last executing test programs: 12.679525077s ago: executing program 3 (id=998): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000f6e000/0x4000)=nil, 0x4000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000340), 0x0, 0x201, 0x0, 0x0, 0xa5, 0x7c}) socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)={0x6, 0x5, 0x0, [{0xa2, 0x5, 0x6, 0xff, 0xff, 0x5, 0x7, '\x00', 0x6}, {0x5, 0x8, 0x1, 0x1, 0x9, 0x7f, 0x1, '\x00', 0x3}, {0x80000000, 0x6, 0x8, 0xf7, 0x6, 0x7, 0x2, '\x00', 0x2}, {0x0, 0xc00000, 0x0, 0x8, 0x7, 0x2, 0xfc, '\x00', 0x8}, {0xd, 0x81, 0x100, 0x8, 0xaa, 0x1, 0x4, '\x00', 0x5}]}) write$6lowpan_enable(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) read$FUSE(r5, 0x0, 0x0) 11.425886428s ago: executing program 1 (id=1001): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x81, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, 0x0) accept$alg(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020) writev(r0, &(0x7f0000000700), 0x0) 10.948709936s ago: executing program 0 (id=1003): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 10.253608912s ago: executing program 0 (id=1004): mmap(&(0x7f00005d0000/0x1000)=nil, 0x1000, 0x3000001, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, &(0x7f0000000100)}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, 0x0}}], 0x3, 0x800) shutdown(r6, 0x1) 9.91775571s ago: executing program 1 (id=1006): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x2, 0x7fffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 8.749153844s ago: executing program 0 (id=1008): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x10, 0x7f, @vifc_lcl_addr=@broadcast, @empty}, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x17, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r8 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c, 0x80000) accept4$inet6(r8, 0x0, &(0x7f00000002c0), 0x0) membarrier(0x8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) unshare(0x42000000) 8.593169166s ago: executing program 1 (id=1009): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r7 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x0) r9 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000080)={{0x2c, @private=0xa010100, 0x4e23, 0x1, 'ovf\x00', 0x1a, 0x7, 0x56}, {@broadcast, 0x4e23, 0x1, 0x2, 0x5, 0x5}}, 0x44) 7.639384613s ago: executing program 2 (id=1010): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, 0x0) r4 = dup2(r3, r3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040120c05000000000000010902240001000050b10904"], 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 6.910348032s ago: executing program 3 (id=1011): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/net\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$VIDIOC_DQEVENT(r3, 0x80805659, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 6.597119287s ago: executing program 3 (id=1012): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x18080}, [@IFLA_LINKMODE={0x0, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 5.777716553s ago: executing program 3 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r0, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x0, 0x20}}, 0x50) 5.517615594s ago: executing program 3 (id=1014): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x81, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a9119", 0x6) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, 0x0) accept$alg(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='cmdline\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) read$FUSE(r7, &(0x7f0000000280)={0x2020}, 0x2020) writev(r0, &(0x7f0000000700), 0x0) 5.112594177s ago: executing program 1 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600), &(0x7f0000000640)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) 4.669653883s ago: executing program 2 (id=1016): bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) 3.744987808s ago: executing program 2 (id=1017): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) read$msr(r1, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x4, 0x2, 0x7fffffff}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 3.442249472s ago: executing program 2 (id=1018): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x50801}, 0x0) 3.291523884s ago: executing program 0 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x50) syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36) 2.421777475s ago: executing program 3 (id=1020): ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) mmap(&(0x7f0000f6e000/0x4000)=nil, 0x4000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000340), 0x0, 0x201, 0x0, 0x0, 0xa5, 0x7c}) socket$netlink(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) bind$rds(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)={0x6, 0x5, 0x0, [{0xa2, 0x5, 0x6, 0xff, 0xff, 0x5, 0x7, '\x00', 0x6}, {0x5, 0x8, 0x1, 0x1, 0x9, 0x7f, 0x1, '\x00', 0x3}, {0x80000000, 0x6, 0x8, 0xf7, 0x6, 0x7, 0x2, '\x00', 0x2}, {0x0, 0xc00000, 0x0, 0x8, 0x7, 0x2, 0xfc, '\x00', 0x8}, {0xd, 0x81, 0x100, 0x8, 0xaa, 0x1, 0x4, '\x00', 0x5}]}) write$6lowpan_enable(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b00010000000009"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) read$FUSE(r5, 0x0, 0x0) 2.142737007s ago: executing program 1 (id=1021): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x18080}, [@IFLA_LINKMODE={0x0, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 2.085573042s ago: executing program 2 (id=1022): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000003c0)=0x9, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.016923847s ago: executing program 0 (id=1023): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000101e0400310000000000010902"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x14}], 0x1}}], 0x1, 0x200400c1) 1.469877842s ago: executing program 1 (id=1024): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_usbip_server_init(0x1) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, 0x0) r4 = dup2(r3, r3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', 0x0}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r7 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040120c05000000000000010902240001000050b10904"], 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 441.498295ms ago: executing program 0 (id=1025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r3, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 0s ago: executing program 2 (id=1026): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): [ 249.137547][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 249.148466][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 249.165383][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 249.174165][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 249.189033][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 249.196668][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 249.205231][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 249.218990][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.237818][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.265456][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.298674][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.326061][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.436684][ T27] pwc: Registered as video103. [ 249.516300][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 249.587631][ T27] usb 3-1: USB disconnect, device number 16 [ 249.886638][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.038954][ T7198] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 250.045551][ T7198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.063638][ T7198] vhci_hcd vhci_hcd.0: Device attached [ 250.501962][ T27] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 250.527660][ T7211] futex_wake_op: syz.2.366 tries to shift op by 36; fix this program [ 251.668897][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.692675][ T27] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 251.776931][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.808193][ T27] usb 2-1: config 0 descriptor?? [ 252.388855][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 252.604461][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.623823][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 252.633524][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.667043][ T8] usb 4-1: config 0 descriptor?? [ 253.011408][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 253.221447][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.256208][ T23] usb 2-1: USB disconnect, device number 19 [ 253.305166][ T7199] vhci_hcd: connection reset by peer [ 253.313789][ T42] vhci_hcd: stop threads [ 253.318114][ T42] vhci_hcd: release socket [ 253.341208][ T42] vhci_hcd: disconnect device [ 253.419511][ T5842] vhci_hcd: vhci_device speed not set [ 253.421534][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 253.435987][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 253.446445][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 253.723190][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 253.874883][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 253.947876][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 253.971508][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 254.001662][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 254.013520][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 254.042142][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 254.059357][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 254.067640][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 254.096557][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 254.104893][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 254.118935][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 254.136230][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 254.168935][ T8] pwc: Registered as video103. [ 254.199139][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 254.263144][ T8] usb 4-1: USB disconnect, device number 17 [ 255.409121][ T7253] netlink: 'syz.0.381': attribute type 4 has an invalid length. [ 255.814177][ T7264] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 255.820772][ T7264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 255.866848][ T7268] futex_wake_op: syz.0.386 tries to shift op by 36; fix this program [ 255.882482][ T7264] vhci_hcd vhci_hcd.0: Device attached [ 256.129476][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.136325][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.188675][ T5842] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 256.478622][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.827648][ T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 258.559258][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.583281][ T27] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 258.601203][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.611695][ T27] usb 2-1: config 0 descriptor?? [ 258.915415][ T6921] usb 2-1: USB disconnect, device number 20 [ 258.929757][ T7265] vhci_hcd: connection reset by peer [ 258.948894][ T12] vhci_hcd: stop threads [ 258.953225][ T12] vhci_hcd: release socket [ 258.998403][ T12] vhci_hcd: disconnect device [ 259.032927][ T7286] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 259.780506][ T7300] binder: 7294:7300 ioctl c0306201 2000000004c0 returned -22 [ 259.809024][ T7300] fuse: Bad value for 'fd' [ 260.624659][ T7317] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 260.631273][ T7317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 260.664091][ T7317] vhci_hcd vhci_hcd.0: Device attached [ 261.148473][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 261.341602][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.372585][ T27] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 261.401780][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.430884][ T27] usb 2-1: config 0 descriptor?? [ 263.413885][ T6921] usb 2-1: USB disconnect, device number 21 [ 263.468392][ T7318] vhci_hcd: connection reset by peer [ 263.519405][ T42] vhci_hcd: stop threads [ 263.523746][ T42] vhci_hcd: release socket [ 263.548938][ T42] vhci_hcd: disconnect device [ 263.629723][ T5842] vhci_hcd: vhci_device speed not set [ 264.243940][ T7355] netlink: 'syz.1.415': attribute type 4 has an invalid length. [ 267.053048][ T6921] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 267.389159][ T6921] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.403598][ T7374] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 267.410212][ T7374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.428189][ T6921] usb 1-1: config 0 has no interface number 0 [ 267.440561][ T7374] vhci_hcd vhci_hcd.0: Device attached [ 267.446220][ T6921] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 267.464261][ T6921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.521528][ T6921] usb 1-1: config 0 descriptor?? [ 267.550185][ T6921] usb 1-1: selecting invalid altsetting 1 [ 267.568191][ T6921] dvb_ttusb_budget: ttusb_init_controller: error [ 267.578728][ T6921] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 267.710299][ T8] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 267.743851][ T6921] DVB: Unable to find symbol cx22700_attach() [ 267.861953][ T6921] DVB: Unable to find symbol tda10046_attach() [ 267.877374][ T6921] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 267.888608][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 267.906791][ T6921] usb 1-1: USB disconnect, device number 23 [ 268.000540][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 268.084956][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.095788][ T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 268.106328][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.120106][ T9] usb 3-1: config 0 descriptor?? [ 268.369661][ T5880] usb 3-1: USB disconnect, device number 17 [ 268.379459][ T7375] vhci_hcd: connection reset by peer [ 268.413390][ T2917] vhci_hcd: stop threads [ 268.442101][ T2917] vhci_hcd: release socket [ 268.452015][ T2917] vhci_hcd: disconnect device [ 268.722514][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 269.125245][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 269.160227][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 269.176813][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 269.343454][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 269.900958][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 269.910468][ T7411] bridge_slave_1: left allmulticast mode [ 269.916248][ T7411] bridge_slave_1: left promiscuous mode [ 269.922184][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.009240][ T7411] bridge_slave_0: left allmulticast mode [ 270.019355][ T7411] bridge_slave_0: left promiscuous mode [ 270.025365][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.680863][ T7417] tipc: Started in network mode [ 270.716660][ T7417] tipc: Node identity 4, cluster identity 4711 [ 270.723343][ T7417] tipc: Node number set to 4 [ 275.132093][ T8] vhci_hcd: vhci_device speed not set [ 275.639610][ T7437] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 276.307842][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 276.343697][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 276.372390][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 276.435196][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 277.746157][ T7466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 277.752731][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.780992][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 278.048528][ T5880] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 278.058441][ T5842] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 278.280635][ T5842] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.295072][ T5842] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 278.314456][ T5842] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.475692][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 278.600541][ T5842] usb 4-1: config 220 has no interface number 2 [ 278.607717][ T5842] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.622424][ T5842] usb 4-1: config 220 interface 0 has no altsetting 0 [ 278.631611][ T5842] usb 4-1: config 220 interface 76 has no altsetting 0 [ 278.660173][ T5842] usb 4-1: config 220 interface 1 has no altsetting 0 [ 278.694074][ T5842] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.703706][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.712294][ T5842] usb 4-1: Product: syz [ 278.716579][ T5842] usb 4-1: Manufacturer: syz [ 278.721559][ T5842] usb 4-1: SerialNumber: syz [ 278.800392][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.828773][ T8] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 278.856029][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.899673][ T8] usb 3-1: config 0 descriptor?? [ 278.957295][ T5842] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 278.987513][ T5842] usb 4-1: No valid video chain found. [ 279.010333][ T5842] usb 4-1: selecting invalid altsetting 0 [ 279.025655][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 279.075482][ T5842] usb 4-1: selecting invalid altsetting 0 [ 279.082671][ T5842] usbtest: probe of 4-1:220.1 failed with error -22 [ 279.102259][ T5842] usb 4-1: USB disconnect, device number 18 [ 279.196123][ T8] usb 3-1: USB disconnect, device number 18 [ 279.211555][ T7467] vhci_hcd: connection reset by peer [ 279.223614][ T1020] vhci_hcd: stop threads [ 279.234224][ T1020] vhci_hcd: release socket [ 279.243293][ T1020] vhci_hcd: disconnect device [ 283.201685][ T5880] vhci_hcd: vhci_device speed not set [ 283.471921][ T7518] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 283.478686][ T7518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.497269][ T7518] vhci_hcd vhci_hcd.0: Device attached [ 283.758878][ T5842] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 284.438455][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.705141][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.742898][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 284.757402][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.767679][ T9] usb 4-1: config 0 descriptor?? [ 285.068581][ T5880] usb 4-1: USB disconnect, device number 19 [ 285.330261][ T7519] vhci_hcd: connection reset by peer [ 285.341780][ T2917] vhci_hcd: stop threads [ 285.349178][ T2917] vhci_hcd: release socket [ 285.353800][ T2917] vhci_hcd: disconnect device [ 285.417758][ T7534] binder: 7530:7534 ioctl c0306201 2000000004c0 returned -22 [ 285.432304][ T7534] fuse: Bad value for 'fd' [ 286.661903][ T7551] futex_wake_op: syz.1.476 tries to shift op by 36; fix this program [ 287.369566][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.477'. [ 289.169685][ T5842] vhci_hcd: vhci_device speed not set [ 289.356409][ T7584] binder: 7582:7584 ioctl c0306201 2000000004c0 returned -22 [ 289.389802][ T7584] fuse: Bad value for 'fd' [ 289.552993][ T7589] futex_wake_op: syz.1.486 tries to shift op by 36; fix this program [ 290.138129][ T7593] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 290.144690][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 290.173881][ T7593] vhci_hcd vhci_hcd.0: Device attached [ 290.461087][ T786] usb 35-1: new low-speed USB device number 6 using vhci_hcd [ 291.100116][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 291.343667][ T7611] futex_wake_op: syz.2.495 tries to shift op by 36; fix this program [ 291.354110][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.364590][ T9] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 291.388248][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.409008][ T9] usb 2-1: config 0 descriptor?? [ 291.667658][ T9] usb 2-1: USB disconnect, device number 22 [ 291.974708][ T7594] vhci_hcd: connection reset by peer [ 291.993062][ T42] vhci_hcd: stop threads [ 292.000715][ T42] vhci_hcd: release socket [ 292.005355][ T42] vhci_hcd: disconnect device [ 292.186071][ T7617] binder: 7615:7617 ioctl c0306201 2000000004c0 returned -22 [ 292.227904][ T7617] fuse: Bad value for 'fd' [ 292.403622][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.498'. [ 292.413033][ T7627] bridge_slave_1: left allmulticast mode [ 292.419233][ T7627] bridge_slave_1: left promiscuous mode [ 292.425295][ T7627] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.440685][ T7629] binder: 7628:7629 ioctl c0306201 200000000080 returned -14 [ 292.469983][ T7629] binder: BINDER_SET_CONTEXT_MGR already set [ 292.482375][ T7629] binder: 7628:7629 ioctl 4018620d 200000000040 returned -16 [ 292.505223][ T7627] bridge_slave_0: left allmulticast mode [ 292.512046][ T7627] bridge_slave_0: left promiscuous mode [ 292.517955][ T7627] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.006937][ T786] vhci_hcd: vhci_device speed not set [ 296.167627][ T7647] futex_wake_op: syz.2.506 tries to shift op by 36; fix this program [ 296.647295][ T7654] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 296.653871][ T7654] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.665574][ T7654] vhci_hcd vhci_hcd.0: Device attached [ 296.758479][ T7659] ======================================================= [ 296.758479][ T7659] WARNING: The mand mount option has been deprecated and [ 296.758479][ T7659] and is ignored by this kernel. Remove the mand [ 296.758479][ T7659] option from the mount to silence this warning. [ 296.758479][ T7659] ======================================================= [ 296.948389][ T9] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 297.838539][ T5842] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 297.958512][ T27] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 298.080837][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.126451][ T5842] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 298.146742][ T5842] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 298.182293][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.206160][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.232321][ T5842] usb 2-1: config 0 descriptor?? [ 298.238889][ T27] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 298.248085][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.289347][ T27] usb 3-1: config 0 descriptor?? [ 300.898517][ T27] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 302.155581][ T8] usb 2-1: USB disconnect, device number 23 [ 303.024351][ T7687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 303.030930][ T7687] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.231521][ T7687] vhci_hcd vhci_hcd.0: Device attached [ 303.918431][ T5880] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 304.414908][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.1.520'. [ 304.428528][ T7655] vhci_hcd: connection reset by peer [ 304.437333][ T23] usb 3-1: USB disconnect, device number 19 [ 304.449987][ T2917] vhci_hcd: stop threads [ 304.458570][ T2917] vhci_hcd: release socket [ 304.475735][ T2917] vhci_hcd: disconnect device [ 304.548538][ T9] vhci_hcd: vhci_device speed not set [ 305.663955][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 306.395928][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.734588][ T7688] vhci_hcd: connection reset by peer [ 306.753583][ T12] vhci_hcd: stop threads [ 306.758777][ T12] vhci_hcd: release socket [ 306.772986][ T12] vhci_hcd: disconnect device [ 307.843539][ T7723] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 307.850146][ T7723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 307.864346][ T7723] vhci_hcd vhci_hcd.0: Device attached [ 307.868532][ T7730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.531'. [ 307.958820][ T8] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 308.128660][ T23] usb 33-1: new low-speed USB device number 6 using vhci_hcd [ 308.516624][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.539679][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 308.558437][ T8] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 308.697785][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.755334][ T8] usb 4-1: config 0 descriptor?? [ 308.778765][ T6921] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 309.016595][ T6921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.019120][ T5880] vhci_hcd: vhci_device speed not set [ 310.859194][ T6921] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 311.475127][ T6921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.490548][ T5863] usb 4-1: USB disconnect, device number 22 [ 311.569703][ T6921] usb 1-1: config 0 descriptor?? [ 314.868861][ T7756] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 314.875471][ T7756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.919130][ T7756] vhci_hcd vhci_hcd.0: Device attached [ 315.188456][ T5863] usb 35-1: new low-speed USB device number 7 using vhci_hcd [ 315.844865][ T7765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.973563][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 315.985217][ T6921] usb 1-1: can't set config #0, error -71 [ 315.994029][ T7726] vhci_hcd: connection reset by peer [ 316.015915][ T59] vhci_hcd: stop threads [ 316.021998][ T59] vhci_hcd: release socket [ 316.037264][ T59] vhci_hcd: disconnect device [ 316.044632][ T6921] usb 1-1: USB disconnect, device number 24 [ 316.109918][ T23] vhci_hcd: vhci_device speed not set [ 316.159040][ T5859] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 316.424282][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.445395][ T5859] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 316.468353][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.500079][ T5859] usb 2-1: config 0 descriptor?? [ 317.560966][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571513][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.854969][ T5880] usb 2-1: USB disconnect, device number 24 [ 317.876214][ T7759] vhci_hcd: connection reset by peer [ 317.883256][ T59] vhci_hcd: stop threads [ 317.887562][ T59] vhci_hcd: release socket [ 317.910081][ T59] vhci_hcd: disconnect device [ 317.988555][ T5842] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 318.032976][ T7798] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 318.039604][ T7798] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 318.048457][ T27] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 318.051232][ T7798] vhci_hcd vhci_hcd.0: Device attached [ 318.181662][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.200837][ T5842] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 318.229000][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.252558][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.270546][ T5842] usb 1-1: config 0 descriptor?? [ 318.285938][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 318.304514][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 318.325691][ T27] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 318.353640][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.382540][ T27] usb 3-1: config 0 descriptor?? [ 318.608498][ T5859] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 321.619876][ T5842] pwc: recv_control_msg error -71 req 02 val 2b00 [ 321.637466][ T5880] usb 3-1: USB disconnect, device number 20 [ 321.699396][ T5842] pwc: recv_control_msg error -71 req 02 val 2700 [ 321.740792][ T5842] pwc: recv_control_msg error -71 req 02 val 2c00 [ 321.817413][ T5842] pwc: recv_control_msg error -71 req 04 val 1000 [ 321.845899][ T5842] pwc: recv_control_msg error -71 req 04 val 1300 [ 321.869858][ T5842] pwc: recv_control_msg error -71 req 04 val 1400 [ 321.894959][ T5842] pwc: recv_control_msg error -71 req 02 val 2000 [ 321.925660][ T5842] pwc: recv_control_msg error -71 req 02 val 2100 [ 321.949716][ T5842] pwc: recv_control_msg error -71 req 04 val 1500 [ 321.977192][ T5842] pwc: recv_control_msg error -71 req 02 val 2500 [ 322.001987][ T5842] pwc: recv_control_msg error -71 req 02 val 2400 [ 322.041766][ T5842] pwc: recv_control_msg error -71 req 02 val 2600 [ 322.063426][ T5842] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.099865][ T5842] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.138221][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.146477][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.191108][ T5842] pwc: Registered as video103. [ 322.217169][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 322.298728][ T5842] usb 1-1: USB disconnect, device number 25 [ 323.964265][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.116970][ T7799] vhci_hcd: connection reset by peer [ 324.133546][ T48] vhci_hcd: stop threads [ 324.139064][ T48] vhci_hcd: release socket [ 324.151680][ T48] vhci_hcd: disconnect device [ 324.218839][ T5863] vhci_hcd: vhci_device speed not set [ 324.225674][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 324.256193][ T7827] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 324.262796][ T7827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.271239][ T7827] vhci_hcd vhci_hcd.0: Device attached [ 324.518630][ T5842] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 324.588411][ T5863] usb 35-1: device descriptor read/64, error -110 [ 324.778567][ T5859] usb 2-1: device descriptor read/64, error -71 [ 324.809097][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 324.820374][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.840169][ T5842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.850431][ T5842] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 324.860079][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.896973][ T5842] usb 1-1: config 0 descriptor?? [ 324.938460][ T5863] usb 35-1: new low-speed USB device number 8 using vhci_hcd [ 325.008470][ T6921] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 325.058589][ T5859] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 325.188544][ T786] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 325.222870][ T6921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.245578][ T6921] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.255648][ T6921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.267953][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.281569][ T6921] usb 3-1: config 0 descriptor?? [ 325.298408][ T5859] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 325.310314][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.324245][ T6921] pwc: Askey VC010 type 2 USB webcam detected. [ 325.335653][ T5859] usb 2-1: config 0 descriptor?? [ 325.349260][ T5842] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 325.381253][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.396883][ T786] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 325.406479][ T786] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 325.415923][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.429282][ T786] usb 4-1: config 0 descriptor?? [ 325.519984][ T5842] ft260 0003:0403:6030.0014: chip code: 6424 8183 [ 325.593237][ T786] usb 2-1: USB disconnect, device number 26 [ 325.625115][ T7830] vhci_hcd: connection reset by peer [ 325.634844][ T2947] vhci_hcd: stop threads [ 325.643184][ T2947] vhci_hcd: release socket [ 325.651771][ T2947] vhci_hcd: disconnect device [ 325.703213][ T6921] pwc: recv_control_msg error -32 req 02 val 2b00 [ 326.651844][ T5842] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 326.987198][ T5842] ft260 0003:0403:6030.0014: failed to retrieve status: -71 [ 327.024713][ T5842] ft260 0003:0403:6030.0014: failed to reset I2C controller: -71 [ 327.328825][ T6921] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.226638][ T5842] usb 1-1: USB disconnect, device number 26 [ 328.991937][ T6921] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.036882][ T6921] pwc: recv_control_msg error -71 req 04 val 1000 [ 329.036904][ T5842] usb 4-1: USB disconnect, device number 23 [ 329.048438][ T6921] pwc: recv_control_msg error -71 req 04 val 1300 [ 329.063270][ T6921] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.077609][ T6921] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.119186][ T6921] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.138864][ T6921] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.153937][ T6921] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.170801][ T6921] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.180925][ T6921] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.194253][ T6921] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.202465][ T6921] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.209781][ T6921] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.222726][ T6921] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.773002][ T6921] pwc: Registered as video103. [ 329.779702][ T6921] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 329.808797][ T6921] usb 3-1: USB disconnect, device number 21 [ 330.103489][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 330.120284][ T5863] vhci_hcd: vhci_device speed not set [ 330.858643][ T786] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 331.025147][ T7871] tipc: Started in network mode [ 331.030759][ T7871] tipc: Node identity 02b4cb2860a2, cluster identity 4711 [ 331.038831][ T7871] tipc: Enabled bearer , priority 0 [ 331.075439][ T7871] tipc: Resetting bearer [ 331.582779][ T7870] tipc: Disabling bearer [ 331.632273][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.644840][ T786] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 331.686053][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.752344][ T786] usb 1-1: config 0 descriptor?? [ 331.824718][ T7879] binder: 7878:7879 ioctl c0306201 200000000080 returned -14 [ 332.478485][ T786] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.665248][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.687168][ T786] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 332.719578][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.765607][ T786] usb 3-1: config 0 descriptor?? [ 332.775533][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 332.784239][ T786] pwc: Askey VC010 type 2 USB webcam detected. [ 332.838905][ T5863] usb 1-1: USB disconnect, device number 27 [ 333.190369][ T786] pwc: recv_control_msg error -32 req 02 val 2b00 [ 333.213538][ T786] pwc: recv_control_msg error -32 req 02 val 2700 [ 333.237201][ T786] pwc: recv_control_msg error -32 req 02 val 2c00 [ 333.257258][ T786] pwc: recv_control_msg error -32 req 04 val 1000 [ 333.271291][ T786] pwc: recv_control_msg error -32 req 04 val 1300 [ 333.286426][ T786] pwc: recv_control_msg error -32 req 04 val 1400 [ 333.302607][ T786] pwc: recv_control_msg error -32 req 02 val 2000 [ 333.394980][ T786] pwc: recv_control_msg error -32 req 02 val 2100 [ 333.412327][ T786] pwc: recv_control_msg error -32 req 04 val 1500 [ 333.432335][ T786] pwc: recv_control_msg error -32 req 02 val 2500 [ 333.667799][ T786] pwc: recv_control_msg error -71 req 02 val 2600 [ 333.698857][ T786] pwc: recv_control_msg error -71 req 02 val 2900 [ 333.735919][ T786] pwc: recv_control_msg error -71 req 02 val 2800 [ 333.797730][ T786] pwc: recv_control_msg error -71 req 04 val 1100 [ 333.822676][ T786] pwc: recv_control_msg error -71 req 04 val 1200 [ 333.852328][ T786] pwc: Registered as video103. [ 333.861221][ T786] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 333.892625][ T786] usb 3-1: USB disconnect, device number 22 [ 333.928772][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 334.007873][ T7904] tipc: Started in network mode [ 334.024423][ T7904] tipc: Node identity 7e5fc8713c2e, cluster identity 4711 [ 334.057822][ T7904] tipc: Enabled bearer , priority 0 [ 334.067928][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 334.097101][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 334.359248][ T7902] tipc: Disabling bearer [ 334.362726][ T7910] binder: 7909:7910 ioctl c0306201 200000000080 returned -14 [ 334.446289][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 335.380885][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 336.268617][ T5859] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 336.719522][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.792784][ T5859] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 336.827265][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.887626][ T5859] usb 4-1: config 0 descriptor?? [ 336.984966][ T7939] tipc: Enabled bearer , priority 0 [ 336.997791][ T7938] tipc: Disabling bearer [ 337.068643][ T5842] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 337.515084][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.527169][ T5842] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 337.536410][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.654303][ T5842] usb 2-1: config 0 descriptor?? [ 337.689819][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 337.705536][ T8] usb 4-1: USB disconnect, device number 24 [ 337.927088][ T7950] binder: 7949:7950 ioctl c0306201 200000000080 returned -14 [ 338.109504][ T5842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 338.438427][ T5842] pwc: recv_control_msg error -32 req 02 val 2700 [ 338.454235][ T5842] pwc: recv_control_msg error -32 req 02 val 2c00 [ 338.469179][ T5842] pwc: recv_control_msg error -32 req 04 val 1000 [ 338.479782][ T5842] pwc: recv_control_msg error -32 req 04 val 1300 [ 338.495290][ T5842] pwc: recv_control_msg error -32 req 04 val 1400 [ 338.503416][ T5842] pwc: recv_control_msg error -32 req 02 val 2000 [ 338.512145][ T5842] pwc: recv_control_msg error -32 req 02 val 2100 [ 338.524770][ T5842] pwc: recv_control_msg error -32 req 04 val 1500 [ 338.545510][ T5842] pwc: recv_control_msg error -32 req 02 val 2500 [ 338.790315][ T5842] pwc: recv_control_msg error -71 req 02 val 2600 [ 338.814632][ T5842] pwc: recv_control_msg error -71 req 02 val 2900 [ 338.848643][ T5842] pwc: recv_control_msg error -71 req 02 val 2800 [ 338.864733][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 338.881876][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 338.887283][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 338.939795][ T5842] pwc: Registered as video103. [ 338.998197][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 339.064454][ T5842] usb 2-1: USB disconnect, device number 27 [ 339.263740][ T8] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 339.312174][ T8] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 339.417702][ T8] usb 1-1: config 220 has no interface number 2 [ 339.428844][ T8] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 339.442576][ T8] usb 1-1: config 220 interface 0 has no altsetting 0 [ 339.449816][ T8] usb 1-1: config 220 interface 76 has no altsetting 0 [ 339.459017][ T8] usb 1-1: config 220 interface 1 has no altsetting 0 [ 339.471201][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 339.488328][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.504216][ T8] usb 1-1: Product: syz [ 339.508934][ T8] usb 1-1: Manufacturer: syz [ 339.513973][ T8] usb 1-1: SerialNumber: syz [ 339.743147][ T7970] tipc: Enabled bearer , priority 0 [ 339.921120][ T8] usb 1-1: selecting invalid altsetting 0 [ 339.930138][ T7967] tipc: Disabling bearer [ 339.953010][ T8] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 339.961220][ T8] usb 1-1: No valid video chain found. [ 340.641466][ T8] usb 1-1: selecting invalid altsetting 0 [ 340.657180][ T8] usbtest: probe of 1-1:220.1 failed with error -22 [ 340.718712][ T8] usb 1-1: USB disconnect, device number 28 [ 342.678380][ T5859] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 342.880654][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.918462][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 342.942487][ T5859] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 342.965691][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.001983][ T5859] usb 2-1: config 0 descriptor?? [ 343.039135][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 343.124764][ T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 343.137277][ T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 343.156634][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 343.167657][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 343.187005][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 343.206814][ T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 343.216887][ T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 343.230742][ T8] usb 3-1: Product: syz [ 343.235051][ T8] usb 3-1: Manufacturer: syz [ 343.251532][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 343.366035][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 343.383661][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 343.749025][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 344.501804][ T8] usb 2-1: USB disconnect, device number 28 [ 344.538534][ T5842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 344.745092][ T5842] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 344.835618][ T5842] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 344.847098][ T5842] usb 4-1: config 220 has no interface number 2 [ 344.853735][ T5842] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 344.867372][ T5842] usb 4-1: config 220 interface 0 has no altsetting 0 [ 344.874441][ T5842] usb 4-1: config 220 interface 76 has no altsetting 0 [ 344.881501][ T5842] usb 4-1: config 220 interface 1 has no altsetting 0 [ 344.891604][ T5842] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 344.900975][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.909249][ T5842] usb 4-1: Product: syz [ 344.913534][ T5842] usb 4-1: Manufacturer: syz [ 344.918390][ T5842] usb 4-1: SerialNumber: syz [ 345.141890][ T5842] usb 4-1: selecting invalid altsetting 0 [ 345.160618][ T5842] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 345.167898][ T5842] usb 4-1: No valid video chain found. [ 345.205086][ T5842] usb 4-1: selecting invalid altsetting 0 [ 345.211592][ T5842] usbtest: probe of 4-1:220.1 failed with error -22 [ 345.243519][ T5842] usb 4-1: USB disconnect, device number 25 [ 345.612431][ T8] usb 3-1: USB disconnect, device number 23 [ 346.339030][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 347.467685][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 347.554300][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 347.576804][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 347.626511][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 347.696837][ T8046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 347.703424][ T8046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.717615][ T8046] vhci_hcd vhci_hcd.0: Device attached [ 347.938409][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 347.978439][ T5859] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 348.130242][ T8] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 348.178484][ T8] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 348.200473][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 348.209884][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 348.230340][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 348.250885][ T8] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 348.264883][ T8] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.273733][ T8] usb 1-1: Product: syz [ 348.279041][ T8] usb 1-1: Manufacturer: syz [ 348.295326][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 348.306342][ T8] cdc_wdm 1-1:1.0: skipping garbage [ 348.349908][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 348.350827][ T8] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 348.367596][ T8] cdc_wdm 1-1:1.0: Unknown control protocol [ 348.617855][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.649087][ T23] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 348.665878][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.699770][ T23] usb 3-1: config 0 descriptor?? [ 348.888538][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 349.101012][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.114282][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 349.126294][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.138860][ T786] usb 1-1: USB disconnect, device number 29 [ 349.183774][ T8] usb 4-1: config 0 descriptor?? [ 349.204320][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 349.286381][ T8048] vhci_hcd: connection reset by peer [ 349.294061][ T23] usb 3-1: USB disconnect, device number 24 [ 349.306639][ T12] vhci_hcd: stop threads [ 349.318519][ T12] vhci_hcd: release socket [ 349.323112][ T12] vhci_hcd: disconnect device [ 349.722601][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 349.758909][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 349.796171][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 349.826851][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 349.842851][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 349.858576][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 349.873221][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 349.894617][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 349.909278][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 349.929691][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 350.152871][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 350.284103][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 350.311124][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 350.342735][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 350.433729][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 350.952765][ T8] pwc: Registered as video103. [ 350.964082][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 351.188529][ T8] usb 4-1: USB disconnect, device number 26 [ 351.464314][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 352.439139][ T786] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 352.474115][ T8093] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 352.480670][ T8093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.493553][ T8093] vhci_hcd vhci_hcd.0: Device attached [ 352.598469][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 352.652173][ T786] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 352.679724][ T786] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 352.699127][ T786] usb 3-1: config 220 has no interface number 2 [ 352.723430][ T786] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 352.753339][ T786] usb 3-1: config 220 interface 0 has no altsetting 0 [ 352.772238][ T786] usb 3-1: config 220 interface 76 has no altsetting 0 [ 352.772421][ T8099] binder: 8098:8099 ioctl c0306201 200000000080 returned -14 [ 352.787051][ T786] usb 3-1: config 220 interface 1 has no altsetting 0 [ 352.794174][ T9] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 352.805416][ T786] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 352.821870][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.852850][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.872759][ T786] usb 3-1: Product: syz [ 352.876994][ T786] usb 3-1: Manufacturer: syz [ 352.885902][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.907743][ T786] usb 3-1: SerialNumber: syz [ 352.908883][ T23] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 352.923299][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.958557][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 352.988111][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 353.030840][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.044766][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.088623][ T8] usb 2-1: Product: syz [ 353.097116][ T8] usb 2-1: Manufacturer: syz [ 353.138948][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 353.160414][ T786] usb 3-1: selecting invalid altsetting 0 [ 353.179987][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 353.187330][ T786] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 353.188055][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.214780][ T5859] vhci_hcd: vhci_device speed not set [ 353.236184][ T23] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 353.236731][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 353.252403][ T786] usb 3-1: No valid video chain found. [ 353.278157][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 353.284207][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.293931][ T23] usb 1-1: config 0 descriptor?? [ 353.294090][ T786] usb 3-1: selecting invalid altsetting 0 [ 353.342243][ T786] usbtest: probe of 3-1:220.1 failed with error -22 [ 353.396175][ T786] usb 3-1: USB disconnect, device number 25 [ 353.396317][ T8103] fuse: Bad value for 'fd' [ 354.168849][ T23] usb 1-1: USB disconnect, device number 30 [ 354.227847][ T8094] vhci_hcd: connection reset by peer [ 354.265041][ T42] vhci_hcd: stop threads [ 354.272405][ T42] vhci_hcd: release socket [ 354.277419][ T42] vhci_hcd: disconnect device [ 354.356381][ T786] usb 2-1: USB disconnect, device number 29 [ 355.271149][ T8120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 355.377810][ T8125] binder: 8124:8125 ioctl c0306201 200000000080 returned -14 [ 355.630189][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 355.782234][ T8136] befs: (nbd1): No write support. Marking filesystem read-only [ 355.792387][ T8136] syz.1.657: attempt to access beyond end of device [ 355.792387][ T8136] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 355.805648][ T8136] befs: (nbd1): unable to read superblock [ 356.854527][ T8141] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 356.861121][ T8141] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.878539][ T8141] vhci_hcd vhci_hcd.0: Device attached [ 356.948459][ T23] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 357.170383][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 357.181009][ T23] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 357.204587][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 357.218595][ T5842] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 357.252302][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 357.278530][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 357.560117][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.569502][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.577591][ T23] usb 1-1: Product: syz [ 357.592510][ T23] usb 1-1: Manufacturer: syz [ 357.614084][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 357.654037][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 357.670014][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 357.688362][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 357.989618][ T9] vhci_hcd: vhci_device speed not set [ 358.168357][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 358.374612][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.401829][ T23] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 358.444074][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.463060][ T5863] usb 1-1: USB disconnect, device number 31 [ 358.540454][ T23] usb 3-1: config 0 descriptor?? [ 358.887664][ T23] usb 3-1: USB disconnect, device number 26 [ 358.969037][ T8142] vhci_hcd: connection reset by peer [ 358.993635][ T8159] binder: 8158:8159 ioctl c0306201 200000000080 returned -14 [ 359.001303][ T42] vhci_hcd: stop threads [ 359.005620][ T42] vhci_hcd: release socket [ 359.025672][ T42] vhci_hcd: disconnect device [ 360.580812][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.814267][ T8180] befs: (nbd2): No write support. Marking filesystem read-only [ 360.824077][ T8180] syz.2.668: attempt to access beyond end of device [ 360.824077][ T8180] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 360.837180][ T8180] befs: (nbd2): unable to read superblock [ 362.218733][ T5863] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 362.378959][ T5842] vhci_hcd: vhci_device speed not set [ 362.420763][ T5863] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 362.430075][ T5863] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 362.440943][ T5863] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 362.450990][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 362.464660][ T5863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 362.504429][ T5863] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.514662][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.524412][ T5863] usb 3-1: Product: syz [ 362.528782][ T5863] usb 3-1: Manufacturer: syz [ 362.661562][ T5863] cdc_wdm 3-1:1.0: skipping garbage [ 362.738632][ T5863] cdc_wdm 3-1:1.0: skipping garbage [ 362.764573][ T5863] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 362.798446][ T5863] cdc_wdm 3-1:1.0: Unknown control protocol [ 363.139202][ T8199] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 363.476421][ T5842] usb 3-1: USB disconnect, device number 27 [ 363.499749][ T8204] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 363.506329][ T8204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.533876][ T8204] vhci_hcd vhci_hcd.0: Device attached [ 363.798367][ T5863] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 363.878439][ T5880] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 364.061346][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.095112][ T5880] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 364.125079][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.161985][ T5880] usb 1-1: config 0 descriptor?? [ 364.753441][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.778030][ T5880] usb 1-1: USB disconnect, device number 32 [ 364.786460][ T8205] vhci_hcd: connection reset by peer [ 364.807754][ T1020] vhci_hcd: stop threads [ 364.831397][ T1020] vhci_hcd: release socket [ 364.835959][ T1020] vhci_hcd: disconnect device [ 365.729790][ T8224] befs: (nbd3): No write support. Marking filesystem read-only [ 365.745813][ T8224] syz.3.681: attempt to access beyond end of device [ 365.745813][ T8224] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 365.758804][ T8224] befs: (nbd3): unable to read superblock [ 367.628579][ T5842] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 367.773944][ T8246] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 367.821210][ T5842] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 367.831665][ T5842] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 367.888338][ T5842] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 367.918900][ T5842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 367.938344][ T5842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 367.973741][ T5842] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 367.988450][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 367.996759][ T5842] usb 2-1: Product: syz [ 368.007222][ T5842] usb 2-1: Manufacturer: syz [ 368.110011][ T5842] cdc_wdm 2-1:1.0: skipping garbage [ 368.115504][ T5842] cdc_wdm 2-1:1.0: skipping garbage [ 368.171441][ T5842] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 368.177497][ T5842] cdc_wdm 2-1:1.0: Unknown control protocol [ 368.939206][ T5863] vhci_hcd: vhci_device speed not set [ 369.259669][ T786] usb 2-1: USB disconnect, device number 30 [ 369.393182][ T8258] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 369.399774][ T8258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.409865][ T8258] vhci_hcd vhci_hcd.0: Device attached [ 369.698476][ T5859] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 369.818690][ T786] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 370.672389][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.684895][ T786] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 370.696026][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.714956][ T786] usb 4-1: config 0 descriptor?? [ 371.647849][ T786] usb 4-1: USB disconnect, device number 27 [ 371.688736][ T8259] vhci_hcd: connection reset by peer [ 371.707355][ T42] vhci_hcd: stop threads [ 371.711878][ T42] vhci_hcd: release socket [ 371.727009][ T42] vhci_hcd: disconnect device [ 372.573019][ T5863] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 373.460382][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.488520][ T5863] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 373.507824][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.693666][ T5863] usb 3-1: config 0 descriptor?? [ 373.733421][ T5863] pwc: Askey VC010 type 2 USB webcam detected. [ 374.258460][ T5863] pwc: recv_control_msg error -32 req 02 val 2b00 [ 374.319533][ T5863] pwc: recv_control_msg error -32 req 02 val 2700 [ 374.369252][ T5863] pwc: recv_control_msg error -32 req 02 val 2c00 [ 374.383045][ T5863] pwc: recv_control_msg error -32 req 04 val 1000 [ 374.401649][ T5863] pwc: recv_control_msg error -32 req 04 val 1300 [ 374.424474][ T5863] pwc: recv_control_msg error -32 req 04 val 1400 [ 374.437960][ T5863] pwc: recv_control_msg error -32 req 02 val 2000 [ 374.467946][ T5863] pwc: recv_control_msg error -32 req 02 val 2100 [ 374.480783][ T5863] pwc: recv_control_msg error -32 req 04 val 1500 [ 374.490581][ T5863] pwc: recv_control_msg error -32 req 02 val 2500 [ 374.703342][ T5863] pwc: recv_control_msg error -71 req 02 val 2600 [ 374.710443][ T5863] pwc: recv_control_msg error -71 req 02 val 2900 [ 374.718792][ T5863] pwc: recv_control_msg error -71 req 02 val 2800 [ 374.730714][ T5863] pwc: recv_control_msg error -71 req 04 val 1100 [ 374.759096][ T5863] pwc: recv_control_msg error -71 req 04 val 1200 [ 374.921281][ T5863] pwc: Registered as video103. [ 374.928058][ T5863] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 374.980219][ T5863] usb 3-1: USB disconnect, device number 28 [ 374.988425][ T5859] vhci_hcd: vhci_device speed not set [ 376.530529][ T8322] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 376.537123][ T8322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.578954][ T8322] vhci_hcd vhci_hcd.0: Device attached [ 377.598391][ T786] usb 33-1: new low-speed USB device number 9 using vhci_hcd [ 377.918424][ T5859] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 378.113206][ T5859] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.124596][ T5859] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 378.136613][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.154806][ T5859] usb 1-1: config 0 descriptor?? [ 378.713168][ T8344] netlink: 32 bytes leftover after parsing attributes in process `syz.3.715'. [ 378.943221][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.949767][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.131309][ T9] usb 1-1: USB disconnect, device number 33 [ 379.295896][ T8323] vhci_hcd: connection reset by peer [ 379.360267][ T1020] vhci_hcd: stop threads [ 379.371794][ T1020] vhci_hcd: release socket [ 379.388384][ T1020] vhci_hcd: disconnect device [ 380.663366][ T8356] fuse: Bad value for 'fd' [ 380.808425][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 381.061044][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 381.105954][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 381.116918][ T5859] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 381.124663][ T9] usb 1-1: config 220 has no interface number 2 [ 381.131953][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 