.003A: probe with driver hid-generic failed with error -22 [ 579.873097][ T784] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 579.984741][ T45] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 580.017427][T11117] usb 3-1: USB disconnect, device number 122 [ 580.034759][ T5141] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 580.067044][ T784] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 580.076181][ T784] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 580.087277][ T784] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 580.098507][ T784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 580.110517][ T784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 580.123904][ T784] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 580.133179][ T784] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 580.136601][ T5145] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 580.141377][ T784] usb 2-1: Product: syz [ 580.153380][ T784] usb 2-1: Manufacturer: syz [ 580.163034][ T784] cdc_wdm 2-1:1.0: skipping garbage [ 580.168448][ T784] cdc_wdm 2-1:1.0: skipping garbage [ 580.175073][ T784] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 580.181173][ T784] cdc_wdm 2-1:1.0: Unknown control protocol [ 580.188020][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 580.198409][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 580.207219][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 580.218946][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 580.230550][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 580.243002][ T5141] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 580.251536][ T5141] usb 4-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 580.261853][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 580.270491][ T5141] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 580.280891][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 580.292336][ T5141] usb 4-1: config 0 has no interface number 0 [ 580.299951][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 580.311263][ T5141] usb 4-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 580.322502][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 580.334036][ T5141] usb 4-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 580.337428][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 580.348667][ T45] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 580.360770][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 580.364284][ T5145] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.373781][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 580.387048][ T5145] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.404831][ T45] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 580.417250][ T5141] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 580.427243][ T5141] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.429858][ T5145] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 580.439065][ T784] usb 2-1: USB disconnect, device number 94 [ 580.447051][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 580.457273][ T45] usb 1-1: string descriptor 0 read error: -22 [ 580.459617][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 580.469691][ T5141] usb 4-1: Product: syz [ 580.471562][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 580.485342][ T45] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 580.490722][ T5145] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 580.494497][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.508493][ T5145] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.523365][ T5141] usb 4-1: Manufacturer: syz [ 580.532425][ T5141] usb 4-1: SerialNumber: syz [ 580.539484][ T5145] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 580.542564][ T5141] usb 4-1: config 0 descriptor?? [ 580.560349][ T45] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 580.570475][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.575166][ T5141] cdc_ether 4-1:0.185: skipping garbage [ 580.586027][ T5141] cdc_ether 4-1:0.185: skipping garbage [ 580.591696][ T5141] cdc_ether 4-1:0.185: skipping garbage [ 580.614296][ T5141] usb 4-1: bad CDC descriptors [ 580.627283][ T5141] usb 4-1: unsupported MDLM descriptors [ 580.821087][T14289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1920'. [ 580.837648][ T5145] usb 5-1: usb_control_msg returned -71 [ 580.844856][ T784] usb 1-1: USB disconnect, device number 90 [ 580.851968][ T5145] usbtmc 5-1:16.0: can't read capabilities [ 580.892130][ T5145] usb 5-1: USB disconnect, device number 76 [ 580.969369][T11117] usb 4-1: USB disconnect, device number 116 [ 581.328203][T14313] sctp: [Deprecated]: syz.2.1926 (pid 14313) Use of int in max_burst socket option deprecated. [ 581.328203][T14313] Use struct sctp_assoc_value instead [ 581.625876][T14322] netlink: 'syz.3.1930': attribute type 15 has an invalid length. [ 581.650102][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1930'. [ 581.694784][ T784] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 581.897585][ T784] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 581.925943][ T784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.946858][ T5145] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 581.952851][T14330] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1932'. [ 581.974436][ T784] usb 5-1: config 0 descriptor?? [ 582.092277][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.110309][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.164777][ T5145] usb 3-1: Using ep0 maxpacket: 32 [ 582.189688][ T5145] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 582.219708][ T5145] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 582.237184][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.297458][ T5145] usb 3-1: config 0 descriptor?? [ 582.348640][ T5145] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 583.107277][ T5145] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 583.294728][ T5145] usb 2-1: Using ep0 maxpacket: 8 [ 583.302347][ T5145] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.324359][ T5145] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 583.339301][ T5145] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 583.353295][ T5145] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 583.364483][ T5145] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.380041][ T5145] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.390450][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.425751][T11117] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 583.494836][ T5157] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 583.520780][ T784] pegasus 5-1:0.0: can't reset MAC [ 583.527731][ T784] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 583.559363][ T784] usb 5-1: USB disconnect, device number 77 [ 583.616763][T11117] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.636554][T11117] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 583.648877][T11117] usb 1-1: config 1 has no interface number 0 [ 583.656808][T11117] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.685009][ T5157] usb 4-1: Using ep0 maxpacket: 8 [ 583.698235][ T5157] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 583.708639][ T5145] usb 2-1: usb_control_msg returned -71 [ 583.714310][ T5145] usbtmc 2-1:16.0: can't read capabilities [ 583.727020][T11117] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.737176][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 583.761108][T11117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.772639][ T5145] usb 2-1: USB disconnect, device number 95 [ 