last executing test programs: 4m12.703031245s ago: executing program 3 (id=238): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x10}]) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) mq_timedsend(r4, &(0x7f00000001c0)="ca58a3accb1d8123c14f2479c1fb40ec3c8b6a1c07f2d28b9eefaa839fe66d5cee3fcca54df0fd2629d8afa2d55ea8e0c3a9b5ca87270a5a0465b5ad42cfb1b6d99c191986a1bed3cda6914e3b68b13644f0a2b9fd0f3613ac10ee425c13f8d282a42e8c17cbfe78fcc360851c2a0e21fd0c8c18822a5d807f3d4aa497c649b7404b7411e6edae5b0d3799ce8e8b2832cb369399624ab97fce6479e7d37b7cd6215e2502fc491b", 0xa7, 0x81, &(0x7f0000000280)={0x77359400}) 4m11.771146876s ago: executing program 3 (id=243): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000100)={0x40, 0x30, 0x4, "2e161ddf"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4m7.980962629s ago: executing program 3 (id=252): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x9, 0x47}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) 4m7.812256405s ago: executing program 1 (id=253): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) 4m6.159897967s ago: executing program 3 (id=258): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0xc0, 0xed, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0xff}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0x3, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe3, 0xc0, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x5, 0x7, {0x8, 0x25, 0x1, 0x2, 0xd597e6b13b7f2ff3, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4096}, {&(0x7f0000001880)=""/15}, {&(0x7f00000018c0)=""/81}, {&(0x7f0000001940)=""/25}, {&(0x7f0000001980)=""/97}, {&(0x7f0000001a00)=""/56}], 0x2b, 0x0, 0x0, 0x44041}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 4m5.96012075s ago: executing program 1 (id=259): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x5, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00004e15"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 4m2.295570247s ago: executing program 4 (id=266): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x8a880, 0x0) read$dsp(r0, &(0x7f0000000140)=""/60, 0xffffffcc) read$dsp(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x10000, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x40, @local, 0x46}}, 0x400, 0x8}, 0x90) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xa2040, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f770102030109021200010000100009"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000340)={&(0x7f0000003740)=[{0x81, 0x1, 0x3a, &(0x7f0000000400)="2c8b3b286304e8d5c890b0bece5488cbb1a2b6b1216cd5d0d2def8afa389064daebabc2f46fc29b159aa9c736f6b19962b03106f7cec0d177cbf"}], 0x1}) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x2) dup2(r6, r4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0x3, @empty, 0x8}}}, 0x90) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -92'], 0x2d, 0xfffffffffffffff9) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) 4m1.997646641s ago: executing program 3 (id=268): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x3}, 0x18, 0x1) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000027c00000400fc800c000180083f6001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x8, 0x8}, 0x100, './file0\x00'}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001104ffffffff3f00000000000008", @ANYRES32=0x0, @ANYBLOB="a5fdad88900a00002c0012800b00010062726964676500001c00028008001d000720000005002d000100000006000600460e00000a0001"], 0x58}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x28042, 0x0) readv(r5, &(0x7f00000019c0), 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$UFFDIO_WAKE(r8, 0x8010aa02, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x6, 0x3013, 0x2, 0x2, 0x8, 0x1}}) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) 4m1.078112105s ago: executing program 1 (id=269): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xffff, 0x4a99, 0x5, 0x5, 0x14, "a462356433fe36b977da5490f038d8fbdfde50"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m59.388597172s ago: executing program 3 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m56.41083144s ago: executing program 4 (id=274): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="000101000000af"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x40, 0xe, 0x8, "b0d19c80be0d571e"}, 0x0, 0x0, 0x0, 0x0}) 3m55.799167778s ago: executing program 1 (id=275): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0xc0, 0xed, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0xff}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0x3, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe3, 0xc0, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x5, 0x7, {0x8, 0x25, 0x1, 0x2, 0xd597e6b13b7f2ff3, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4096}, {&(0x7f0000001880)=""/15}, {&(0x7f00000018c0)=""/81}, {&(0x7f0000001940)=""/25}, {&(0x7f0000001980)=""/97}, {&(0x7f0000001a00)=""/56}], 0x2b, 0x0, 0x0, 0x44041}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001200576d10000010fb", @ANYRES32=0x0, @ANYRES16=r2], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0x6994, 0x80, 0x0, 0xbfdffffc}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000000)) 3m47.050010907s ago: executing program 0 (id=278): socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) r0 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4650, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x1, 0xc0, 0xed, {0x8, 0xb, 0x1, 0x0, 0x1, 0xff, 0x20, 0xff}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1000, 0x3, 0x9, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xe3, 0xc0, 0x3, {0x8, 0x25, 0x1, 0x2, 0x3, 0x7, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x5, 0x7, {0x8, 0x25, 0x1, 0x2, 0xd597e6b13b7f2ff3, 0x4}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4096}, {&(0x7f0000001880)=""/15}, {&(0x7f00000018c0)=""/81}, {&(0x7f0000001940)=""/25}, {&(0x7f0000001980)=""/97}, {&(0x7f0000001a00)=""/56}], 0x2b, 0x0, 0x0, 0x44041}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 3m46.907841928s ago: executing program 4 (id=279): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0xff00) 3m46.87019047s ago: executing program 1 (id=280): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x5, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00004e15"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 3m38.611110474s ago: executing program 32 (id=271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000340)={[{0x4fba, 0x7, 0xfd, 0x7, 0x98, 0xf6, 0x1, 0x1, 0x9, 0x2, 0x5, 0x6, 0x8}, {0x10, 0x401, 0xf2, 0xa6, 0x7, 0x6, 0x31, 0x15, 0x1, 0x7, 0x7f, 0xd, 0x201}, {0x80, 0x4c3e, 0x7f, 0xc, 0x4c, 0x8, 0x4, 0x4, 0x1b, 0x7, 0x0, 0x6, 0x6}], 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m38.146511197s ago: executing program 0 (id=283): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000174000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m38.146073068s ago: executing program 1 (id=284): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x81, &(0x7f0000000280)={0x77359400}) 3m38.145646953s ago: executing program 4 (id=285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@rr={0x7, 0x3, 0xfe}]}}}}}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x160, 0x0, 0xfffffffffffffff8, [{{0x3, 0x2, 0x6, 0x7, 0x3c88, 0x9, {0x4, 0x5, 0x4, 0x1, 0x3, 0x12e, 0x7, 0x7, 0xfffffffa, 0xc000, 0x0, r4, r5, 0x0, 0x8}}, {0xffffdfffffffffff, 0x401, 0xb, 0x8, '&+%*!\xeb(^-@\x00'}}, {{0x6, 0x2, 0x1, 0xffffffffffffffff, 0xc, 0x8, {0x5, 0x4, 0x3, 0x0, 0x28, 0x7ff, 0xc2, 0xce1, 0x7, 0x2000, 0x3, r4, r5, 0x6, 0x81}}, {0xffffffffffffffff, 0x7, 0xb, 0x7, '&+%*!