381.145325][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 381.152257][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 381.338364][ T5859] usb 3-1: Using ep0 maxpacket: 8 [ 381.448454][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 381.467054][ T5859] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 381.478105][ T5859] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 381.623381][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.757740][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.765923][ T5859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 381.776117][ T9] usb 1-1: Product: syz [ 381.780369][ T5859] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 381.791722][ T9] usb 1-1: Manufacturer: syz [ 381.796388][ T9] usb 1-1: SerialNumber: syz [ 381.893209][ T5859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 381.914414][ T5859] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.928188][ T5859] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 381.939240][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.968122][ T8371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 382.097568][ T8374] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 382.104340][ T8374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 382.116630][ T8374] vhci_hcd vhci_hcd.0: Device attached [ 382.192136][ T9] usb 1-1: selecting invalid altsetting 0 [ 382.398650][ T5863] usb 35-1: new low-speed USB device number 9 using vhci_hcd [ 382.647085][ T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 382.658026][ T5859] usb 3-1: GET_CAPABILITIES returned 0 [ 382.676441][ T9] usb 1-1: No valid video chain found. [ 382.706008][ T5859] usbtmc 3-1:16.0: can't read capabilities [ 382.728872][ T9] usb 1-1: selecting invalid altsetting 0 [ 382.736337][ T5859] usb 3-1: USB disconnect, device number 29 [ 382.745395][ T9] usbtest: probe of 1-1:220.1 failed with error -22 [ 382.776863][ T9] usb 1-1: USB disconnect, device number 34 [ 382.783398][ T786] vhci_hcd: vhci_device speed not set [ 383.008462][ T5842] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 383.213752][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.295536][ T5842] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 383.399315][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.713116][ T5842] usb 2-1: config 0 descriptor?? [ 384.246344][ T8392] fuse: Bad value for 'fd' [ 384.627184][ T786] usb 2-1: USB disconnect, device number 31 [ 384.648385][ T8376] vhci_hcd: connection reset by peer [ 384.678068][ T42] vhci_hcd: stop threads [ 384.687681][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 384.699871][ T42] vhci_hcd: release socket [ 384.708867][ T42] vhci_hcd: disconnect device [ 385.459962][ T8401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.733'. [ 386.226945][ T5842] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 386.609848][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.623152][ T5842] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 386.638621][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.807840][ T5842] usb 1-1: config 0 descriptor?? [ 386.822692][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 386.900442][ T8421] fuse: Bad value for 'fd' [ 387.169904][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 387.248076][ T5842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 387.270520][ T5842] pwc: recv_control_msg error -32 req 02 val 2700 [ 387.302122][ T5842] pwc: recv_control_msg error -32 req 02 val 2c00 [ 387.335934][ T5842] pwc: recv_control_msg error -32 req 04 val 1000 [ 387.355401][ T5842] pwc: recv_control_msg error -32 req 04 val 1300 [ 387.379311][ T5842] pwc: recv_control_msg error -32 req 04 val 1400 [ 387.391809][ T5842] pwc: recv_control_msg error -32 req 02 val 2000 [ 387.402142][ T5842] pwc: recv_control_msg error -32 req 02 val 2100 [ 387.414853][ T5842] pwc: recv_control_msg error -32 req 04 val 1500 [ 387.427465][ T5842] pwc: recv_control_msg error -32 req 02 val 2500 [ 387.498715][ T5863] vhci_hcd: vhci_device speed not set [ 387.647847][ T5842] pwc: recv_control_msg error -71 req 02 val 2600 [ 387.674075][ T5842] pwc: recv_control_msg error -71 req 02 val 2900 [ 387.702472][ T5842] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.726526][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.756283][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.787736][ T5842] pwc: Registered as video103. [ 387.837084][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 387.980254][ T5842] usb 1-1: USB disconnect, device number 35 [ 388.104168][ T8435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 388.110764][ T8435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.131099][ T8435] vhci_hcd vhci_hcd.0: Device attached [ 388.398989][ T5880] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 388.958494][ T786] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 389.114912][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 389.197637][ T786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.235915][ T786] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 389.271797][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.308149][ T786] usb 3-1: config 0 descriptor?? [ 391.029956][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 391.167452][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 391.217669][ T5842] usb 3-1: USB disconnect, device number 30 [ 391.239163][ T8436] vhci_hcd: connection reset by peer [ 391.276838][ T1020] vhci_hcd: stop threads [ 391.290883][ T1020] vhci_hcd: release socket [ 391.295565][ T1020] vhci_hcd: disconnect device [ 391.305145][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 391.336161][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 391.373493][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 391.747502][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'. [ 392.278516][ T5859] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 392.468585][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 392.480497][ T5859] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 392.492191][ T5859] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 392.505630][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 392.519543][ T5859] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 392.533959][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 392.544970][ T5859] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.563589][ T5859] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.573531][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.810738][ T5859] usb 1-1: GET_CAPABILITIES returned 0 [ 392.816754][ T5859] usbtmc 1-1:16.0: can't read capabilities [ 393.027772][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 393.055061][ T8476] usbtmc 1-1:16.0: Unable to send data, error -71 [ 393.071377][ T5859] usb 1-1: USB disconnect, device number 36 [ 393.383157][ T8489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.761'. [ 393.527745][ T8491] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 393.534388][ T8491] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 393.550093][ T8491] vhci_hcd vhci_hcd.0: Device attached [ 394.048367][ T5842] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 394.295456][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.383326][ T5842] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 394.449865][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.499433][ T5842] usb 3-1: config 0 descriptor?? [ 394.933625][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 396.470513][ T8516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.770'. [ 397.089089][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 397.110199][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 397.134815][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 397.152437][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'. [ 397.247007][ T8492] vhci_hcd: connection reset by peer [ 397.260182][ T27] usb 3-1: USB disconnect, device number 31 [ 397.292264][ T12] vhci_hcd: stop threads [ 397.305124][ T12] vhci_hcd: release socket [ 397.381603][ T12] vhci_hcd: disconnect device [ 397.458512][ T5880] vhci_hcd: vhci_device speed not set [ 398.300892][ T8527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.970448][ T8554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.780'. [ 402.078437][ T8558] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 402.085045][ T8558] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.093145][ T8558] vhci_hcd vhci_hcd.0: Device attached [ 402.155417][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 402.167773][ T8564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 402.368906][ T5880] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 402.628638][ T27] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 402.861979][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.948097][ T27] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 403.033598][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.292137][ T27] usb 4-1: config 0 descriptor?? [ 403.677704][ T8573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.686504][ T8573] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 403.816500][ T27] usb 4-1: USB disconnect, device number 28 [ 403.833041][ T8559] vhci_hcd: connection reset by peer [ 403.857374][ T2917] vhci_hcd: stop threads [ 403.868577][ T2917] vhci_hcd: release socket [ 403.874948][ T2917] vhci_hcd: disconnect device [ 405.022644][ T8573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.086512][ T8573] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 405.150912][ T8573] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.157378][ T8573] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 405.363387][ T8573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 405.396976][ T8573] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 405.740333][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 405.982464][ T8592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.214524][ T8598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.793'. [ 406.286144][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 406.318768][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 407.103719][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 407.178531][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 407.301272][ T8611] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 407.307888][ T8611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 407.375269][ T8611] vhci_hcd vhci_hcd.0: Device attached [ 407.418528][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 407.436966][ T8619] befs: (nbd3): No write support. Marking filesystem read-only [ 407.445472][ T8619] syz.3.800: attempt to access beyond end of device [ 407.445472][ T8619] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 407.458425][ T8619] befs: (nbd3): unable to read superblock [ 407.578483][ T5880] vhci_hcd: vhci_device speed not set [ 408.288330][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 408.428676][ T5859] usb 35-1: new low-speed USB device number 10 using vhci_hcd [ 408.628654][ T27] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 408.636902][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 408.818603][ T27] usb 2-1: device descriptor read/64, error -32 [ 409.063844][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 409.073870][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 409.099012][ T8635] netlink: 32 bytes leftover after parsing attributes in process `syz.3.803'. [ 409.109075][ T27] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 409.183072][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 409.258837][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 409.370484][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.381204][ T27] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 409.390513][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.477540][ T27] usb 2-1: config 0 descriptor?? [ 409.498459][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 409.776090][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 409.894578][ T2194] usb 2-1: USB disconnect, device number 33 [ 409.904474][ T8614] vhci_hcd: connection reset by peer [ 409.944086][ T59] vhci_hcd: stop threads [ 409.948578][ T59] vhci_hcd: release socket [ 409.955483][ T59] vhci_hcd: disconnect device [ 410.086545][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.108194][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 410.121893][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.137298][ T9] usb 1-1: config 0 descriptor?? [ 410.155992][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 410.200393][ T8644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.208005][ T8644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.214887][ T8644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.221878][ T8644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.565445][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 410.608022][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 410.617629][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 410.633085][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 410.652988][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 410.663257][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 411.136359][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 411.203038][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 411.216895][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 411.244775][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 411.267239][ T8650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.463671][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 411.515292][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 411.529600][ T8658] befs: (nbd2): No write support. Marking filesystem read-only [ 411.538457][ T8658] syz.2.811: attempt to access beyond end of device [ 411.538457][ T8658] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 411.551286][ T8658] befs: (nbd2): unable to read superblock [ 411.600065][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 411.637324][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 411.677274][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 412.389641][ T9] pwc: Registered as video103. [ 412.396495][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 412.403154][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 412.409634][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 412.415860][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 412.432311][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 412.543582][ T9] usb 1-1: USB disconnect, device number 37 [ 413.182047][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 