583.784508][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 583.802976][T11117] usb 1-1: Product: syz [ 583.812271][T11117] usb 1-1: Manufacturer: syz [ 583.820749][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 583.836156][T11117] usb 1-1: SerialNumber: syz [ 583.857423][ T5157] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 583.869417][T11117] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing [ 583.878816][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 583.893430][T11117] cdc_ncm 1-1:1.1: bind() failure [ 583.925164][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 583.937665][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 583.958071][ T5157] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 583.967336][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 583.988151][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 584.004013][ T5157] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 584.056861][ T5157] usb 4-1: string descriptor 0 read error: -22 [ 584.063263][ T5157] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 584.077831][ T5157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.131655][ T5157] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 584.374048][ T5157] usb 4-1: USB disconnect, device number 117 [ 584.435300][ T45] usb 3-1: USB disconnect, device number 123 [ 584.676380][T11117] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 584.820665][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1948'. [ 584.895448][T11117] usb 2-1: Using ep0 maxpacket: 32 [ 584.906874][T11117] usb 2-1: config 0 has an invalid interface number: 206 but max is 1 [ 584.933719][T11117] usb 2-1: config 0 has no interface number 1 [ 584.943455][T11117] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.960359][T11117] usb 2-1: config 0 interface 206 has no altsetting 0 [ 584.972804][T11117] usb 2-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed [ 584.986329][T11117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.009309][T11117] usb 2-1: Product: syz [ 585.019881][T11117] usb 2-1: Manufacturer: syz [ 585.024615][T11117] usb 2-1: SerialNumber: syz [ 585.036864][T11117] usb 2-1: config 0 descriptor?? [ 585.533551][ T29] audit: type=1326 audit(1719726203.594:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14399 comm="syz.2.1956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc44775b99 code=0x0 [ 585.649135][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 585.755022][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 585.945922][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 585.968006][ T45] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.006814][ T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.044092][ T45] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 586.067473][ T5158] usb 1-1: USB disconnect, device number 91 [ 586.116612][ T45] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 586.138396][ T45] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.154556][ T45] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.167984][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.345322][T12114] Bluetooth: hci2: command tx timeout [ 586.403950][ T45] usb 5-1: usb_control_msg returned -71 [ 586.428544][ T45] usbtmc 5-1:16.0: can't read capabilities [ 586.460235][ T45] usb 5-1: USB disconnect, device number 78 [ 586.591730][T14411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.612919][T14411] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 586.650193][T14439] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1962'. [ 586.765258][T14411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.774150][T14411] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 587.046266][ T5157] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 587.255382][ T5157] usb 1-1: Using ep0 maxpacket: 8 [ 587.266710][ T5157] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 587.284749][ T5157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.300090][ T5157] usb 1-1: Product: syz [ 587.304295][ T5157] usb 1-1: Manufacturer: syz [ 587.313103][T11117] usb 2-1: USB disconnect, device number 96 [ 587.328565][ T5157] usb 1-1: SerialNumber: syz [ 587.342598][ T5157] usb 1-1: config 0 descriptor?? [ 587.354567][ T5157] gspca_main: sq905-2.14.0 probing 2770:9120 [ 587.401294][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 587.595041][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 587.610850][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 587.622666][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 587.642511][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 587.661046][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.674099][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 587.691603][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 587.715495][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 587.728910][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.755599][ T9] usb 5-1: config 0 descriptor?? [ 588.015877][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 588.037577][ T9] usb 5-1: USB disconnect, device number 79 [ 588.048092][ T9] usblp0: removed [ 588.295069][T14507] ptrace attach of "./syz-executor exec"[14509] was attempted by " W܍ړ|{aVr z0)DL/ke3e˔@ Fz)_4"[14507] [ 588.385513][ T5157] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 588.404927][ T5157] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 588.644950][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 588.844812][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 588.858927][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 588.877901][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 588.894754][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 588.909027][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 588.924741][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 588.947768][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 588.974277][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 588.989066][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.007172][ T9] usb 5-1: config 0 descriptor?? [ 589.236841][ T9] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 589.668047][ T9] usb 5-1: USB disconnect, device number 80 [ 589.689068][ T9] usblp0: removed [ 589.776951][T14486] dccp_close: ABORT with 32 bytes unread [ 589.790165][ T45] usb 1-1: USB disconnect, device number 92 [ 589.974829][ T5158] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 590.174828][ T5158] usb 2-1: Using ep0 maxpacket: 16 [ 590.186760][ T5158] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 590.214605][ T5158] usb 2-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2 [ 590.242787][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.251302][ T5158] usb 2-1: Product: syz [ 590.255854][ T5158] usb 2-1: Manufacturer: syz [ 590.260460][ T5158] usb 2-1: SerialNumber: syz [ 590.268623][ T5158] usb 2-1: config 0 descriptor?? [ 590.276651][ T5158] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state. [ 590.283712][ T5158] dw2102: su3000_power_ctrl: 1, initialized 0 [ 590.290057][ T5158] dvb-usb: bulk message failed: -22 (2/0) [ 590.297882][ T5158] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 590.307199][ T45] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 590.315832][ T5158] dvbdev: DVB: registering new adapter (X3M TV SPC1400HD PCI) [ 590.323306][ T5158] usb 2-1: media controller created [ 590.329558][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.336097][ T5158] dw2102: i2c transfer failed. [ 590.340903][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.352023][ T5158] dw2102: i2c transfer failed. [ 