\xeb(^-@\x00'}}]}, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2040002, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}, {@default_permissions}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@seclabel}]}}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]}) r7 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xaf, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0xf4, 0x1, {0x22, 0xa17}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa8, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1, 0x6, 0xc0, 0xff, 0x5}, 0x93, &(0x7f0000000600)={0x5, 0xf, 0x93, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0xd, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xff, 0x4, 0x401}, @generic={0x79, 0x10, 0x3, "2417785a51d038507532fc1f8782f05220da20ff8df59b23df75740945c205a66b8bc5fa184815b652a05b5738bfd02012e112fee49ff653770681ac5edd5eb28889d7a0256e33efd0140f031effebe0aa957f8dafa80ec99e87dd1c651d312c6da2c934d9a44377b0b849a112853e20db698ffe347d"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x416}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r8, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", '\x00', "0300", "798a202d", ["c2fffedbff00ffdfffffffff", "ffff190008a215016c4a2371", "1d25aaedd22555024b00dc1a", "38a70ed483c99b9f1600d333"]}) 3m28.586075991s ago: executing program 0 (id=287): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 3m28.48981389s ago: executing program 4 (id=289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="000101000000af"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000200)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x40, 0xe, 0x8, "b0d19c80be0d571e"}, 0x0, 0x0, 0x0, 0x0}) 3m24.578755798s ago: executing program 0 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 3m22.374208969s ago: executing program 33 (id=284): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f00000000c0)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x81, &(0x7f0000000280)={0x77359400}) 3m20.371395172s ago: executing program 4 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x5, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00004e15"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 3m19.185828347s ago: executing program 0 (id=294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r1, 0x0, 0xff00) 3m14.618351666s ago: executing program 0 (id=296): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x2, 0x4, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000280)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000240)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x2004c811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) listen(r2, 0x5) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) read(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x5, 0x8001}) 3m4.784038431s ago: executing program 34 (id=293): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect_ath9k(0x3, 0x97, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e446, [{{0x9, 0x2, 0xfffffffffffffdf8}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x8, 0x5, 0x8}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00004e15"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2m59.166442375s ago: executing program 35 (id=296): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x2, 0x4, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000280)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000240)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x2004c811}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) listen(r2, 0x5) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) read(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x5, 0x8001}) 31.3122266s ago: executing program 2 (id=324): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1000, 0x10009, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3, 0x7}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 29.549578612s ago: executing program 2 (id=325): syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="1a0110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200026df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) 22.895322323s ago: executing program 2 (id=326): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="400c0e"], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000240)=[{0x1, 0x1000, 0x54, &(0x7f0000000280)="aed0bbaa8045035c0eec322801010000701572d2e5c8bba011793848c69ef3d3fde0e042dadd4ae143e99759d5d8cf19bffe04e7c19270289850cbf38dd5ae68d4217cb961542382ea27c3949921b7a3a29d46a2"}], 0x1}) 16.714763248s ago: executing program 2 (id=327): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) preadv2(r0, 0x0, 0x0, 0x40000000, 0x1, 0x13) write$UHID_INPUT(r1, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000", 0xb7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10.91962154s ago: executing program 2 (id=328): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x2c}}, 0x0) sendmsg$netlink(r3, 0x0, 0x20000000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x161942, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x10002, 0x8822d55593a2179}, 0xc) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_usb_connect(0x2, 0x24, 0x0, 0x0) 0s ago: executing program 2 (id=329): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) ustat(0x7, 0x0) r1 = epoll_create1(0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x16b301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg$unix(r4, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0, 0x18}}], 0x1, 0x121, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): bInterval 0, changing to 7 [ 112.501057][ T5588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.501077][ T5588] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.501115][ T5588] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 112.501134][ T5588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.539248][ T5588] usb 1-1: config 0 descriptor?? [ 112.947462][ T6056] binder: 6055:6056 ioctl c0306201 0 returned -14 [ 112.991607][ T5588] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.991653][ T5588] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.991769][ T5588] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.991796][ T5588] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 112.991821][ T5588] microsoft 0003:045E:07DA.0002: unknown main item tag 0x4 [ 112.991845][ T5588] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 113.550915][ T5588] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 114.070682][ T5588] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 114.160476][ T5588] usb 1-1: USB disconnect, device number 4 [ 114.189794][ T5330] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 114.245746][ T6064] fuse: Unknown parameter 'use00000000000000000000' [ 114.364019][ T5330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.365320][ T5330] usb 3-1: not running at top speed; connect to a high speed hub [ 114.400897][ T5330] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 114.403032][ T6061] fido_id[6061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 114.440974][ T5330] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 114.441000][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.441016][ T5330] usb 3-1: Product: г‰ќв¶—жљ…вЎл©Ѕк‘«пµ‹Ц„пЂ¶г Ћ [ 114.441029][ T5330] usb 3-1: Manufacturer: СЏ [ 114.901707][ T5330] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 115.110422][ T5330] usb 3-1: USB disconnect, device number 6 [ 115.142113][ T6056] syz.1.66 (6056): drop_caches: 2 [ 115.480708][ T5610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.639843][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 115.661706][ T5610] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 115.661733][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.661750][ T5610] usb 5-1: Product: syz [ 115.661763][ T5610] usb 5-1: Manufacturer: syz [ 115.661775][ T5610] usb 5-1: SerialNumber: syz [ 116.166113][ T5330] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.314922][ T5610] usb 5-1: 1:1: cannot get freq (v2/v3): err -32 [ 116.335789][ T5330] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.335816][ T5330] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 116.335832][ T5330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.335943][ T5330] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 116.335966][ T5330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 116.335988][ T5330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 116.416726][ T5330] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.416744][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.416753][ T5330] usb 4-1: Product: syz [ 116.416760][ T5330] usb 4-1: Manufacturer: syz [ 116.520014][ T5610] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 116.524143][ T5610] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 116.524969][ T5610] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 116.535491][ T6094] binder: 6090:6094 ioctl c0306201 0 returned -14 [ 116.593409][ T5330] cdc_wdm 4-1:1.0: skipping garbage [ 116.593428][ T5330] cdc_wdm 4-1:1.0: skipping garbage [ 116.593982][ T5330] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 116.854822][ T31] usb 4-1: USB disconnect, device number 4 [ 116.962330][ T5610] usb 5-1: USB disconnect, device number 2 [ 117.860480][ T6094] syz.2.79 (6094): drop_caches: 2 [ 118.249858][ T819] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.360698][ T5610] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.401592][ T819] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 118.405997][ T819] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 118.406025][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.407976][ T819] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 118.407994][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.409105][ T819] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 118.409129][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.442790][ T819] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 118.442816][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.445031][ T819] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 118.445055][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.449123][ T819] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 118.449147][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.507575][ T819] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 118.507600][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.509495][ T819] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 118.509519][ T819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.576663][ T819] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.576690][ T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.576708][ T819] usb 4-1: Product: syz [ 118.576720][ T819] usb 4-1: Manufacturer: syz [ 118.576732][ T819] usb 4-1: SerialNumber: syz [ 118.649019][ T5610] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 118.649070][ T5610] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.649109][ T5610] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 118.649129][ T5610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.725432][ T5610] usb 5-1: config 0 descriptor?? [ 118.789589][ T819] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.104792][ T5610] usb 5-1: string descriptor 0 read error: -71 [ 119.128742][ T5610] ath6kl: Failed to submit usb control message: -71 [ 119.128790][ T5610] ath6kl: unable to send the bmi data to the device: -71 [ 119.128802][ T5610] ath6kl: Unable to send get target info: -71 [ 119.146998][ T5709] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.177382][ T5610] ath6kl: Failed to init ath6kl core: -71 [ 119.178046][ T5610] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 119.215968][ T5610] usb 5-1: USB disconnect, device number 3 [ 119.833556][ T5610] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.038290][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 120.038320][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 120.038359][ T5610] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 120.038378][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.093889][ T5610] usb 1-1: config 0 descriptor?? [ 120.219890][ T819] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 120.384230][ T819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.413841][ T819] usb 3-1: not running at top speed; connect to a high speed hub [ 120.415777][ T819] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 120.450067][ T5709] usb 4-1: Service connection timeout for: 256 [ 120.450090][ T5709] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 120.472431][ T819] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 120.472458][ T819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.472545][ T819] usb 3-1: Product: г‰ќв¶—жљ…вЎл©Ѕк‘«пµ‹Ц„ [ 120.472559][ T819] usb 3-1: Manufacturer: СЏ [ 120.642455][ T6121] loop9: detected capacity change from 0 to 7 [ 120.661833][ T5610] ath6kl: Failed to submit usb control message: -71 [ 120.661880][ T5610] ath6kl: unable to send the bmi data to the device: -71 [ 120.661893][ T5610] ath6kl: Unable to send get target info: -71 [ 120.697564][ T5610] ath6kl: Failed to init ath6kl core: -71 [ 120.722616][ T5610] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 120.752373][ T5709] ath9k_htc: Failed to initialize the device [ 120.755099][ C0] blk_print_req_error: 11 callbacks suppressed [ 120.755117][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.755144][ C0] buffer_io_error: 10 callbacks suppressed [ 120.755155][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.756179][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.756205][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.764891][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.764924][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.775015][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.775049][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.777889][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.777920][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.779488][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.779516][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.871057][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.871093][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.871342][ T6121] ldm_validate_partition_table(): Disk read failed. [ 120.894366][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.894402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.896506][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.896536][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.907959][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.908049][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 120.953581][ T6121] Dev loop9: unable to read RDB block 0 [ 120.956609][ T6121] loop9: unable to read partition table [ 120.956831][ T6121] loop9: partition table beyond EOD, truncated [ 120.956865][ T6121] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 120.989616][ T5610] usb 1-1: USB disconnect, device number 5 [ 121.089314][ T819] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 121.408882][ T5709] usb 4-1: ath9k_htc: USB layer deinitialized [ 121.688010][ T819] usb 3-1: USB disconnect, device number 7 [ 121.692081][ T5716] usb 4-1: USB disconnect, device number 5 [ 121.992217][ T6134] process 'syz.1.91' launched './file0' with NULL argv: empty string added [ 122.743457][ T819] IPVS: starting estimator thread 0... [ 122.846071][ T6156] IPVS: using max 15 ests per chain, 36000 per kthread [ 123.477451][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b7dc00: rx timeout, send abort [ 123.929901][ T5610] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.979144][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062b7dc00: abort rx timeout. Force session deactivation [ 123.999821][ T5716] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.085332][ T5610] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.091579][ T5610] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 124.091621][ T5610] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 124.124366][ T5610] usb 1-1: string descriptor 0 read error: -22 [ 124.124522][ T5610] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 124.124542][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.152287][ T5716] usb 2-1: unable to get BOS descriptor or descriptor too short [ 124.152826][ T5716] usb 2-1: not running at top speed; connect to a high speed hub [ 124.158302][ T5716] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 124.177216][ T5716] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 124.177243][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.177355][ T5716] usb 2-1: Product: г‰ќв¶—жљ…вЎл©Ѕк‘«пµ‹Ц„ [ 124.177368][ T5716] usb 2-1: Manufacturer: СЏ [ 124.420130][ T819] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.557470][ T5716] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 124.559800][ T819] usb 4-1: device descriptor read/64, error -71 [ 124.701253][ T5716] usb 2-1: USB disconnect, device number 4 [ 124.861362][ T819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.000009][ T819] usb 4-1: device descriptor read/64, error -71 [ 125.029839][ T5709] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.109895][ T5330] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.110125][ T819] usb usb4-port1: attempt power cycle [ 125.195458][ T5709] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 125.195481][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.217097][ T5709] usb 3-1: config 0 descriptor?? [ 125.280525][ T5330] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 125.282732][ T5330] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 125.282754][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.317885][ T5330] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 125.317912][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.319151][ T5330] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 125.319173][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.349813][ T5330] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 125.349840][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.376834][ T5330] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 125.376852][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.396157][ T5330] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 125.396182][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.398132][ T5330] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 125.398156][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.399297][ T5330] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 125.399318][ T5330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.446460][ T5330] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.446478][ T5330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.446487][ T5330] usb 5-1: Product: syz [ 125.446494][ T5330] usb 5-1: Manufacturer: syz [ 125.446501][ T5330] usb 5-1: SerialNumber: syz [ 125.469791][ T819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.497934][ T819] usb 4-1: device descriptor read/8, error -71 [ 125.513439][ T5330] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 125.561347][ T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 125.729922][ T819] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.751117][ T819] usb 4-1: device descriptor read/8, error -71 [ 125.860362][ T819] usb usb4-port1: unable to enumerate USB device [ 126.159851][ T819] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.309790][ T819] usb 2-1: Using ep0 maxpacket: 8 [ 126.315785][ T819] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 126.315834][ T819] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.315853][ T819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.315873][ T819] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.315893][ T819] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.315987][ T819] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.316007][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.609217][ T819] usb 2-1: usb_control_msg returned -32 [ 126.609265][ T819] usbtmc 2-1:16.0: can't read capabilities [ 126.720718][ T819] usb 1-1: USB disconnect, device number 6 [ 126.851423][ T31] usb 5-1: Service connection timeout for: 256 [ 126.851445][ T31] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 127.021707][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.025375][ T31] ath9k_htc: Failed to initialize the device [ 127.027274][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.079458][ T31] usb 5-1: ath9k_htc: USB layer deinitialized [ 127.170507][ T5709] usb 5-1: USB disconnect, device number 4 [ 128.131241][ T5709] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.179874][ T5716] usb 3-1: USB disconnect, device number 8 [ 128.291417][ T5709] usb 5-1: Using ep0 maxpacket: 16 [ 128.296426][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.296456][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.296475][ T5709] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.296506][ T5709] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.296516][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.350940][ T5709] usb 5-1: config 0 descriptor?? [ 128.869897][ T5330] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.915998][ T5709] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 128.916035][ T5709] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 128.916069][ T5709] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 128.916090][ T5709] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 128.916113][ T5709] microsoft 0003:045E:07DA.0003: unknown main item tag 0x4 [ 128.916137][ T5709] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 129.022020][ T5330] usb 4-1: Using ep0 maxpacket: 8 [ 129.024733][ T5330] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 129.024752][ T5330] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 129.024764][ T5330] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.024774][ T5330] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.024795][ T5330] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.024805][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.165949][ T5716] usb 2-1: USB disconnect, device number 5 [ 129.233345][ T5709] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input6 [ 129.345466][ T5330] usbtmc 4-1:16.0: bulk endpoints not found [ 129.409231][ T5709] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 129.546623][ T5709] usb 5-1: USB disconnect, device number 5 [ 129.733744][ T6213] fido_id[6213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 130.095153][ T6222] binder: 6221:6222 ioctl c0306201 0 returned -14 [ 130.249773][ T5730] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.402394][ T5730] usb 2-1: Using ep0 maxpacket: 16 [ 130.404368][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.404395][ T5730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.404414][ T5730] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.404449][ T5730] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.404468][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.483943][ T5730] usb 2-1: config 0 descriptor?? [ 130.859767][ T5610] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.920603][ T5730] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.920637][ T5730] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.920662][ T5730] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.920685][ T5730] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 130.920709][ T5730] microsoft 0003:045E:07DA.0004: unknown main item tag 0x4 [ 130.920732][ T5730] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 131.012948][ T5610] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 131.012973][ T5610] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.012989][ T5610] usb 3-1: config 0 has no interface number 0 [ 131.013030][ T5610] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 131.013049][ T5610] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.043429][ T5610] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 131.043456][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.043472][ T5610] usb 3-1: Product: syz [ 131.043484][ T5610] usb 3-1: Manufacturer: syz [ 131.043496][ T5610] usb 3-1: SerialNumber: syz [ 131.104213][ T5730] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0004/input/input7 [ 131.179769][ T5730] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 131.182329][ T5610] usb 3-1: config 0 descriptor?? [ 131.247100][ T5610] cyberjack 3-1:0.69: required endpoints missing [ 131.265208][ T5730] usb 2-1: USB disconnect, device number 6 [ 131.389312][ T6236] fido_id[6236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 131.643735][ T5709] usb 4-1: USB disconnect, device number 10 [ 132.039365][ T6242] fuse: Unknown parameter 'user_i00000000000000000000' [ 132.723279][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.723347][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911287][ T5709] usb 3-1: USB disconnect, device number 9 [ 132.931696][ T5730] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.017382][ T6252] tipc: Failed to remove unknown binding: 66,0,0/0:3776746537/3776746539 [ 133.017489][ T6252] tipc: Failed to remove unknown binding: 66,0,0/0:3776746537/3776746538 [ 133.091266][ T5730] usb 2-1: no configurations [ 133.091292][ T5730] usb 2-1: can't read configurations, error -22 [ 133.220287][ T5730] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.372864][ T5730] usb 2-1: no configurations [ 133.372883][ T5730] usb 2-1: can't read configurations, error -22 [ 133.373264][ T5730] usb usb2-port1: attempt power cycle [ 133.712796][ T5730] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 133.737659][ T5730] usb 2-1: no configurations [ 133.737677][ T5730] usb 2-1: can't read configurations, error -22 [ 133.859890][ T5730] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 133.879788][ T5716] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.922661][ T5730] usb 2-1: no configurations [ 133.922679][ T5730] usb 2-1: can't read configurations, error -22 [ 133.923147][ T5730] usb usb2-port1: unable to enumerate USB device [ 134.085376][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.089478][ T5716] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 134.089521][ T5716] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 134.135847][ T5716] usb 1-1: string descriptor 0 read error: -22 [ 134.135941][ T5716] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 134.135953][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.959806][ T5709] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 134.978671][ T6275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.140'. [ 135.109839][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 135.112371][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.112399][ T5709] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.112441][ T5709] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.112462][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.167676][ T5709] usb 4-1: config 0 descriptor?? [ 135.404025][ T5709] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 135.593806][ T6271] iowarrior 4-1:0.0: Error -90 while submitting URB [ 135.596013][ T5610] usb 4-1: USB disconnect, device number 11 [ 135.982127][ T6286] fuse: Unknown parameter 'user_i00000000000000000000' [ 136.467069][ T6292] binder: 6289:6292 ioctl c0306201 0 returned -14 [ 136.753876][ T5716] usb 1-1: USB disconnect, device number 7 [ 137.306521][ T6300] loop9: detected capacity change from 0 to 7 [ 137.322163][ C1] blk_print_req_error: 10 callbacks suppressed [ 137.322182][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.322217][ C1] buffer_io_error: 10 callbacks suppressed [ 137.322228][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.340059][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.340094][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.346193][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.346232][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.421243][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.421280][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.429407][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.429430][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.444855][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.444890][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.448900][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.448930][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.456085][ T6300] ldm_validate_partition_table(): Disk read failed. [ 137.598962][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.598986][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.623914][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.623935][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.629815][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.629844][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.641364][ T6300] Dev loop9: unable to read RDB block 0 [ 137.678398][ T6300] loop9: unable to read partition table [ 137.678616][ T6300] loop9: partition table beyond EOD, truncated [ 137.678651][ T6300] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 137.861257][ T5610] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 138.054930][ T5610] usb 5-1: not running at top speed; connect to a high speed hub [ 138.062064][ T5610] usb 5-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.062093][ T5610] usb 5-1: config 1 interface 0 has no altsetting 0 [ 138.068027][ T5610] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 138.068054][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.068071][ T5610] usb 5-1: Product: syz [ 138.068084][ T5610] usb 5-1: Manufacturer: syz [ 138.068095][ T5610] usb 5-1: SerialNumber: syz [ 139.654805][ T6292] syz.3.147 (6292): drop_caches: 2 [ 140.351932][ T5610] usbhid 5-1:1.0: can't add hid device: -71 [ 140.352043][ T5610] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 140.432187][ T5610] usb 5-1: USB disconnect, device number 6 [ 141.191063][ T5709] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 141.362141][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.362165][ T5709] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.373763][ T5709] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.373789][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.373806][ T5709] usb 2-1: Product: syz [ 141.373819][ T5709] usb 2-1: Manufacturer: syz [ 141.373831][ T5709] usb 2-1: SerialNumber: syz [ 141.467084][ T5709] usb 2-1: config 0 descriptor?? [ 141.971640][ T980] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.149961][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 142.152744][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.152762][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.152782][ T980] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.152793][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.208981][ T980] usb 1-1: config 0 descriptor?? [ 142.481082][ T980] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 142.627191][ T6319] iowarrior 1-1:0.0: Error -90 while submitting URB [ 142.674822][ T5709] usb 1-1: USB disconnect, device number 8 [ 142.743001][ T6329] syzkaller0: entered promiscuous mode [ 142.743025][ T6329] syzkaller0: entered allmulticast mode [ 143.910825][ T5716] usb 2-1: USB disconnect, device number 11 [ 144.374957][ T6344] fuse: Unknown parameter 'user_id00000000000000000000' [ 145.532725][ T6353] loop9: detected capacity change from 0 to 7 [ 145.561661][ C0] blk_print_req_error: 10 callbacks suppressed [ 145.561680][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.561706][ C0] buffer_io_error: 10 callbacks suppressed [ 145.561717][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.562020][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.562046][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.562317][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.562342][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.562589][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.562611][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.562915][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.562940][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.563362][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.563388][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.563640][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.563665][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.563753][ T6353] ldm_validate_partition_table(): Disk read failed. [ 145.563938][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.563963][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.564221][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.564246][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.564495][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 145.564519][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.564858][ T6353] Dev loop9: unable to read RDB block 0 [ 145.565844][ T6353] loop9: unable to read partition table [ 145.566071][ T6353] loop9: partition table beyond EOD, truncated [ 145.567575][ T6353] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 145.744811][ T6356] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 145.744839][ T6356] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 146.051993][ T980] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 147.274556][ T980] usb 3-1: not running at top speed; connect to a high speed hub [ 147.275789][ T980] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.275818][ T980] usb 3-1: config 1 interface 0 has no altsetting 0 [ 147.282622][ T980] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 147.282648][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.282664][ T980] usb 3-1: Product: syz [ 147.282676][ T980] usb 3-1: Manufacturer: syz [ 147.282687][ T980] usb 3-1: SerialNumber: syz [ 148.701600][ T980] usb 3-1: can't set config #1, error -71 [ 148.718294][ T980] usb 3-1: USB disconnect, device number 10 [ 149.035511][ T5867] udevd[5867]: setting mode of /dev/bus/usb/003/010 to 020664 failed: No such file or directory [ 149.035681][ T5867] udevd[5867]: setting owner of /dev/bus/usb/003/010 to uid=0, gid=0 failed: No such file or directory [ 149.553519][ T6372] syzkaller0: entered promiscuous mode [ 149.553543][ T6372] syzkaller0: entered allmulticast mode [ 149.647383][ T5709] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 149.794595][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.795159][ T5709] usb 4-1: not running at top speed; connect to a high speed hub [ 149.798998][ T5709] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 149.823470][ T5709] usb 4-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 149.823498][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.823515][ T5709] usb 4-1: Manufacturer: г‰ќв¶—жљ…вЎл©Ѕк‘«пµ‹Ц„пЂ¶г Ћ [ 149.823528][ T5709] usb 4-1: SerialNumber: syz [ 149.902093][ T5716] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.045175][ T5716] usb 5-1: device descriptor read/64, error -71 [ 150.156154][ T5709] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 150.279752][ T5716] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.309329][ T5709] usb 4-1: USB disconnect, device number 12 [ 150.409793][ T5716] usb 5-1: device descriptor read/64, error -71 [ 150.499882][ T5610] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.520423][ T5716] usb usb5-port1: attempt power cycle [ 150.675449][ T5610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.675472][ T5610] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.677716][ T5610] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 150.677742][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.677759][ T5610] usb 1-1: Product: syz [ 150.677771][ T5610] usb 1-1: Manufacturer: syz [ 150.677782][ T5610] usb 1-1: SerialNumber: syz [ 150.724478][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad95800: rx timeout, send abort [ 150.746792][ T5610] usb 1-1: config 0 descriptor?? [ 150.849765][ T5730] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 150.869768][ T5716] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.890636][ T5716] usb 5-1: device descriptor read/8, error -71 [ 151.001050][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 151.015972][ T5730] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 151.015999][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.016016][ T5730] usb 3-1: Product: syz [ 151.016028][ T5730] usb 3-1: Manufacturer: syz [ 151.016040][ T5730] usb 3-1: SerialNumber: syz [ 151.134857][ T6381] kvm: emulating exchange as write [ 151.149998][ T5716] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.183076][ T5716] usb 5-1: device descriptor read/8, error -71 [ 151.224540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ad95800: abort rx timeout. Force session deactivation [ 151.298627][ T5716] usb usb5-port1: unable to enumerate USB device [ 151.663819][ T5730] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 151.871213][ T5730] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 151.875746][ T5730] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 151.876380][ T5730] usb 3-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 151.989774][ T819] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 152.076155][ T5730] usb 3-1: USB disconnect, device number 11 [ 152.143014][ T819] usb 2-1: Using ep0 maxpacket: 16 [ 152.157847][ T819] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 152.157872][ T819] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 152.157890][ T819] usb 2-1: config 166 has no interface number 0 [ 152.157904][ T819] usb 2-1: config 166 has no interface number 1 [ 152.157954][ T819] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 152.157973][ T819] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 152.158006][ T819] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 152.158028][ T819] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 152.158050][ T819] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 152.158073][ T819] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 152.158093][ T819] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 152.158115][ T819] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 152.158221][ T819] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.158243][ T819] usb 2-1: config 166 interface 177 has no altsetting 0 [ 152.159316][ T819] usb 2-1: config 166 interface 34 has no altsetting 0 [ 152.171517][ T819] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 152.171542][ T819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.171559][ T819] usb 2-1: Product: syz [ 152.171571][ T819] usb 2-1: Manufacturer: syz [ 152.171583][ T819] usb 2-1: SerialNumber: syz [ 152.189902][ T5588] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 152.339794][ T5588] usb 4-1: Using ep0 maxpacket: 8 [ 152.342847][ T5588] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.342875][ T5588] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.342947][ T5588] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.342968][ T5588] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.343005][ T5588] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.343025][ T5588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.651667][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.655170][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.801536][ T5588] usb 4-1: usb_control_msg returned -32 [ 152.801616][ T5588] usbtmc 4-1:16.0: can't read capabilities [ 153.039289][ T6392] fuse: Unknown parameter 'user_id00000000000000000000' [ 153.095996][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'. [ 153.333151][ T5716] usb 1-1: USB disconnect, device number 9 [ 153.397906][ T5588] usb 4-1: USB disconnect, device number 13 [ 154.805540][ T6400] udevd[6400]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.513668][ T819] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 157.790284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 157.888181][ T6414] loop9: detected capacity change from 0 to 7 [ 158.059245][ T819] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 158.232190][ C0] blk_print_req_error: 11 callbacks suppressed [ 158.232206][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.232222][ C0] buffer_io_error: 10 callbacks suppressed [ 158.232227][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.234095][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.234126][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.297712][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.297745][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.297985][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.298010][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.298251][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.298275][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.299008][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.299034][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.302236][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.302266][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.302357][ T6414] ldm_validate_partition_table(): Disk read failed. [ 158.302899][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.302925][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.304357][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.304383][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.306416][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.306451][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 158.306741][ T6414] Dev loop9: unable to read RDB block 0 [ 158.307546][ T6414] loop9: unable to read partition table [ 158.307762][ T6414] loop9: partition table beyond EOD, truncated [ 158.307793][ T6414] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 158.369827][ T5709] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 158.684791][ T5709] usb 4-1: not running at top speed; connect to a high speed hub [ 158.695320][ T5709] usb 4-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.695350][ T5709] usb 4-1: config 1 interface 0 has no altsetting 0 [ 158.702807][ T5709] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 158.702832][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.702858][ T5709] usb 4-1: Product: syz [ 158.702870][ T5709] usb 4-1: Manufacturer: syz [ 158.702882][ T5709] usb 4-1: SerialNumber: syz [ 158.834879][ T819] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 158.934185][ T819] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 158.934236][ T819] uvcvideo 2-1:166.34: No valid video chain found. [ 159.282834][ T819] usb 2-1: USB disconnect, device number 12 [ 160.025713][ T5588] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 160.231059][ T5588] usb 3-1: Using ep0 maxpacket: 16 [ 160.254148][ T5588] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 160.254175][ T5588] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 160.254245][ T5588] usb 3-1: config 166 has no interface number 0 [ 160.254261][ T5588] usb 3-1: config 166 has no interface number 1 [ 160.254313][ T5588] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 160.254331][ T5588] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 160.254419][ T5588] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 160.254441][ T5588] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 160.254463][ T5588] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 160.254486][ T5588] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 160.254729][ T5588] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 160.254753][ T5588] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 160.254781][ T5588] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 160.254804][ T5588] usb 3-1: config 166 interface 177 has no altsetting 0 [ 160.254820][ T5588] usb 3-1: config 166 interface 34 has no altsetting 0 [ 160.714405][ T5588] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 160.714433][ T5588] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.714450][ T5588] usb 3-1: Product: syz [ 160.714462][ T5588] usb 3-1: Manufacturer: syz [ 160.714474][ T5588] usb 3-1: SerialNumber: syz [ 160.928126][ T5709] usbhid 4-1:1.0: can't add hid device: -71 [ 160.928298][ T5709] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 161.054556][ T5709] usb 4-1: USB disconnect, device number 14 [ 161.507006][ T6427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.539963][ T6427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.230013][ T5709] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.334656][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062535800: rx timeout, send abort [ 162.364555][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 162.560661][ T5730] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.593896][ T5709] usb 4-1: device descriptor read/64, error -71 [ 162.684172][ T5588] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 162.730585][ T5730] usb 1-1: no configurations [ 162.730604][ T5730] usb 1-1: can't read configurations, error -22 [ 162.834382][ T5709] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.834733][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062535800: abort rx timeout. Force session deactivation [ 162.889760][ T5730] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.921344][ T5588] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 163.009815][ T5709] usb 4-1: device descriptor read/64, error -71 [ 163.044933][ T5730] usb 1-1: no configurations [ 163.044950][ T5730] usb 1-1: can't read configurations, error -22 [ 163.082903][ T5730] usb usb1-port1: attempt power cycle [ 163.101189][ T5588] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 163.148134][ T5709] usb usb4-port1: attempt power cycle [ 163.168812][ T5588] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 163.168842][ T5588] uvcvideo 3-1:166.34: No valid video chain found. [ 163.204990][ T5588] usb 3-1: USB disconnect, device number 12 [ 163.469840][ T5730] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.496703][ T5730] usb 1-1: no configurations [ 163.496721][ T5730] usb 1-1: can't read configurations, error -22 [ 163.541544][ T5709] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 163.561615][ T5709] usb 4-1: device descriptor read/8, error -71 [ 163.625330][ T5730] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.641536][ T5730] usb 1-1: no configurations [ 163.641554][ T5730] usb 1-1: can't read configurations, error -22 [ 163.667787][ T5730] usb usb1-port1: unable to enumerate USB device [ 163.820809][ T5709] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 163.883968][ T5709] usb 4-1: device descriptor read/8, error -71 [ 163.990235][ T5709] usb usb4-port1: unable to enumerate USB device [ 164.030576][ T6450] fuse: Unknown parameter 'user_id00000000000000000000' [ 164.629874][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 166.091673][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9 [ 166.091705][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024 [ 166.091746][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 166.091766][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.105480][ T31] usb 2-1: config 0 descriptor?? [ 167.175135][ T31] ath6kl: Failed to submit usb control message: -110 [ 167.175179][ T31] ath6kl: unable to send the bmi data to the device: -110 [ 167.175203][ T31] ath6kl: Unable to send get target info: -110 [ 167.181433][ T31] ath6kl: Failed to init ath6kl core: -110 [ 167.182858][ T31] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 167.514517][ T31] usb 2-1: USB disconnect, device number 13 [ 167.677298][ T6463] tipc: Failed to remove unknown binding: 66,0,0/0:2683701744/2683701746 [ 167.677329][ T6463] tipc: Failed to remove unknown binding: 66,0,0/0:2683701744/2683701745 [ 167.692613][ T6463] tipc: Failed to remove unknown binding: 66,0,0/0:2683701744/2683701746 [ 167.692648][ T6463] tipc: Failed to remove unknown binding: 66,0,0/0:2683701744/2683701745 [ 168.061125][ T6474] binder: 6469:6474 ioctl c0306201 0 returned -14 [ 168.259660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 168.462395][ T6474] syz.4.202 (6474): drop_caches: 2 [ 169.009787][ T5610] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 169.422620][ T5610] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 169.422645][ T5610] usb 2-1: config 0 has no interface number 0 [ 169.422687][ T5610] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 169.422709][ T5610] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.422730][ T5610] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.424794][ T5610] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 169.424810][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.424820][ T5610] usb 2-1: Product: syz [ 169.424827][ T5610] usb 2-1: Manufacturer: syz [ 169.424833][ T5610] usb 2-1: SerialNumber: syz [ 169.533825][ T5610] usb 2-1: config 0 descriptor?? [ 169.534682][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 169.553544][ T5610] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 169.641298][ T5610] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 169.686070][ T5610] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 170.225315][ T6491] loop9: detected capacity change from 0 to 7 [ 170.226164][ C0] blk_print_req_error: 10 callbacks suppressed [ 170.226180][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.226207][ C0] buffer_io_error: 10 callbacks suppressed [ 170.226217][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.261060][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.261096][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.271622][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.271655][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.307069][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.307104][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.313626][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.313659][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.314006][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.314039][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.315764][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.315789][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.323710][ T6491] ldm_validate_partition_table(): Disk read failed. [ 170.326242][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.326273][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.331053][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.331086][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.336653][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.336686][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 170.417390][ T6491] Dev loop9: unable to read RDB block 0 [ 170.442291][ T6491] loop9: unable to read partition table [ 170.442568][ T6491] loop9: partition table beyond EOD, truncated [ 170.442598][ T6491] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 170.533127][ T5588] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 170.733034][ T5588] usb 4-1: Using ep0 maxpacket: 32 [ 170.826173][ T5588] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 170.826201][ T5588] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.826218][ T5588] usb 4-1: Product: syz [ 170.826231][ T5588] usb 4-1: Manufacturer: syz [ 170.826242][ T5588] usb 4-1: SerialNumber: syz [ 170.919952][ T5709] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 171.083784][ T5709] usb 3-1: not running at top speed; connect to a high speed hub [ 171.163680][ T5709] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.163711][ T5709] usb 3-1: config 1 interface 0 has no altsetting 0 [ 171.196364][ T5709] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 171.196392][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.196409][ T5709] usb 3-1: Product: syz [ 171.196421][ T5709] usb 