413.192275][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 413.588877][ T5859] vhci_hcd: vhci_device speed not set [ 413.651874][ T8677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 413.658477][ T8677] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 413.686811][ T8677] vhci_hcd vhci_hcd.0: Device attached [ 413.979347][ T27] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 414.251281][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 414.535730][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.562600][ T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 414.584056][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.620912][ T9] usb 3-1: config 0 descriptor?? [ 414.735991][ T8695] befs: (nbd0): No write support. Marking filesystem read-only [ 414.745960][ T8695] syz.0.822: attempt to access beyond end of device [ 414.745960][ T8695] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 414.759215][ T8695] befs: (nbd0): unable to read superblock [ 415.641933][ T8690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.942265][ T9] usb 3-1: USB disconnect, device number 32 [ 415.979542][ T8682] vhci_hcd: connection reset by peer [ 415.995005][ T48] vhci_hcd: stop threads [ 416.006249][ T48] vhci_hcd: release socket [ 416.015426][ T48] vhci_hcd: disconnect device [ 417.689473][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 417.698531][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 418.458364][ T8703] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 418.458423][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 418.813070][ T8725] befs: (nbd1): No write support. Marking filesystem read-only [ 418.821659][ T8725] syz.1.831: attempt to access beyond end of device [ 418.821659][ T8725] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 418.834485][ T8725] befs: (nbd1): unable to read superblock [ 419.178481][ T27] vhci_hcd: vhci_device speed not set [ 419.739742][ T8729] binder: BINDER_SET_CONTEXT_MGR already set [ 419.745842][ T8729] binder: 8728:8729 ioctl 4018620d 200000000040 returned -16 [ 420.173253][ T8703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.179947][ T8703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.197177][ T8703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.457359][ T8734] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 420.463957][ T8734] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 420.625198][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 420.655220][ T8734] vhci_hcd vhci_hcd.0: Device attached [ 420.789093][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 420.968755][ T5859] usb 33-1: new low-speed USB device number 10 using vhci_hcd [ 421.223031][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 421.283102][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 421.322341][ T9] usb 3-1: config 220 has no interface number 2 [ 421.332773][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 421.351178][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 421.428985][ T8730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.442158][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 421.457378][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 421.487494][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 421.501022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.512264][ T9] usb 3-1: Product: syz [ 421.516619][ T9] usb 3-1: Manufacturer: syz [ 421.524346][ T9] usb 3-1: SerialNumber: syz [ 421.751222][ T9] usb 3-1: selecting invalid altsetting 0 [ 421.764251][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 421.771700][ T9] usb 3-1: No valid video chain found. [ 421.801525][ T9] usb 3-1: selecting invalid altsetting 0 [ 421.817182][ T9] usbtest: probe of 3-1:220.1 failed with error -22 [ 421.835439][ T9] usb 3-1: USB disconnect, device number 33 [ 421.838650][ T27] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 421.873258][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 422.050649][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.067448][ T27] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 422.079362][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.127966][ T27] usb 1-1: config 0 descriptor?? [ 422.260528][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 422.270407][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 422.631377][ T27] usb 1-1: USB disconnect, device number 38 [ 422.643915][ T8739] vhci_hcd: connection reset by peer [ 422.659641][ T12] vhci_hcd: stop threads [ 422.664233][ T12] vhci_hcd: release socket [ 422.673597][ T12] vhci_hcd: disconnect device [ 422.832526][ T8758] befs: (nbd2): No write support. Marking filesystem read-only [ 422.840957][ T8758] syz.2.841: attempt to access beyond end of device [ 422.840957][ T8758] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 422.854046][ T8758] befs: (nbd2): unable to read superblock [ 423.794670][ T8765] binder: BINDER_SET_CONTEXT_MGR already set [ 423.800830][ T8765] binder: 8764:8765 ioctl 4018620d 200000000040 returned -16 [ 424.975948][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 425.160522][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.217086][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 425.236951][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.245899][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 425.261130][ T9] usb 2-1: config 0 descriptor?? [ 425.277151][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 425.689670][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 425.714945][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 425.730734][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 425.748746][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 425.777225][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 425.798806][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 425.823157][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 425.840325][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 425.848632][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 425.872297][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 426.087701][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 426.112785][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 426.131362][ T8778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.142639][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 426.162127][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 426.173073][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 426.198434][ T9] pwc: Registered as video103. [ 426.222204][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 426.248494][ T5859] vhci_hcd: vhci_device speed not set [ 426.300543][ T9] usb 2-1: USB disconnect, device number 34 [ 426.704626][ T8783] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.713376][ T8783] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.902499][ T8783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.911578][ T8783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.996331][ T8793] ptrace attach of "./syz-executor exec"[5789] was attempted by "   jC*p\x1bŖ 3Hej$x2e|yOkYxMxOB B͒GMP%OޜtĎ\x0dT[g]LJ;2$|gP\x22̏R׾{Vd,ru\x0da1i-6M+\x07}T#a5Zd0ƌ{w$)i%L>Q,oQeꮰHrʏ.ҿɷ0JVw^{'ǁo_8v:7>LpF,Z3R<\x07}A\x07B{ g`g/3`0=\x1bJ-^0eyJq -ʹ\x0bL\x0c [ 427.583611][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 428.268805][ T8803] befs: (nbd0): No write support. Marking filesystem read-only [ 428.319261][ T8803] syz.0.853: attempt to access beyond end of device [ 428.319261][ T8803] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 428.363833][ T8803] befs: (nbd0): unable to read superblock [ 428.778777][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 428.938679][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 428.944827][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 428.990550][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 429.007722][ T8808] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 429.014312][ T8808] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.071447][ T8808] vhci_hcd vhci_hcd.0: Device attached [ 429.348570][ T5880] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 429.458359][ T27] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 430.076997][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.092583][ T27] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 430.105480][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.123068][ T27] usb 3-1: config 0 descriptor?? [ 430.420738][ T27] usb 3-1: USB disconnect, device number 34 [ 430.432012][ T8810] vhci_hcd: connection reset by peer [ 430.451740][ T59] vhci_hcd: stop threads [ 430.465264][ T59] vhci_hcd: release socket [ 430.485129][ T59] vhci_hcd: disconnect device [ 431.289140][ T8823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.305735][ T8833] befs: (nbd0): No write support. Marking filesystem read-only [ 431.330767][ T8833] syz.0.865: attempt to access beyond end of device [ 431.330767][ T8833] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 431.531645][ T8833] befs: (nbd0): unable to read superblock [ 434.571965][ T5880] vhci_hcd: vhci_device speed not set [ 434.709605][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 434.724210][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 435.559872][ T8873] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 435.566504][ T8873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.609149][ T8873] vhci_hcd vhci_hcd.0: Device attached [ 435.908339][ T27] usb 35-1: new low-speed USB device number 11 using vhci_hcd [ 436.608559][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.662228][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.680405][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.864534][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.148674][ T5880] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 437.595764][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 437.835774][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.862799][ T5880] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 437.874201][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.016563][ T5880] usb 2-1: config 0 descriptor?? [ 438.571534][ T8893] befs: (nbd3): No write support. Marking filesystem read-only [ 438.582370][ T8893] syz.3.879: attempt to access beyond end of device [ 438.582370][ T8893] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 438.596945][ T8893] befs: (nbd3): unable to read superblock [ 438.708606][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 438.708618][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 438.938955][ T5880] usb 2-1: USB disconnect, device number 35 [ 438.948391][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 438.957433][ T8874] vhci_hcd: connection reset by peer [ 438.991843][ T42] vhci_hcd: stop threads [ 439.016351][ T42] vhci_hcd: release socket [ 439.036158][ T42] vhci_hcd: disconnect device [ 439.318425][ T5842] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 439.509059][ T5842] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 439.528374][ T5842] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 439.546440][ T5842] usb 3-1: config 220 has an invalid descriptor of length 128, skipping remainder of the config [ 439.567374][ T5842] usb 3-1: config 220 has no interface number 2 [ 439.574029][ T5842] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 439.588362][ T5842] usb 3-1: config 220 interface 0 has no altsetting 0 [ 439.604494][ T5842] usb 3-1: config 220 interface 76 has no altsetting 0 [ 439.619453][ T5842] usb 3-1: config 220 interface 1 has no altsetting 0 [ 439.634746][ T5842] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 439.644363][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.657282][ T5842] usb 3-1: Product: syz [ 439.661826][ T5842] usb 3-1: Manufacturer: syz [ 439.666597][ T5842] usb 3-1: SerialNumber: syz [ 439.940513][ T5842] usb 3-1: selecting invalid altsetting 0 [ 439.963038][ T5842] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 439.991725][ T5842] usb 3-1: No valid video chain found. [ 440.029180][ T5842] usb 3-1: selecting invalid altsetting 0 [ 440.049414][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 440.058455][ T5842] usbtest: probe of 3-1:220.1 failed with error -22 [ 440.066466][ T5842] usb 3-1: USB disconnect, device number 35 [ 440.098463][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 440.128611][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 440.181327][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 440.384225][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.390916][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.741010][ T8930] befs: (nbd2): No write support. Marking filesystem read-only [ 440.791395][ T8930] syz.2.891: attempt to access beyond end of device [ 440.791395][ T8930] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 440.808855][ T8930] befs: (nbd2): unable to read superblock [ 441.198661][ T27] vhci_hcd: vhci_device speed not set [ 443.497915][ T2194] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 443.710880][ T2194] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 443.738348][ T2194] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 443.760129][ T2194] usb 1-1: config 220 has an invalid descriptor of length 128, skipping remainder of the config [ 443.788650][ T2194] usb 1-1: config 220 has no interface number 2 [ 443.795445][ T2194] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 443.834171][ T2194] usb 1-1: config 220 interface 0 has no altsetting 0 [ 443.850661][ T2194] usb 1-1: config 220 interface 76 has no altsetting 0 [ 443.857871][ T2194] usb 1-1: config 220 interface 1 has no altsetting 0 [ 443.867333][ T2194] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 443.877086][ T2194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.889898][ T2194] usb 1-1: Product: syz [ 443.894817][ T2194] usb 1-1: Manufacturer: syz [ 443.902410][ T2194] usb 1-1: SerialNumber: syz [ 444.054000][ T8969] befs: (nbd1): No write support. Marking filesystem read-only [ 444.147102][ T8969] syz.1.904: attempt to access beyond end of device [ 444.147102][ T8969] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 444.160729][ T2194] usb 1-1: selecting invalid altsetting 0 [ 444.168377][ T2194] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 444.174791][ T2194] usb 1-1: No valid video chain found. [ 444.181619][ T8969] befs: (nbd1): unable to read superblock [ 444.198936][ T2194] usb 1-1: selecting invalid altsetting 0 [ 444.205088][ T2194] usbtest: probe of 1-1:220.1 failed with error -22 [ 444.230948][ T2194] usb 1-1: USB disconnect, device number 39 [ 447.603664][ T9001] befs: (nbd3): No write support. Marking filesystem read-only [ 447.613205][ T9001] syz.3.915: attempt to access beyond end of device [ 447.613205][ T9001] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 447.626361][ T9001] befs: (nbd3): unable to read superblock [ 448.329243][ T9006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 448.335817][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 448.348631][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 448.634307][ T27] usb 33-1: new low-speed USB device number 11 using vhci_hcd [ 449.638304][ T5842] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 450.323177][ T9018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.065098][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.086251][ T5842] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 451.109520][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.144554][ T5842] usb 1-1: config 0 descriptor?? [ 453.027328][ T5842] usb 1-1: USB disconnect, device number 40 [ 453.038012][ T9007] vhci_hcd: connection reset by peer [ 453.047953][ T1020] vhci_hcd: stop threads [ 453.058106][ T1020] vhci_hcd: release socket [ 453.083716][ T1020] vhci_hcd: disconnect device [ 453.276030][ T9040] befs: (nbd3): No write support. Marking filesystem read-only [ 453.284377][ T9040] syz.3.927: attempt to access beyond end of device [ 453.284377][ T9040] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 453.297283][ T9040] befs: (nbd3): unable to read superblock [ 454.140109][ T27] vhci_hcd: vhci_device speed not set [ 454.769608][ T9046] binder: 9045:9046 ioctl c0306201 200000000080 returned -14 [ 456.514056][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 456.543575][ T9061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 456.550175][ T9061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.598882][ T9061] vhci_hcd vhci_hcd.0: Device attached [ 456.890868][ T2194] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 457.828630][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 458.039877][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.111244][ T9077] befs: (nbd1): No write support. Marking filesystem read-only [ 458.120023][ T9077] syz.1.939: attempt to access beyond end of device [ 458.120023][ T9077] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 458.132853][ T9077] befs: (nbd1): unable to read superblock [ 458.888325][ T27] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 458.897465][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.929006][ T27] usb 3-1: config 0 descriptor?? [ 459.109267][ T9082] binder: 9081:9082 ioctl c0306201 200000000080 returned -14 [ 460.958468][ T27] usb 3-1: USB disconnect, device number 36 [ 461.018454][ T9062] vhci_hcd: connection reset by peer [ 461.059100][ T1020] vhci_hcd: stop threads [ 461.063442][ T1020] vhci_hcd: release socket [ 461.181775][ T1020] vhci_hcd: disconnect device [ 462.379398][ T2194] vhci_hcd: vhci_device speed not set [ 462.746022][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.896055][ T9111] binder: 9110:9111 ioctl c0306201 200000000080 returned -14 [ 463.054759][ T9117] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 463.061337][ T9117] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.071725][ T9117] vhci_hcd vhci_hcd.0: Device attached [ 463.248370][ T27] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 463.433923][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.451631][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.463547][ T27] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 463.475006][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.487737][ T27] usb 2-1: config 0 descriptor?? [ 463.488451][ T2194] usb 37-1: device descriptor read/64, error -110 [ 463.505036][ T5859] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 463.735592][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.750870][ T9127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.771915][ T5859] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 463.787529][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.802727][ T5859] usb 3-1: config 0 descriptor?? [ 463.808691][ T2194] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 463.921587][ T27] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 464.008340][ T27] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 464.047393][ T5859] usb 3-1: USB disconnect, device number 37 [ 464.057214][ T9118] vhci_hcd: connection reset by peer [ 464.076471][ T2947] vhci_hcd: stop threads [ 464.076998][ T27] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 464.083338][ T2947] vhci_hcd: release socket [ 464.097864][ T2947] vhci_hcd: disconnect device [ 464.172219][ T27] usb 2-1: USB disconnect, device number 36 [ 464.216432][ T27] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 464.246370][ T9128] fido_id[9128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 465.993012][ T9141] [U]  [ 465.996081][ T9141] [U] K{ [ 466.012023][ T9141] [U] T 1ŠFFˊ`GJǘGO/MC [ 466.043161][ T9141] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 466.099421][ T9141] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 466.127792][ T9141] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 466.163585][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.192261][ T9143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 466.198866][ T9143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 466.207857][ T9143] vhci_hcd vhci_hcd.0: Device attached [ 466.210958][ T9141] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 466.237166][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.329032][ T9141] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 466.433450][ T9141] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 466.450440][ T9141] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 470.424207][ T9178] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 470.430851][ T9178] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 470.438832][ T5859] usb 35-1: new full-speed USB device number 12 using vhci_hcd [ 470.474342][ T9178] vhci_hcd vhci_hcd.0: Device attached [ 470.504835][ T9189] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 470.557483][ T9193] vhci_hcd: connection closed [ 470.557723][ T9191] vhci_hcd: connection closed [ 470.563189][ T9185] vhci_hcd: connection closed [ 470.569457][ T9180] vhci_hcd: connection reset by peer [ 470.579914][ T59] vhci_hcd: stop threads [ 470.584335][ T9183] vhci_hcd: connection closed [ 470.584733][ T59] vhci_hcd: release socket [ 470.596271][ T59] vhci_hcd: disconnect device [ 470.602401][ T59] vhci_hcd: stop threads [ 470.623401][ T9189] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 470.626052][ T59] vhci_hcd: release socket [ 470.643414][ T9189] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 470.660725][ T9189] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 470.773495][ T59] vhci_hcd: stop threads [ 470.777864][ T59] vhci_hcd: release socket [ 470.789467][ T9189] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 470.801437][ T59] vhci_hcd: disconnect device [ 470.806633][ T59] vhci_hcd: stop threads [ 470.811521][ T9189] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 470.830163][ T59] vhci_hcd: release socket [ 470.837068][ T59] vhci_hcd: disconnect device [ 470.845704][ T59] vhci_hcd: stop threads [ 470.851226][ T9189] [U] 22Ʃ۩X?0;3U [ 470.855520][ T59] vhci_hcd: release socket [ 470.864472][ T9189] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 470.890364][ T59] vhci_hcd: disconnect device [ 470.899428][ T9189] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 470.914557][ T9189] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 470.931122][ T9189] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 470.963337][ T9189] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 470.982204][ T9189] [U] EC [ 470.991843][ T9189] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 471.043723][ T9188] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 472.441879][ T9212] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 472.448484][ T9212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 472.481785][ T9212] vhci_hcd vhci_hcd.0: Device attached [ 472.538412][ T2194] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 472.748468][ T27] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 472.760611][ T2194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.778301][ T2194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.839154][ T2194] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.852873][ T2194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.868112][ T2194] usb 3-1: config 0 descriptor?? [ 472.897357][ T5842] vhci_hcd: vhci_device speed not set [ 472.998361][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 473.220953][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.286769][ T9] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 473.324658][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.347544][ T9] usb 4-1: config 0 descriptor?? [ 473.592614][ T9213] vhci_hcd: connection reset by peer [ 473.610835][ T5880] usb 4-1: USB disconnect, device number 29 [ 473.613989][ T2947] vhci_hcd: stop threads [ 473.653267][ T2947] vhci_hcd: release socket [ 473.666334][ T2947] vhci_hcd: disconnect device [ 473.809433][ T9226] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 473.816029][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 473.824534][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 474.154845][ T2194] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 474.181040][ T2194] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 474.189755][ T2194] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 474.197928][ T2194] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 474.214520][ T2194] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 474.238312][ T5842] usb 33-1: new low-speed USB device number 13 using vhci_hcd [ 474.244170][ T2194] usb 3-1: USB disconnect, device number 39 [ 474.278389][ T5880] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 474.482276][ T9236] [U]  [ 474.485152][ T9236] [U] K{ [ 474.489548][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.502164][ T9236] [U] T 1ŠFFˊ`GJǘGO/MC [ 474.509452][ T5880] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 474.519981][ T9236] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 474.535822][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.549330][ T9236] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 474.574707][ T5880] usb 1-1: config 0 descriptor?? [ 474.607935][ T9236] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 474.671943][ T9236] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 474.733200][ T9236] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 474.749401][ T9236] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 474.779629][ T9236] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 474.960806][ T9236] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 474.970823][ T9236] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 474.987071][ T9236] [U] 22Ʃ۩X?0;3U [ 474.993377][ T9236] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 475.024147][ T9236] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 475.034111][ T9236] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 475.046260][ T9236] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 475.054965][ T9236] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 475.072578][ T9236] [U] EC [ 475.076289][ T9236] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 475.112743][ T9235] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 475.888711][ T5859] vhci_hcd: vhci_device speed not set [ 477.658358][ T9261] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 477.664968][ T9261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.718550][ T9261] vhci_hcd vhci_hcd.0: Device attached [ 478.038897][ T27] vhci_hcd: vhci_device speed not set [ 478.248432][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.530122][ T9276] [U]  [ 478.534773][ T9276] [U] K{ [ 478.544158][ T9276] [U] T 1ŠFFˊ`GJǘGO/MC [ 478.558173][ T9276] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 478.558349][ T5880] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 478.573962][ T5859] usb 35-1: new low-speed USB device number 13 using vhci_hcd [ 478.605195][ T9276] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 478.629695][ T9276] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 478.721006][ T9276] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 478.759768][ T9276] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 478.800618][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.822588][ T9276] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 478.826806][ T5880] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 478.857951][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.880186][ T9276] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 479.538999][ T9276] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 479.856207][ T9262] vhci_hcd: connection reset by peer [ 479.864946][ T2194] usb 2-1: USB disconnect, device number 37 [ 479.872183][ T9276] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 479.889118][ T1020] vhci_hcd: stop threads [ 479.892666][ T9276] [U] 22Ʃ۩X?0;3U [ 479.896077][ T1020] vhci_hcd: release socket [ 479.899869][ T9276] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 479.928931][ T9276] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 479.938548][ T1020] vhci_hcd: disconnect device [ 479.944777][ T9276] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 479.974265][ T9276] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 479.982176][ T9276] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 479.995140][ T9276] [U] EC [ 480.001197][ T9276] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 481.230368][ T2194] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 481.683198][ T2194] usb 4-1: Using ep0 maxpacket: 16 [ 481.706758][ T9273] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 481.756013][ T2194] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.884033][ T2194] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 482.378551][ T2194] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 482.468412][ T2194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.658907][ T2194] usb 4-1: Product: syz [ 482.663143][ T2194] usb 4-1: Manufacturer: syz [ 482.667768][ T2194] usb 4-1: SerialNumber: syz [ 482.725424][ T2194] usb 4-1: config 0 descriptor?? [ 483.769391][ T5859] vhci_hcd: vhci_device speed not set [ 485.224375][ T9329] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 485.230968][ T9329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 485.344980][ T9329] vhci_hcd vhci_hcd.0: Device attached [ 485.608339][ T5859] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 