590.357046][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.362798][ T5158] dw2102: i2c transfer failed. [ 590.367671][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.373397][ T5158] dw2102: i2c transfer failed. [ 590.379448][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.385261][ T5158] dw2102: i2c transfer failed. [ 590.390070][ T5158] dvb-usb: bulk message failed: -22 (6/0) [ 590.396488][ T5158] dw2102: i2c transfer failed. [ 590.401261][ T5158] dvb-usb: MAC address: 02:02:02:02:02:02 [ 590.417966][ T5158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 590.432471][ T5158] dvb-usb: bulk message failed: -22 (3/0) [ 590.438329][ T5158] dw2102: command 0x0e transfer failed. [ 590.443891][ T5158] dvb-usb: bulk message failed: -22 (3/0) [ 590.449774][ T5158] dw2102: command 0x0e transfer failed. [ 590.494745][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 590.501262][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.511141][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.515126][ T5157] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 590.523561][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65056, setting to 1024 [ 590.542155][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 590.552358][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.565390][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.574418][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.714779][ T5157] usb 5-1: Using ep0 maxpacket: 32 [ 590.722176][ T5157] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 590.730611][ T5157] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 590.739266][ T5157] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 590.749240][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 590.759861][ T5157] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 590.769617][ T5157] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 590.775931][ T5158] dvb-usb: bulk message failed: -22 (3/0) [ 590.782609][ T5157] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 590.793534][ T5158] dw2102: command 0x0e transfer failed. [ 590.802645][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.810662][ T45] usb 1-1: usb_control_msg returned -71 [ 590.817079][ T5157] usb 5-1: config 0 descriptor?? [ 590.819622][ T5158] dvb-usb: bulk message failed: -22 (3/0) [ 590.828188][ T45] usbtmc 1-1:16.0: can't read capabilities [ 590.835523][ T5158] dw2102: command 0x0e transfer failed. [ 590.841104][ T5158] dvb-usb: bulk message failed: -22 (1/0) [ 590.851058][ T45] usb 1-1: USB disconnect, device number 93 [ 590.857380][ T5158] dw2102: command 0x51 transfer failed. [ 590.906217][ T5158] DVB: Unable to find symbol ds3000_attach() [ 590.912335][ T5158] dvb-usb: no frontend was attached by 'X3M TV SPC1400HD PCI' [ 590.985170][ T5158] rc_core: IR keymap rc-su3000 not found [ 590.990856][ T5158] Registered IR keymap rc-empty [ 591.001919][ T5158] rc rc0: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 591.012980][ T5158] input: X3M TV SPC1400HD PCI as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input70 [ 591.027842][ T5158] dvb-usb: schedule remote query interval to 150 msecs. [ 591.038574][ T5158] dw2102: su3000_power_ctrl: 0, initialized 1 [ 591.041712][ T5157] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 591.047934][ T5158] dvb-usb: X3M TV SPC1400HD PCI successfully initialized and connected. [ 591.066397][ T5157] usb 5-1: USB disconnect, device number 81 [ 591.071080][ T5158] usb 2-1: USB disconnect, device number 97 [ 591.087071][ T5157] usblp0: removed [ 591.174517][ T5158] dvb-usb: X3M TV SPC1400HD PCI successfully deinitialized and disconnected. [ 591.629789][ T5157] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 591.689522][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 591.844987][ T5157] usb 5-1: Using ep0 maxpacket: 32 [ 591.859275][ T5157] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 591.885111][ T5157] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 591.893850][ T5157] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 591.908671][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 591.926361][ T5157] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 591.937703][ T5157] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 591.954585][ T5157] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 591.968694][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.982640][ T5157] usb 5-1: config 0 descriptor?? [ 592.302638][ T5157] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 592.475138][ T45] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 592.659154][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.686486][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.688490][T14570] sctp: [Deprecated]: syz.1.1986 (pid 14570) Use of int in max_burst socket option deprecated. [ 592.688490][T14570] Use struct sctp_assoc_value instead [ 592.716934][ T45] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 592.749557][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 592.759405][ T45] usb 1-1: SerialNumber: syz [ 592.827409][ T9] usb 5-1: USB disconnect, device number 82 [ 592.835782][ T9] usblp0: removed [ 593.068864][T14560] netlink: 'syz.0.1983': attribute type 9 has an invalid length. [ 593.095941][T14560] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1983'. [ 593.344766][ T25] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 593.534789][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 593.560634][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 593.616364][ T25] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 593.630034][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.645440][ T25] usb 2-1: config 0 descriptor?? [ 593.662135][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 593.924805][ T5157] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 594.120473][ T5157] usb 5-1: config 0 has an invalid interface number: 185 but max is 0 [ 594.132876][ T5157] usb 5-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 594.161407][ T5157] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 594.172049][ T5157] usb 5-1: config 0 has no interface number 0 [ 594.178675][ T5157] usb 5-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 594.191503][ T5157] usb 5-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 594.213285][ T5157] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 594.223130][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.231768][ T5157] usb 5-1: Product: syz [ 594.237026][ T5157] usb 5-1: Manufacturer: syz [ 594.241865][ T5157] usb 5-1: SerialNumber: syz [ 594.271556][ T5157] usb 5-1: config 0 descriptor?? [ 594.284023][ T5157] cdc_ether 5-1:0.185: skipping garbage [ 594.290333][ T5157] cdc_ether 5-1:0.185: skipping garbage [ 594.297571][ T5157] cdc_ether 5-1:0.185: skipping garbage [ 594.303598][ T5157] usb 5-1: bad CDC descriptors [ 594.313415][ T5157] usb 5-1: unsupported MDLM descriptors [ 594.550477][T14577] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1987'. [ 594.603330][ T25] usb 5-1: USB disconnect, device number 83 [ 595.545119][ T5157] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 595.738062][ T5157] usb 5-1: Using ep0 maxpacket: 8 [ 595.745187][ T5157] usb 5-1: config 0 has an invalid descriptor of length 12, skipping remainder of the config [ 595.755552][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 595.765278][ T5157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 595.781524][ T5157] usb 5-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 595.790771][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.798929][ T5157] usb 5-1: Product: syz [ 595.803098][ T5157] usb 5-1: Manufacturer: syz [ 595.808753][ T5157] usb 5-1: SerialNumber: syz [ 595.815482][ T5157] usb 5-1: config 0 descriptor?? [ 596.120048][ T25] usb 5-1: USB disconnect, device number 84 [ 596.894160][T14588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 597.792944][ T45] usb 1-1: 0:2 : does not exist [ 597.830432][T12543] udevd[12543]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.667188][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.673515][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.109383][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.121128][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.905127][ T30] INFO: task kworker/1:2:784 blocked for more than 143 seconds. [ 746.912823][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 746.926980][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 746.935813][ T30] task:kworker/1:2 state:D stack:20760 pid:784 tgid:784 ppid:2 flags:0x00004000 [ 746.951271][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 746.958398][ T30] Call Trace: [ 746.961880][ T30] [ 746.964989][ T30] __schedule+0x17e8/0x4a20 [ 746.969545][ T30] ? __pfx___schedule+0x10/0x10 [ 746.974409][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 746.980441][ T30] ? __pfx_lock_release+0x10/0x10 [ 746.985764][ T30] ? kick_pool+0x1bd/0x620 [ 746.990209][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.995464][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 747.000726][ T30] ? schedule+0x90/0x320 [ 747.005384][ T30] schedule+0x14b/0x320 [ 747.009569][ T30] schedule_preempt_disabled+0x13/0x30 [ 747.015072][ T30] __mutex_lock+0x6a4/0xd70 [ 747.019580][ T30] ? __mutex_lock+0x527/0xd70 [ 747.024250][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 747.030584][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 747.035674][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.041710][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 747.048119][ T30] ? process_scheduled_works+0x945/0x1830 [ 747.053858][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 747.059985][ T30] ? process_scheduled_works+0x945/0x1830 [ 747.066001][ T30] process_scheduled_works+0xa2c/0x1830 [ 747.071592][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 747.077672][ T30] ? assign_work+0x364/0x3d0 [ 747.082368][ T30] worker_thread+0x86d/0xd50 [ 747.087061][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 747.092995][ T30] ? __kthread_parkme+0x169/0x1d0 [ 747.098110][ T30] ? __pfx_worker_thread+0x10/0x10 [ 747.103435][ T30] kthread+0x2f0/0x390 [ 747.107561][ T30] ? __pfx_worker_thread+0x10/0x10 [ 747.112697][ T30] ? __pfx_kthread+0x10/0x10 [ 747.117376][ T30] ret_from_fork+0x4b/0x80 [ 747.122064][ T30] ? __pfx_kthread+0x10/0x10 [ 747.126734][ T30] ret_from_fork_asm+0x1a/0x30 [ 747.131524][ T30] [ 747.134686][ T30] INFO: task syz.2.1956:14405 blocked for more than 143 seconds. [ 747.142433][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 747.150431][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.159487][ T30] task:syz.2.1956 state:D stack:24464 pid:14405 tgid:14399 ppid:11891 flags:0x00004006 [ 747.169929][ T30] Call Trace: [ 747.173333][ T30] [ 747.176342][ T30] __schedule+0x17e8/0x4a20 [ 747.180894][ T30] ? __pfx___schedule+0x10/0x10 [ 747.185836][ T30] ? __pfx_lock_release+0x10/0x10 [ 747.190967][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 747.196497][ T30] ? schedule+0x90/0x320 [ 747.200749][ T30] schedule+0x14b/0x320 [ 747.204995][ T30] schedule_preempt_disabled+0x13/0x30 [ 747.210467][ T30] __mutex_lock+0x6a4/0xd70 [ 747.215041][ T30] ? kobject_put+0x443/0x480 [ 747.219652][ T30] ? __mutex_lock+0x527/0xd70 [ 747.224322][ T30] ? rfkill_unregister+0xd0/0x230 [ 747.229842][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 747.235062][ T30] ? __pfx_device_del+0x10/0x10 [ 747.239939][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 747.246425][ T30] rfkill_unregister+0xd0/0x230 [ 747.251330][ T30] nfc_unregister_device+0x96/0x2a0 [ 747.261206][ T30] virtual_ncidev_close+0x59/0x90 [ 747.266420][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 747.272165][ T30] __fput+0x406/0x8b0 [ 747.276443][ T30] task_work_run+0x24f/0x310 [ 747.281060][ T30] ? __pfx_task_work_run+0x10/0x10 [ 747.286428][ T30] get_signal+0x15e6/0x1740 [ 747.290951][ T30] ? kick_process+0xef/0x160 [ 747.295859][ T30] ? task_work_add+0x2f3/0x3a0 [ 747.300825][ T30] ? __pfx_get_signal+0x10/0x10 [ 747.306030][ T30] ? __pfx_task_work_add+0x10/0x10 [ 747.311185][ T30] arch_do_signal_or_restart+0x96/0x860 [ 747.316843][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 747.323592][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 747.329776][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 747.335589][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 747.341383][ T30] do_syscall_64+0x100/0x230 [ 747.346056][ T30] ? clear_bhb_loop+0x35/0x90 [ 747.350752][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.356748][ T30] RIP: 0033:0x7fdc44775b99 [ 747.361192][ T30] RSP: 002b:00007fdc4546d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 747.369843][ T30] RAX: fffffffffffffff2 RBX: 00007fdc44904078 RCX: 00007fdc44775b99 [ 747.378146][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 747.386192][ T30] RBP: 00007fdc447f677e R08: 0000000000000000 R09: 0000000000000000 [ 747.394439][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.402693][ T30] R13: 000000000000006e R14: 00007fdc44904078 R15: 00007fdc44a2fa68 [ 747.410887][ T30] [ 747.414074][ T30] INFO: task syz.3.1959:14411 blocked for more than 143 seconds. [ 747.422017][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 747.429708][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.438451][ T30] task:syz.3.1959 state:D stack:22640 pid:14411 tgid:14407 ppid:11309 flags:0x00004006 [ 747.448939][ T30] Call Trace: [ 747.452275][ T30] [ 747.455363][ T30] __schedule+0x17e8/0x4a20 [ 747.459921][ T30] ? __pfx___schedule+0x10/0x10 [ 747.464961][ T30] ? __pfx_lock_release+0x10/0x10 [ 747.470001][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 747.477071][ T30] ? schedule+0x90/0x320 [ 747.481393][ T30] schedule+0x14b/0x320 [ 747.485727][ T30] schedule_preempt_disabled+0x13/0x30 [ 747.491201][ T30] __mutex_lock+0x6a4/0xd70 [ 747.495872][ T30] ? __mutex_lock+0x527/0xd70 [ 747.500603][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 747.505950][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 747.511095][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 747.516411][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 747.522337][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 747.528774][ T30] nfc_rfkill_set_block+0x50/0x310 [ 747.534141][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 747.539956][ T30] rfkill_set_block+0x1f1/0x440 [ 747.548193][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.554757][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.562414][ T30] rfkill_fop_write+0x5bb/0x790 [ 747.567540][ T30] ? common_file_perm+0x1a6/0x210 [ 747.572607][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 747.578889][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 747.584479][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 747.589535][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 747.594980][ T30] vfs_write+0x2a2/0xc90 [ 747.599263][ T30] ? do_sock_setsockopt+0x3e2/0x720 [ 747.604682][ T30] ? __pfx_vfs_write+0x10/0x10 [ 747.609478][ T30] ? do_futex+0x33b/0x560 [ 747.613835][ T30] ? __fget_files+0x29/0x470 [ 747.618512][ T30] ? __fget_files+0x3f6/0x470 [ 747.623212][ T30] ? __fget_files+0x29/0x470 [ 747.628093][ T30] ksys_write+0x1a0/0x2c0 [ 747.632454][ T30] ? __pfx_ksys_write+0x10/0x10 [ 747.637391][ T30] ? do_syscall_64+0x100/0x230 [ 747.642176][ T30] ? do_syscall_64+0xb6/0x230 [ 747.646899][ T30] do_syscall_64+0xf3/0x230 [ 747.651417][ T30] ? clear_bhb_loop+0x35/0x90 [ 747.656189][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.662102][ T30] RIP: 0033:0x7fddebf75b99 [ 747.666589][ T30] RSP: 002b:00007fddecd78048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.675068][ T30] RAX: ffffffffffffffda RBX: 00007fddec104078 RCX: 00007fddebf75b99 [ 747.683150][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 000000000000000c [ 747.691310][ T30] RBP: 00007fddebff677e R08: 0000000000000000 R09: 0000000000000000 [ 747.699373][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.707536][ T30] R13: 000000000000006e R14: 00007fddec104078 R15: 00007fddec22fa68 [ 747.715583][ T30] [ 747.721671][ T30] INFO: task syz.0.1983:14560 blocked for more than 144 seconds. [ 747.729603][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 747.737561][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 747.746349][ T30] task:syz.0.1983 state:D stack:22584 pid:14560 tgid:14559 ppid:13278 flags:0x00004006 [ 747.756901][ T30] Call Trace: [ 747.760211][ T30] [ 747.763241][ T30] __schedule+0x17e8/0x4a20 [ 747.767942][ T30] ? __pfx___schedule+0x10/0x10 [ 747.772852][ T30] ? __pfx_lock_release+0x10/0x10 [ 747.777993][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 747.783500][ T30] ? schedule+0x90/0x320 [ 747.788014][ T30] schedule+0x14b/0x320 [ 747.792463][ T30] schedule_preempt_disabled+0x13/0x30 [ 747.798645][ T30] __mutex_lock+0x6a4/0xd70 [ 747.803205][ T30] ? __mutex_lock+0x527/0xd70 [ 747.808140][ T30] ? rfkill_register+0x34/0x8c0 [ 747.813198][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 747.818542][ T30] ? mod_delayed_work_on+0x2b6/0x370 [ 747.823869][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 747.829372][ T30] rfkill_register+0x34/0x8c0 [ 747.834678][ T30] wiphy_register+0x234c/0x2b30 [ 747.839692][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 747.845099][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 747.850337][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 747.856528][ T30] ieee80211_register_hw+0x3098/0x3d80 [ 747.862024][ T30] ? ieee80211_register_hw+0x10e1/0x3d80 [ 747.867851][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 747.873836][ T30] ? __asan_memset+0x23/0x50 [ 747.878647][ T30] ? __hrtimer_init+0x170/0x250 [ 747.883548][ T30] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 747.889391][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 747.895597][ T30] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 747.902037][ T30] ? kstrndup+0x5c/0xb0 [ 747.906360][ T30] ? __asan_memcpy+0x40/0x70 [ 747.911039][ T30] hwsim_new_radio_nl+0xe4c/0x21d0 [ 747.916243][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 747.921986][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 747.927655][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 747.934118][ T30] genl_rcv_msg+0xb14/0xec0 [ 747.938703][ T30] ? mark_lock+0x9a/0x350 [ 747.943052][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.948225][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 747.953271][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 747.958996][ T30] ? __pfx___might_resched+0x10/0x10 [ 747.964355][ T30] netlink_rcv_skb+0x1e3/0x430 [ 747.969247][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 747.974375][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.979812][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 747.985346][ T30] genl_rcv+0x28/0x40 [ 747.989357][ T30] netlink_unicast+0x7ea/0x980 [ 747.994157][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 747.999526][ T30] ? __virt_addr_valid+0x183/0x520 [ 748.004699][ T30] ? __check_object_size+0x49c/0x900 [ 748.009987][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 748.015220][ T30] netlink_sendmsg+0x8db/0xcb0 [ 748.020111][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.025450][ T30] ? __import_iovec+0x536/0x820 [ 748.030293][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 748.035300][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 748.040608][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 748.046165][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.051571][ T30] __sock_sendmsg+0x221/0x270 [ 748.056308][ T30] ____sys_sendmsg+0x525/0x7d0 [ 748.061362][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.066769][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 748.071474][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.076828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.083196][ T30] ? do_syscall_64+0x100/0x230 [ 748.088063][ T30] ? do_syscall_64+0xb6/0x230 [ 748.092776][ T30] do_syscall_64+0xf3/0x230 [ 748.097376][ T30] ? clear_bhb_loop+0x35/0x90 [ 748.102078][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.108069][ T30] RIP: 0033:0x7f98c8975b99 [ 748.112597][ T30] RSP: 002b:00007f98c96a3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.121394][ T30] RAX: ffffffffffffffda RBX: 00007f98c8b03fa0 RCX: 00007f98c8975b99 [ 748.129460][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000e [ 748.137602][ T30] RBP: 00007f98c89f677e R08: 0000000000000000 R09: 0000000000000000 [ 748.145636][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.153640][ T30] R13: 000000000000000b R14: 00007f98c8b03fa0 R15: 00007f98c8c2fa68 [ 748.161809][ T30] [ 748.165831][ T30] INFO: task syz.1.1986:14569 blocked for more than 144 seconds. [ 748.173585][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 748.186708][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.195784][ T30] task:syz.1.1986 state:D stack:22864 pid:14569 tgid:14567 ppid:13550 flags:0x00004004 [ 748.206169][ T30] Call Trace: [ 748.209450][ T30] [ 748.212387][ T30] __schedule+0x17e8/0x4a20 [ 748.216983][ T30] ? __pfx___schedule+0x10/0x10 [ 748.222139][ T30] ? __pfx_lock_release+0x10/0x10 [ 748.227257][ T30] ? schedule+0x90/0x320 [ 748.231526][ T30] ? schedule+0x90/0x320 [ 748.236210][ T30] schedule+0x14b/0x320 [ 748.240409][ T30] schedule_preempt_disabled+0x13/0x30 [ 748.246049][ T30] __mutex_lock+0x6a4/0xd70 [ 748.250746][ T30] ? __mutex_lock+0x527/0xd70 [ 748.255580][ T30] ? genl_rcv_msg+0x121/0xec0 [ 748.260271][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 748.265461][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.270505][ T30] genl_rcv_msg+0x121/0xec0 [ 748.275090][ T30] ? mark_lock+0x9a/0x350 [ 748.279434][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 748.284448][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.289988][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 748.296501][ T30] ? __pfx___might_resched+0x10/0x10 [ 748.301841][ T30] netlink_rcv_skb+0x1e3/0x430 [ 748.306765][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.311851][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.319140][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 748.324798][ T30] genl_rcv+0x28/0x40 [ 748.328802][ T30] netlink_unicast+0x7ea/0x980 [ 748.333582][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 748.339085][ T30] ? __check_object_size+0x1b8/0x900 [ 748.344395][ T30] ? __check_object_size+0x49c/0x900 [ 748.350133][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 748.355546][ T30] netlink_sendmsg+0x8db/0xcb0 [ 748.360369][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.365809][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 748.370783][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 748.376289][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 748.381877][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.387337][ T30] __sock_sendmsg+0x221/0x270 [ 748.392153][ T30] __sys_sendto+0x3a4/0x4f0 [ 748.396816][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 748.401873][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.408026][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.414501][ T30] __x64_sys_sendto+0xde/0x100 [ 748.419338][ T30] do_syscall_64+0xf3/0x230 [ 748.423869][ T30] ? clear_bhb_loop+0x35/0x90 [ 748.428678][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.434639][ T30] RIP: 0033:0x7fa60737792c [ 748.439209][ T30] RSP: 002b:00007fa6080beed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 748.447745][ T30] RAX: ffffffffffffffda RBX: 00007fa6080befd0 RCX: 00007fa60737792c [ 748.455965][ T30] RDX: 0000000000000020 RSI: 00007fa6080bf020 RDI: 000000000000000b [ 748.463934][ T30] RBP: 0000000000000000 R08: 00007fa6080bef24 R09: 000000000000000c [ 748.471984][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 748.480077][ T30] R13: 00007fa6080bef78 R14: 00007fa6080bf020 R15: 0000000000000000 [ 748.488158][ T30] [ 748.491237][ T30] INFO: task syz-executor:14581 blocked for more than 144 seconds. [ 748.500331][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 748.508125][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.516901][ T30] task:syz-executor state:D stack:24672 pid:14581 tgid:14581 ppid:5080 flags:0x00004004 [ 748.527154][ T30] Call Trace: [ 748.530545][ T30] [ 748.533572][ T30] __schedule+0x17e8/0x4a20 [ 748.538157][ T30] ? __pfx___schedule+0x10/0x10 [ 748.543022][ T30] ? __pfx_lock_release+0x10/0x10 [ 748.548096][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 748.553580][ T30] ? schedule+0x90/0x320 [ 748.557989][ T30] schedule+0x14b/0x320 [ 748.562165][ T30] schedule_preempt_disabled+0x13/0x30 [ 748.567676][ T30] __mutex_lock+0x6a4/0xd70 [ 748.572632][ T30] ? __mutex_lock+0x527/0xd70 [ 748.577380][ T30] ? rfkill_register+0x34/0x8c0 [ 748.582260][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 748.587366][ T30] ? __init_waitqueue_head+0xae/0x150 [ 748.592755][ T30] ? device_initialize+0x266/0x460 [ 748.597965][ T30] rfkill_register+0x34/0x8c0 [ 748.602670][ T30] hci_register_dev+0x407/0x8b0 [ 748.607609][ T30] vhci_create_device+0x389/0x6d0 [ 748.612654][ T30] vhci_write+0x3cb/0x480 [ 748.617040][ T30] vfs_write+0xa72/0xc90 [ 748.621389][ T30] ? __pfx_vhci_write+0x10/0x10 [ 748.626338][ T30] ? __pfx_vfs_write+0x10/0x10 [ 748.631160][ T30] ksys_write+0x1a0/0x2c0 [ 748.635596][ T30] ? __pfx_ksys_write+0x10/0x10 [ 748.640549][ T30] ? do_syscall_64+0x100/0x230 [ 748.645394][ T30] ? do_syscall_64+0xb6/0x230 [ 748.650140][ T30] do_syscall_64+0xf3/0x230 [ 748.654719][ T30] ? clear_bhb_loop+0x35/0x90 [ 748.659419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.665395][ T30] RIP: 0033:0x7faf6df746e0 [ 748.669817][ T30] RSP: 002b:00007ffe8dbd5c18 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 748.678315][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007faf6df746e0 [ 748.686362][ T30] RDX: 0000000000000002 RSI: 00007ffe8dbd5c2a RDI: 00000000000000ca [ 748.694398][ T30] RBP: 00007faf6e104a58 R08: 0000000000000000 R09: 0000000000000000 [ 748.702550][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 748.710635][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 748.718773][ T30] [ 748.721872][ T30] INFO: task syz-executor:14582 blocked for more than 145 seconds. [ 748.729904][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 748.737615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.746358][ T30] task:syz-executor state:D stack:24672 pid:14582 tgid:14582 ppid:5080 flags:0x00004000 [ 748.756603][ T30] Call Trace: [ 748.759901][ T30] [ 748.762844][ T30] __schedule+0x17e8/0x4a20 [ 748.767476][ T30] ? __pfx___schedule+0x10/0x10 [ 748.772352][ T30] ? __pfx_lock_release+0x10/0x10 [ 748.777476][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 748.782961][ T30] ? schedule+0x90/0x320 [ 748.787289][ T30] schedule+0x14b/0x320 [ 748.791551][ T30] schedule_preempt_disabled+0x13/0x30 [ 748.797061][ T30] __mutex_lock+0x6a4/0xd70 [ 748.801586][ T30] ? __mutex_lock+0x527/0xd70 [ 748.806330][ T30] ? rfkill_register+0x34/0x8c0 [ 748.811209][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 748.816564][ T30] ? __init_waitqueue_head+0xae/0x150 [ 748.821986][ T30] ? device_initialize+0x266/0x460 [ 748.827237][ T30] rfkill_register+0x34/0x8c0 [ 748.831950][ T30] hci_register_dev+0x407/0x8b0 [ 748.837195][ T30] vhci_create_device+0x389/0x6d0 [ 748.842352][ T30] vhci_write+0x3cb/0x480 [ 748.846778][ T30] vfs_write+0xa72/0xc90 [ 748.851045][ T30] ? __pfx_vhci_write+0x10/0x10 [ 748.855946][ T30] ? __pfx_vfs_write+0x10/0x10 [ 748.860739][ T30] ksys_write+0x1a0/0x2c0 [ 748.865138][ T30] ? __pfx_ksys_write+0x10/0x10 [ 748.870005][ T30] ? do_syscall_64+0x100/0x230 [ 748.874865][ T30] ? do_syscall_64+0xb6/0x230 [ 748.879575][ T30] do_syscall_64+0xf3/0x230 [ 748.884110][ T30] ? clear_bhb_loop+0x35/0x90 [ 748.888847][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.894837][ T30] RIP: 0033:0x7fc983b746e0 [ 748.899456][ T30] RSP: 002b:00007fff61a44168 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 748.908027][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc983b746e0 [ 748.916054][ T30] RDX: 0000000000000002 RSI: 00007fff61a4417a RDI: 00000000000000ca [ 748.924044][ T30] RBP: 00007fc983d04a58 R08: 0000000000000000 R09: 0000000000000000 [ 748.932074][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 748.940140][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 748.948205][ T30] [ 748.951259][ T30] INFO: task syz.4.1994:14595 blocked for more than 145 seconds. [ 748.959220][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 748.966923][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 748.975667][ T30] task:syz.4.1994 state:D stack:27360 pid:14595 tgid:14593 ppid:14005 flags:0x00000004 [ 748.985999][ T30] Call Trace: [ 748.989526][ T30] [ 748.992464][ T30] __schedule+0x17e8/0x4a20 [ 748.997322][ T30] ? __pfx___schedule+0x10/0x10 [ 749.002295][ T30] ? __pfx_lock_release+0x10/0x10 [ 749.007482][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 749.013056][ T30] ? schedule+0x90/0x320 [ 749.017451][ T30] schedule+0x14b/0x320 [ 749.021715][ T30] schedule_preempt_disabled+0x13/0x30 [ 749.027275][ T30] __mutex_lock+0x6a4/0xd70 [ 749.031797][ T30] ? __mutex_lock+0x527/0xd70 [ 749.036578][ T30] ? genl_rcv_msg+0x121/0xec0 [ 749.041276][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 749.046362][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.052709][ T30] ? radix_tree_lookup+0x238/0x290 [ 749.057963][ T30] genl_rcv_msg+0x121/0xec0 [ 749.062496][ T30] ? mark_lock+0x9a/0x350 [ 749.067470][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 749.073711][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 749.079136][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 749.084297][ T30] ? __pfx___might_resched+0x10/0x10 [ 749.089691][ T30] netlink_rcv_skb+0x1e3/0x430 [ 749.094512][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 749.100385][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 749.108806][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 749.114312][ T30] genl_rcv+0x28/0x40 [ 749.118480][ T30] netlink_unicast+0x7ea/0x980 [ 749.123390][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 749.128777][ T30] ? __virt_addr_valid+0x183/0x520 [ 749.133921][ T30] ? __check_object_size+0x49c/0x900 [ 749.139306][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 749.144525][ T30] netlink_sendmsg+0x8db/0xcb0 [ 749.150078][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.155982][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 