485.723338][ T2194] usb 4-1: can't set config #0, error -71 [ 485.766465][ T2194] usb 4-1: USB disconnect, device number 30 [ 485.978816][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 486.322714][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.338153][ T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 486.373020][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.409785][ T9] usb 3-1: config 0 descriptor?? [ 487.212329][ T9] usb 3-1: USB disconnect, device number 40 [ 487.271242][ T9330] vhci_hcd: connection reset by peer [ 487.305345][ T59] vhci_hcd: stop threads [ 487.315420][ T59] vhci_hcd: release socket [ 487.329068][ T59] vhci_hcd: disconnect device [ 490.107919][ T9364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.699298][ T5859] vhci_hcd: vhci_device speed not set [ 490.708314][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 490.921950][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 490.936271][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.981793][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 490.994401][ T9] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 491.003536][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.011614][ T9] usb 4-1: Product: syz [ 491.015807][ T9] usb 4-1: Manufacturer: syz [ 491.022498][ T9] usb 4-1: SerialNumber: syz [ 491.029315][ T9] usb 4-1: config 0 descriptor?? [ 491.088291][ T786] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 491.232554][ T9380] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 491.239128][ T9380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 491.268498][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 491.277828][ T9380] vhci_hcd vhci_hcd.0: Device attached [ 491.288706][ T786] usb 1-1: config 0 has no interfaces? [ 491.300859][ T786] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 491.310720][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.322234][ T786] usb 1-1: config 0 descriptor?? [ 491.541284][ T5880] usb 1-1: USB disconnect, device number 43 [ 491.548308][ T9] usb 35-1: new low-speed USB device number 14 using vhci_hcd [ 491.788427][ T5842] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 491.986265][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.028430][ T5842] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 492.044441][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.109293][ T5842] usb 2-1: config 0 descriptor?? [ 493.015524][ T9392] ------------[ cut here ]------------ [ 493.021463][ T9392] WARNING: CPU: 0 PID: 9392 at net/core/page_pool.c:594 page_pool_put_defragged_page+0x9a/0x9b0 [ 493.031960][ T9392] Modules linked in: [ 493.036025][ T9392] CPU: 0 PID: 9392 Comm: syz.2.1026 Not tainted syzkaller #0 [ 493.043440][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.053548][ T9392] RIP: 0010:page_pool_put_defragged_page+0x9a/0x9b0 [ 493.060188][ T9392] Code: e8 cb 56 0a f9 eb 47 e8 c4 56 0a f9 eb 40 65 44 8b 25 d6 4d 87 77 31 ff 44 89 e6 e8 60 5a 0a f9 45 85 e4 74 09 e8 a6 56 0a f9 <0f> 0b eb 20 65 44 8b 25 b2 4d 87 77 31 ff 44 89 e6 e8 40 5a 0a f9 [ 493.079881][ T9392] RSP: 0018:ffffc900034a6990 EFLAGS: 00010087 [ 493.086063][ T9392] RAX: ffffffff887b3f5f RBX: 0000000000000000 RCX: 0000000000080000 [ 493.094064][ T9392] RDX: ffffc9000cf1b000 RSI: 000000000002c604 RDI: 000000000002c605 [ 493.102080][ T9392] RBP: dffffc0000000000 R08: ffff88802af78000 R09: 0000000000000004 [ 493.110091][ T9392] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 493.118092][ T9392] R13: ffffea00017c6340 R14: ffff888028ba1000 R15: 00000000ffffffff [ 493.126099][ T9392] FS: 00007f2e7c58b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 493.135055][ T9392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.141662][ T9392] CR2: 0000200000225030 CR3: 000000002d84c000 CR4: 00000000003506f0 [ 493.149662][ T9392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.157660][ T9392] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 493.165656][ T9392] Call Trace: [ 493.168957][ T9392] [ 493.171947][ T9392] ? __xdp_return+0x355/0x8f0 [ 493.176663][ T9392] ? xdp_return_frame+0x56/0x270 [ 493.181637][ T9392] tun_device_event+0xa66/0x1030 [ 493.186627][ T9392] notifier_call_chain+0x197/0x390 [ 493.191863][ T9392] dev_change_tx_queue_len+0x121/0x260 [ 493.197407][ T9392] ? dev_set_mtu+0x170/0x170 [ 493.202035][ T9392] ? dev_change_flags+0xe8/0x1a0 [ 493.207009][ T9392] do_setlink+0xf93/0x3fb0 [ 493.211515][ T9392] ? arch_stack_walk+0x160/0x190 [ 493.216489][ T9392] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 493.222707][ T9392] ? stack_trace_save+0x9c/0xe0 [ 493.227592][ T9392] ? stack_trace_snprint+0xf0/0xf0 [ 493.233006][ T9392] ? __stack_depot_save+0x1f/0x630 [ 493.238170][ T9392] ? __nla_validate_parse+0x22dc/0x2cd0 [ 493.243758][ T9392] ? netlink_rcv_skb+0x216/0x480 [ 493.248761][ T9392] ? netlink_unicast+0x751/0x8d0 [ 493.253724][ T9392] ? netlink_sendmsg+0x8c1/0xbe0 [ 493.258716][ T9392] ? __nla_validate+0x50/0x50 [ 493.263485][ T9392] ? validate_linkmsg+0x719/0x910 [ 493.268549][ T9392] rtnl_newlink+0x10af/0x2020 [ 493.273267][ T9392] ? rtnl_newlink+0xad1/0x2020 [ 493.278079][ T9392] ? rtnl_setlink+0x4b0/0x4b0 [ 493.282789][ T9392] ? trace_raw_output_contention_end+0xd0/0xd0 [ 493.288989][ T9392] ? rcu_is_watching+0x15/0xb0 [ 493.293783][ T9392] ? trace_contention_end+0x39/0xe0 [ 493.299015][ T9392] ? __mutex_lock+0x304/0xcc0 [ 493.303791][ T9392] ? rtnl_setlink+0x4b0/0x4b0 [ 493.308516][ T9392] rtnetlink_rcv_msg+0x7c7/0xf10 [ 493.313499][ T9392] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 493.318648][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 493.323876][ T9392] ? rtnetlink_bind+0x80/0x80 [ 493.328595][ T9392] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 493.334694][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 493.339857][ T9392] ? lock_chain_count+0x20/0x20 [ 493.344768][ T9392] ? __local_bh_enable_ip+0x12e/0x1c0 [ 493.350302][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 493.355576][ T9392] ? __local_bh_enable_ip+0x12e/0x1c0 [ 493.360986][ T9392] ? _local_bh_enable+0xa0/0xa0 [ 493.365877][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 493.371032][ T9392] ? __dev_queue_xmit+0x1449/0x35a0 [ 493.376288][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 493.381448][ T9392] ? ref_tracker_free+0x634/0x7d0 [ 493.386505][ T9392] ? __copy_skb_header+0xa7/0x550 [ 493.391619][ T9392] netlink_rcv_skb+0x216/0x480 [ 493.396438][ T9392] ? rtnetlink_bind+0x80/0x80 [ 493.401253][ T9392] ? netlink_ack+0x1110/0x1110 [ 493.406076][ T9392] ? __lock_acquire+0x7c80/0x7c80 [ 493.411147][ T9392] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.416493][ T9392] netlink_unicast+0x751/0x8d0 [ 493.421313][ T9392] netlink_sendmsg+0x8c1/0xbe0 [ 493.426137][ T9392] ? netlink_getsockopt+0x580/0x580 [ 493.431388][ T9392] ? aa_sock_msg_perm+0x94/0x150 [ 493.436620][ T9392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.441971][ T9392] ? security_socket_sendmsg+0x80/0xa0 [ 493.447583][ T9392] ? netlink_getsockopt+0x580/0x580 [ 493.452846][ T9392] ____sys_sendmsg+0x5bf/0x950 [ 493.457673][ T9392] ? __asan_memset+0x22/0x40 [ 493.462315][ T9392] ? __sys_sendmsg_sock+0x30/0x30 [ 493.467373][ T9392] ? __import_iovec+0x5f2/0x860 [ 493.472269][ T9392] ? import_iovec+0x73/0xa0 [ 493.476805][ T9392] ___sys_sendmsg+0x220/0x290 [ 493.481530][ T9392] ? __sys_sendmsg+0x270/0x270 [ 493.486344][ T9392] ? debug_mutex_init+0x38/0x70 [ 493.491256][ T9392] __se_sys_sendmsg+0x1a5/0x270 [ 493.496151][ T9392] ? __x64_sys_sendmsg+0x80/0x80 [ 493.501137][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 493.506376][ T9392] do_syscall_64+0x55/0xb0 [ 493.510824][ T9392] ? clear_bhb_loop+0x40/0x90 [ 493.515529][ T9392] ? clear_bhb_loop+0x40/0x90 [ 493.520239][ T9392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.526185][ T9392] RIP: 0033:0x7f2e7b78ebe9 [ 493.530644][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.550277][ T9392] RSP: 002b:00007f2e7c58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.558723][ T9392] RAX: ffffffffffffffda RBX: 00007f2e7b9c5fa0 RCX: 00007f2e7b78ebe9 [ 493.566745][ T9392] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 493.574752][ T9392] RBP: 00007f2e7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 493.582758][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.590755][ T9392] R13: 00007f2e7b9c6038 R14: 00007f2e7b9c5fa0 R15: 00007ffd47770cb8 [ 493.598770][ T9392] [ 493.601811][ T9392] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 493.609111][ T9392] CPU: 0 PID: 9392 Comm: syz.2.1026 Not tainted syzkaller #0 [ 493.616496][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.626569][ T9392] Call Trace: [ 493.629871][ T9392] [ 493.632854][ T9392] dump_stack_lvl+0x16c/0x230 [ 493.637572][ T9392] ? show_regs_print_info+0x20/0x20 [ 493.642967][ T9392] ? load_image+0x3b0/0x3b0 [ 493.647550][ T9392] panic+0x2c0/0x710 [ 493.651568][ T9392] ? bpf_jit_dump+0xd0/0xd0 [ 493.656112][ T9392] __warn+0x2e0/0x470 [ 493.660125][ T9392] ? page_pool_put_defragged_page+0x9a/0x9b0 [ 493.666132][ T9392] ? page_pool_put_defragged_page+0x9a/0x9b0 [ 493.672142][ T9392] report_bug+0x2be/0x4f0 [ 493.676493][ T9392] ? page_pool_put_defragged_page+0x9a/0x9b0 [ 493.682496][ T9392] ? page_pool_put_defragged_page+0x9a/0x9b0 [ 493.688596][ T9392] ? page_pool_put_defragged_page+0x9c/0x9b0 [ 493.694783][ T9392] handle_bug+0xcf/0x120 [ 493.699057][ T9392] exc_invalid_op+0x1a/0x50 [ 493.703588][ T9392] asm_exc_invalid_op+0x1a/0x20 [ 493.710013][ T9392] RIP: 0010:page_pool_put_defragged_page+0x9a/0x9b0 [ 493.717105][ T9392] Code: e8 cb 56 0a f9 eb 47 e8 c4 56 0a f9 eb 40 65 44 8b 25 d6 4d 87 77 31 ff 44 89 e6 e8 60 5a 0a f9 45 85 e4 74 09 e8 a6 56 0a f9 <0f> 0b eb 20 65 44 8b 25 b2 4d 87 77 31 ff 44 89 e6 e8 40 5a 0a f9 [ 493.736942][ T9392] RSP: 0018:ffffc900034a6990 EFLAGS: 00010087 [ 493.743059][ T9392] RAX: ffffffff887b3f5f RBX: 0000000000000000 RCX: 0000000000080000 [ 493.751174][ T9392] RDX: ffffc9000cf1b000 RSI: 000000000002c604 RDI: 000000000002c605 [ 493.759170][ T9392] RBP: dffffc0000000000 R08: ffff88802af78000 R09: 0000000000000004 [ 493.767164][ T9392] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 493.775160][ T9392] R13: ffffea00017c6340 R14: ffff888028ba1000 R15: 00000000ffffffff [ 493.783172][ T9392] ? page_pool_put_defragged_page+0x6ff/0x9b0 [ 493.789285][ T9392] ? __xdp_return+0x355/0x8f0 [ 493.793996][ T9392] ? xdp_return_frame+0x56/0x270 [ 493.798962][ T9392] tun_device_event+0xa66/0x1030 [ 493.803947][ T9392] notifier_call_chain+0x197/0x390 [ 493.809153][ T9392] dev_change_tx_queue_len+0x121/0x260 [ 493.814642][ T9392] ? dev_set_mtu+0x170/0x170 [ 493.819378][ T9392] ? dev_change_flags+0xe8/0x1a0 [ 493.824346][ T9392] do_setlink+0xf93/0x3fb0 [ 493.828792][ T9392] ? arch_stack_walk+0x160/0x190 [ 493.833767][ T9392] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 493.839966][ T9392] ? stack_trace_save+0x9c/0xe0 [ 493.844855][ T9392] ? stack_trace_snprint+0xf0/0xf0 [ 493.849993][ T9392] ? __stack_depot_save+0x1f/0x630 [ 493.855142][ T9392] ? __nla_validate_parse+0x22dc/0x2cd0 [ 493.860838][ T9392] ? netlink_rcv_skb+0x216/0x480 [ 493.865975][ T9392] ? netlink_unicast+0x751/0x8d0 [ 493.871067][ T9392] ? netlink_sendmsg+0x8c1/0xbe0 [ 493.876046][ T9392] ? __nla_validate+0x50/0x50 [ 493.880770][ T9392] ? validate_linkmsg+0x719/0x910 [ 493.885836][ T9392] rtnl_newlink+0x10af/0x2020 [ 493.890633][ T9392] ? rtnl_newlink+0xad1/0x2020 [ 493.895452][ T9392] ? rtnl_setlink+0x4b0/0x4b0 [ 493.900169][ T9392] ? trace_raw_output_contention_end+0xd0/0xd0 [ 493.906489][ T9392] ? rcu_is_watching+0x15/0xb0 [ 493.911284][ T9392] ? trace_contention_end+0x39/0xe0 [ 493.916515][ T9392] ? __mutex_lock+0x304/0xcc0 [ 493.921344][ T9392] ? rtnl_setlink+0x4b0/0x4b0 [ 493.926062][ T9392] rtnetlink_rcv_msg+0x7c7/0xf10 [ 493.931033][ T9392] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 493.936259][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 493.941493][ T9392] ? rtnetlink_bind+0x80/0x80 [ 493.946239][ T9392] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 493.952267][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 493.957530][ T9392] ? lock_chain_count+0x20/0x20 [ 493.962436][ T9392] ? __local_bh_enable_ip+0x12e/0x1c0 [ 493.969433][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 493.974682][ T9392] ? __local_bh_enable_ip+0x12e/0x1c0 [ 493.980082][ T9392] ? _local_bh_enable+0xa0/0xa0 [ 493.984966][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 493.990104][ T9392] ? __dev_queue_xmit+0x1449/0x35a0 [ 493.995405][ T9392] ? __dev_queue_xmit+0x245/0x35a0 [ 494.000589][ T9392] ? ref_tracker_free+0x634/0x7d0 [ 494.005638][ T9392] ? __copy_skb_header+0xa7/0x550 [ 494.010708][ T9392] netlink_rcv_skb+0x216/0x480 [ 494.015499][ T9392] ? rtnetlink_bind+0x80/0x80 [ 494.020203][ T9392] ? netlink_ack+0x1110/0x1110 [ 494.025007][ T9392] ? __lock_acquire+0x7c80/0x7c80 [ 494.030062][ T9392] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.035285][ T9392] netlink_unicast+0x751/0x8d0 [ 494.040090][ T9392] netlink_sendmsg+0x8c1/0xbe0 [ 494.044888][ T9392] ? netlink_getsockopt+0x580/0x580 [ 494.050139][ T9392] ? aa_sock_msg_perm+0x94/0x150 [ 494.055126][ T9392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 494.060442][ T9392] ? security_socket_sendmsg+0x80/0xa0 [ 494.066015][ T9392] ? netlink_getsockopt+0x580/0x580 [ 494.071349][ T9392] ____sys_sendmsg+0x5bf/0x950 [ 494.076144][ T9392] ? __asan_memset+0x22/0x40 [ 494.080757][ T9392] ? __sys_sendmsg_sock+0x30/0x30 [ 494.085810][ T9392] ? __import_iovec+0x5f2/0x860 [ 494.090697][ T9392] ? import_iovec+0x73/0xa0 [ 494.095228][ T9392] ___sys_sendmsg+0x220/0x290 [ 494.099938][ T9392] ? __sys_sendmsg+0x270/0x270 [ 494.104747][ T9392] ? debug_mutex_init+0x38/0x70 [ 494.109641][ T9392] __se_sys_sendmsg+0x1a5/0x270 [ 494.114531][ T9392] ? __x64_sys_sendmsg+0x80/0x80 [ 494.119515][ T9392] ? lockdep_hardirqs_on+0x98/0x150 [ 494.124750][ T9392] do_syscall_64+0x55/0xb0 [ 494.129189][ T9392] ? clear_bhb_loop+0x40/0x90 [ 494.133884][ T9392] ? clear_bhb_loop+0x40/0x90 [ 494.138599][ T9392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.144529][ T9392] RIP: 0033:0x7f2e7b78ebe9 [ 494.148975][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.168603][ T9392] RSP: 002b:00007f2e7c58b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.177067][ T9392] RAX: ffffffffffffffda RBX: 00007f2e7b9c5fa0 RCX: 00007f2e7b78ebe9 [ 494.185065][ T9392] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 494.193137][ T9392] RBP: 00007f2e7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.201128][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.209116][ T9392] R13: 00007f2e7b9c6038 R14: 00007f2e7b9c5fa0 R15: 00007ffd47770cb8 [ 494.217127][ T9392] [ 494.220424][ T9392] Kernel Offset: disabled [ 494.224915][ T9392] Rebooting in 86400 seconds..