749.161055][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 749.166549][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 749.172156][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.177689][ T30] __sock_sendmsg+0x221/0x270 [ 749.182397][ T30] __sys_sendto+0x3a4/0x4f0 [ 749.186981][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 749.192153][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 749.198668][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 749.205166][ T30] ? exc_page_fault+0x590/0x8c0 [ 749.210141][ T30] __x64_sys_sendto+0xde/0x100 [ 749.214972][ T30] do_syscall_64+0xf3/0x230 [ 749.219514][ T30] ? clear_bhb_loop+0x35/0x90 [ 749.224270][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.231948][ T30] RIP: 0033:0x7f41ee97792c [ 749.236790][ T30] RSP: 002b:00007f41ef6a7ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 749.245419][ T30] RAX: ffffffffffffffda RBX: 00007f41ef6a7fd0 RCX: 00007f41ee97792c [ 749.253432][ T30] RDX: 0000000000000020 RSI: 00007f41ef6a8020 RDI: 0000000000000004 [ 749.261583][ T30] RBP: 0000000000000000 R08: 00007f41ef6a7f24 R09: 000000000000000c [ 749.270818][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 749.279515][ T30] R13: 00007f41ef6a7f78 R14: 00007f41ef6a8020 R15: 0000000000000000 [ 749.287650][ T30] [ 749.290771][ T30] INFO: task syz-executor:14598 blocked for more than 145 seconds. [ 749.298741][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 749.306564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.315337][ T30] task:syz-executor state:D stack:24672 pid:14598 tgid:14598 ppid:5080 flags:0x00000000 [ 749.326029][ T30] Call Trace: [ 749.329325][ T30] [ 749.332256][ T30] __schedule+0x17e8/0x4a20 [ 749.336853][ T30] ? __pfx___schedule+0x10/0x10 [ 749.341725][ T30] ? __pfx_lock_release+0x10/0x10 [ 749.346837][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 749.352342][ T30] ? schedule+0x90/0x320 [ 749.356680][ T30] schedule+0x14b/0x320 [ 749.360940][ T30] schedule_preempt_disabled+0x13/0x30 [ 749.366482][ T30] __mutex_lock+0x6a4/0xd70 [ 749.371019][ T30] ? __mutex_lock+0x527/0xd70 [ 749.375793][ T30] ? rfkill_register+0x34/0x8c0 [ 749.380687][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 749.385896][ T30] ? __init_waitqueue_head+0xae/0x150 [ 749.391479][ T30] ? device_initialize+0x266/0x460 [ 749.397290][ T30] rfkill_register+0x34/0x8c0 [ 749.402009][ T30] hci_register_dev+0x407/0x8b0 [ 749.407227][ T30] vhci_create_device+0x389/0x6d0 [ 749.412272][ T30] vhci_write+0x3cb/0x480 [ 749.416746][ T30] vfs_write+0xa72/0xc90 [ 749.421010][ T30] ? __pfx_vhci_write+0x10/0x10 [ 749.425995][ T30] ? __pfx_vfs_write+0x10/0x10 [ 749.430781][ T30] ksys_write+0x1a0/0x2c0 [ 749.435419][ T30] ? __pfx_ksys_write+0x10/0x10 [ 749.440303][ T30] ? do_syscall_64+0x100/0x230 [ 749.446021][ T30] ? do_syscall_64+0xb6/0x230 [ 749.450731][ T30] do_syscall_64+0xf3/0x230 [ 749.455404][ T30] ? clear_bhb_loop+0x35/0x90 [ 749.460100][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.466171][ T30] RIP: 0033:0x7fcf035746e0 [ 749.470684][ T30] RSP: 002b:00007ffd4d434968 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 749.479147][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fcf035746e0 [ 749.487185][ T30] RDX: 0000000000000002 RSI: 00007ffd4d43497a RDI: 00000000000000ca [ 749.495224][ T30] RBP: 00007fcf03704a58 R08: 0000000000000000 R09: 0000000000000000 [ 749.503297][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 749.511334][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 749.519379][ T30] [ 749.522419][ T30] INFO: task syz-executor:14600 blocked for more than 145 seconds. [ 749.530393][ T30] Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 749.538068][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 749.546867][ T30] task:syz-executor state:D stack:24672 pid:14600 tgid:14600 ppid:5080 flags:0x00000000 [ 749.557168][ T30] Call Trace: [ 749.560467][ T30] [ 749.563412][ T30] __schedule+0x17e8/0x4a20 [ 749.568412][ T30] ? __pfx___schedule+0x10/0x10 [ 749.573371][ T30] ? __pfx_lock_release+0x10/0x10 [ 749.578471][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 749.583959][ T30] ? schedule+0x90/0x320 [ 749.588253][ T30] schedule+0x14b/0x320 [ 749.592431][ T30] schedule_preempt_disabled+0x13/0x30 [ 749.597989][ T30] __mutex_lock+0x6a4/0xd70 [ 749.602517][ T30] ? __mutex_lock+0x527/0xd70 [ 749.607243][ T30] ? rfkill_register+0x34/0x8c0 [ 749.612112][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 749.617228][ T30] ? __init_waitqueue_head+0xae/0x150 [ 749.622717][ T30] ? device_initialize+0x266/0x460 [ 749.628086][ T30] rfkill_register+0x34/0x8c0 [ 749.632968][ T30] hci_register_dev+0x407/0x8b0 [ 749.638628][ T30] vhci_create_device+0x389/0x6d0 [ 749.643786][ T30] vhci_write+0x3cb/0x480 [ 749.648192][ T30] vfs_write+0xa72/0xc90 [ 749.652466][ T30] ? __pfx_vhci_write+0x10/0x10 [ 749.657391][ T30] ? __pfx_vfs_write+0x10/0x10 [ 749.662209][ T30] ksys_write+0x1a0/0x2c0 [ 749.666639][ T30] ? __pfx_ksys_write+0x10/0x10 [ 749.671608][ T30] ? do_syscall_64+0x100/0x230 [ 749.676476][ T30] ? do_syscall_64+0xb6/0x230 [ 749.681183][ T30] do_syscall_64+0xf3/0x230 [ 749.685752][ T30] ? clear_bhb_loop+0x35/0x90 [ 749.690547][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.696597][ T30] RIP: 0033:0x7fd7b37746e0 [ 749.701154][ T30] RSP: 002b:00007ffebcdeeb38 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 749.709994][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd7b37746e0 [ 749.718235][ T30] RDX: 0000000000000002 RSI: 00007ffebcdeeb4a RDI: 00000000000000ca [ 749.726445][ T30] RBP: 00007fd7b3904a58 R08: 0000000000000000 R09: 0000000000000000 [ 749.734465][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 749.742591][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 749.751009][ T30] [ 749.754030][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 749.763117][ T30] [ 749.763117][ T30] Showing all locks held in the system: [ 749.770882][ T30] 1 lock held by khungtaskd/30: [ 749.775778][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 749.786223][ T30] 3 locks held by kworker/1:2/784: [ 749.791347][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 749.802467][ T30] #1: ffffc90003857d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 749.816070][ T30] #2: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 749.827645][ T30] 2 locks held by getty/4850: [ 749.832340][ T30] #0: ffff88802a4030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 749.842296][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 749.852907][ T30] 2 locks held by syz.2.1956/14405: [ 749.858219][ T30] #0: ffff888060f76100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 749.868051][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 749.878440][ T30] 2 locks held by syz.3.1959/14411: [ 749.883866][ T30] #0: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 749.894137][ T30] #1: ffff888060f76100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 749.903899][ T30] 3 locks held by syz.0.1983/14560: [ 749.909173][ T30] #0: ffffffff8f64d5f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 749.917418][ T30] #1: ffffffff8f64d4a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 749.926516][ T30] #2: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 749.936988][ T30] 2 locks held by syz.1.1986/14569: [ 749.942217][ T30] #0: ffffffff8f64d5f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 749.950620][ T30] #1: ffffffff8f64d4a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 749.959693][ T30] 2 locks held by syz-executor/14581: [ 749.965171][ T30] #0: ffff8880626d7918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 749.975561][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 749.985554][ T30] 2 locks held by syz-executor/14582: [ 749.991030][ T30] #0: ffff888021af0118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 750.001619][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 750.011940][ T30] 2 locks held by syz.4.1994/14595: [ 750.017244][ T30] #0: ffffffff8f64d5f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 750.025631][ T30] #1: ffffffff8f64d4a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 750.034662][ T30] 2 locks held by syz-executor/14598: [ 750.040055][ T30] #0: ffff88806e439118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 750.050210][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 750.060573][ T30] 2 locks held by syz-executor/14600: [ 750.066080][ T30] #0: ffff88802d410118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 750.076786][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 750.087070][ T30] 2 locks held by syz-executor/14601: [ 750.092478][ T30] #0: ffff888021db6918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 750.102831][ T30] #1: ffffffff8f8bbc68 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 750.113069][ T30] [ 750.115586][ T30] ============================================= [ 750.115586][ T30] [ 750.124466][ T30] NMI backtrace for cpu 1 [ 750.128899][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 750.138982][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 750.149219][ T30] Call Trace: [ 750.152513][ T30] [ 750.155438][ T30] dump_stack_lvl+0x241/0x360 [ 750.160117][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.165487][ T30] ? __pfx__printk+0x10/0x10 [ 750.170068][ T30] ? vprintk_emit+0x631/0x770 [ 750.174750][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 750.179858][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 750.184872][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 750.190324][ T30] ? _printk+0xd5/0x120 [ 750.194471][ T30] ? __pfx__printk+0x10/0x10 [ 750.199051][ T30] ? __wake_up_klogd+0xcc/0x110 [ 750.204005][ T30] ? __pfx__printk+0x10/0x10 [ 750.208605][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 750.213820][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 750.219921][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 750.225922][ T30] watchdog+0xfde/0x1020 [ 750.230190][ T30] ? watchdog+0x1ea/0x1020 [ 750.234629][ T30] ? __pfx_watchdog+0x10/0x10 [ 750.239405][ T30] kthread+0x2f0/0x390 [ 750.243485][ T30] ? __pfx_watchdog+0x10/0x10 [ 750.248174][ T30] ? __pfx_kthread+0x10/0x10 [ 750.252778][ T30] ret_from_fork+0x4b/0x80 [ 750.257326][ T30] ? __pfx_kthread+0x10/0x10 [ 750.261922][ T30] ret_from_fork_asm+0x1a/0x30 [ 750.266813][ T30] [ 750.270153][ T30] Sending NMI from CPU 1 to CPUs 0: [ 750.275616][ C0] NMI backtrace for cpu 0 [ 750.275630][ C0] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 750.275648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 750.275660][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 750.275691][ C0] RIP: 0010:lock_release+0x291/0x9f0 [ 750.275712][ C0] Code: 84 19 03 00 00 49 8d 5f 24 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 16 05 00 00 83 3b 00 <0f> 85 2b 04 00 00 4d 8d 67 20 4c 89 e3 48 c1 eb 03 42 0f b6 04 33 [ 750.275727][ C0] RSP: 0018:ffffc90000117880 EFLAGS: 00000046 [ 750.275746][ C0] RAX: 0000000000000000 RBX: ffff8880172c657c RCX: ffffc90000117903 [ 750.275760][ C0] RDX: 0000000000000003 RSI: ffffffff8e333f60 RDI: ffff8880172c6558 [ 750.275772][ C0] RBP: ffffc900001179b0 R08: ffffffff8fad506f R09: 1ffffffff1f5aa0d [ 750.275785][ C0] R10: dffffc0000000000 R11: fffffbfff1f5aa0e R12: 0000000000000003 [ 750.275798][ C0] R13: 000000000000000f R14: dffffc0000000000 R15: ffff8880172c6558 [ 750.275811][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 750.275825][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 750.275838][ C0] CR2: 00007ffccde4de9c CR3: 000000000e132000 CR4: 00000000003526f0 [ 750.275852][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 750.275863][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 750.275873][ C0] Call Trace: [ 750.275880][ C0] [ 750.275887][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 750.275906][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 750.275924][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 750.275949][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 750.275969][ C0] ? nmi_handle+0x14f/0x5a0 [ 750.276126][ C0] ? nmi_handle+0x2a/0x5a0 [ 750.276158][ C0] ? lock_release+0x291/0x9f0 [ 750.276176][ C0] ? default_do_nmi+0x63/0x160 [ 750.276195][ C0] ? exc_nmi+0x123/0x1f0 [ 750.276213][ C0] ? end_repeat_nmi+0xf/0x53 [ 750.276233][ C0] ? lock_release+0x291/0x9f0 [ 750.276250][ C0] ? lock_release+0x291/0x9f0 [ 750.276267][ C0] ? lock_release+0x291/0x9f0 [ 750.276285][ C0] [ 750.276291][ C0] [ 750.276299][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 750.276317][ C0] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 750.276341][ C0] ? batadv_primary_if_get_selected+0x7a/0x510 [ 750.276366][ C0] ? __pfx_lock_release+0x10/0x10 [ 750.276382][ C0] ? batadv_primary_if_get_selected+0x3f4/0x510 [ 750.276412][ C0] batadv_iv_ogm_schedule+0x6f3/0x1090 [ 750.276442][ C0] ? batadv_iv_ogm_schedule+0x41e/0x1090 [ 750.276468][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 750.276492][ C0] ? batadv_send_skb_packet+0x41b/0x670 [ 750.276513][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 750.276546][ C0] ? process_scheduled_works+0x945/0x1830 [ 750.276563][ C0] process_scheduled_works+0xa2c/0x1830 [ 750.276592][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 750.276613][ C0] ? assign_work+0x364/0x3d0 [ 750.276632][ C0] worker_thread+0x86d/0xd50 [ 750.276655][ C0] ? __kthread_parkme+0x169/0x1d0 [ 750.276675][ C0] ? __pfx_worker_thread+0x10/0x10 [ 750.276693][ C0] kthread+0x2f0/0x390 [ 750.276713][ C0] ? __pfx_worker_thread+0x10/0x10 [ 750.276731][ C0] ? __pfx_kthread+0x10/0x10 [ 750.276752][ C0] ret_from_fork+0x4b/0x80 [ 750.276774][ C0] ? __pfx_kthread+0x10/0x10 [ 750.276802][ C0] ret_from_fork_asm+0x1a/0x30 [ 750.276832][ C0] [ 750.277673][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 750.628025][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00282-g8282d5af7be8 #0 [ 750.637911][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 750.648687][ T30] Call Trace: [ 750.652060][ T30] [ 750.655013][ T30] dump_stack_lvl+0x241/0x360 [ 750.659702][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.665443][ T30] ? __pfx__printk+0x10/0x10 [ 750.670041][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 750.676110][ T30] ? vscnprintf+0x5d/0x90 [ 750.680620][ T30] panic+0x349/0x860 [ 750.684516][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 750.690745][ T30] ? __pfx_panic+0x10/0x10 [ 750.695170][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 750.700705][ T30] ? __irq_work_queue_local+0x137/0x410 [ 750.706320][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 750.711678][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 750.717899][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 750.724038][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 750.730177][ T30] watchdog+0x101d/0x1020 [ 750.734493][ T30] ? watchdog+0x1ea/0x1020 [ 750.738898][ T30] ? __pfx_watchdog+0x10/0x10 [ 750.743563][ T30] kthread+0x2f0/0x390 [ 750.747621][ T30] ? __pfx_watchdog+0x10/0x10 [ 750.752279][ T30] ? __pfx_kthread+0x10/0x10 [ 750.756874][ T30] ret_from_fork+0x4b/0x80 [ 750.761471][ T30] ? __pfx_kthread+0x10/0x10 [ 750.766483][ T30] ret_from_fork_asm+0x1a/0x30 [ 750.771248][ T30] [ 750.774626][ T30] Kernel Offset: disabled [ 750.779041][ T30] Rebooting in 86400 seconds..