3-1: Manufacturer: syz [ 171.196433][ T5709] usb 3-1: SerialNumber: syz [ 172.439998][ T819] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.596688][ T819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.616539][ T819] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 172.616641][ T819] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 172.653139][ T819] usb 1-1: string descriptor 0 read error: -22 [ 172.653343][ T819] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 172.653915][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.172262][ T5588] usb 4-1: USB disconnect, device number 19 [ 173.190987][ T5709] usbhid 3-1:1.0: can't add hid device: -71 [ 173.191115][ T5709] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 173.218737][ T5709] usb 3-1: USB disconnect, device number 13 [ 174.030364][ T980] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 174.058115][ T819] usb 2-1: USB disconnect, device number 14 [ 174.480558][ T980] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 174.484366][ T980] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 174.484393][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.487915][ T980] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 174.487939][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.539766][ T980] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 174.539793][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.542078][ T980] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 174.542103][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.544945][ T980] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 174.544977][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.546972][ T980] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 174.546995][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.553738][ T819] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 174.554630][ T819] cyberjack 2-1:0.69: device disconnected [ 174.618386][ T980] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 174.618415][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.671649][ T980] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 174.671676][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.674284][ T980] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.674310][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.674327][ T980] usb 5-1: Product: syz [ 174.674339][ T980] usb 5-1: Manufacturer: syz [ 174.674351][ T980] usb 5-1: SerialNumber: syz [ 174.867378][ T980] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.082766][ T5610] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.243346][ T6400] udevd[6400]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.540896][ T819] usb 1-1: USB disconnect, device number 14 [ 176.762737][ T5588] usb 5-1: USB disconnect, device number 11 [ 177.132248][ T6521] loop9: detected capacity change from 0 to 7 [ 177.148959][ C0] blk_print_req_error: 11 callbacks suppressed [ 177.148976][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.149003][ C0] buffer_io_error: 10 callbacks suppressed [ 177.149013][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.150941][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.150976][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.153523][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.153552][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.155283][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.155309][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.157052][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.157080][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.158384][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.158410][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.158621][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.158644][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.158735][ T6521] ldm_validate_partition_table(): Disk read failed. [ 177.158914][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.158938][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.161757][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.161785][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.166350][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.166379][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 177.168370][ T6521] Dev loop9: unable to read RDB block 0 [ 177.175774][ T6521] loop9: unable to read partition table [ 177.175984][ T6521] loop9: partition table beyond EOD, truncated [ 177.176000][ T6521] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 177.358016][ T5610] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 177.426321][ T5610] ath9k_htc: Failed to initialize the device [ 177.435300][ T5709] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 177.436247][ T5588] usb 5-1: ath9k_htc: USB layer deinitialized [ 177.623821][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 177.627620][ T5709] usb 2-1: not running at top speed; connect to a high speed hub [ 177.712453][ T5709] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 177.760710][ T5709] usb 2-1: string descriptor 0 read error: -22 [ 177.760864][ T5709] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 177.760885][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.048745][ T5709] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 178.485590][ T5709] usb 2-1: USB disconnect, device number 15 [ 178.712881][ T6542] loop9: detected capacity change from 0 to 7 [ 179.135334][ T6542] ldm_validate_partition_table(): Disk read failed. [ 179.137707][ T6542] Dev loop9: unable to read RDB block 0 [ 179.140624][ T6542] loop9: unable to read partition table [ 179.140842][ T6542] loop9: partition table beyond EOD, truncated [ 179.140872][ T6542] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 179.369784][ T5610] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 179.571535][ T5610] usb 3-1: not running at top speed; connect to a high speed hub [ 179.572799][ T5610] usb 3-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.572829][ T5610] usb 3-1: config 1 interface 0 has no altsetting 0 [ 179.578614][ T5610] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 179.578640][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.578657][ T5610] usb 3-1: Product: syz [ 179.578669][ T5610] usb 3-1: Manufacturer: syz [ 179.578681][ T5610] usb 3-1: SerialNumber: syz [ 179.912965][ T5709] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 180.063638][ T5709] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 180.063662][ T5709] usb 5-1: config 1 has no interface number 0 [ 180.063712][ T5709] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 180.063735][ T5709] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 180.063757][ T5709] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 180.081906][ T5588] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 180.119314][ T5709] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 180.119342][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.119360][ T5709] usb 5-1: Product: syz [ 180.119372][ T5709] usb 5-1: Manufacturer: syz [ 180.119383][ T5709] usb 5-1: SerialNumber: syz [ 180.224431][ T6552] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 181.508494][ T5588] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 181.508526][ T5588] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 181.508619][ T5588] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 181.508640][ T5588] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.600801][ T5588] usb 1-1: config 0 descriptor?? [ 183.008604][ T5709] usb 5-1: Error in usbnet_get_endpoints (-71) [ 183.195698][ T5709] usb 5-1: USB disconnect, device number 12 [ 183.273990][ T5610] usbhid 3-1:1.0: can't add hid device: -71 [ 183.274108][ T5610] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 183.293666][ T5588] ath6kl: Failed to submit usb control message: -71 [ 183.293710][ T5588] ath6kl: unable to send the bmi data to the device: -71 [ 183.293723][ T5588] ath6kl: Unable to send get target info: -71 [ 183.316998][ T5588] ath6kl: Failed to init ath6kl core: -71 [ 183.318107][ T5588] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 183.359039][ T5610] usb 3-1: USB disconnect, device number 14 [ 183.389394][ T5588] usb 1-1: USB disconnect, device number 15 [ 184.469791][ T5709] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 184.622078][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.622101][ T5709] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.627218][ T5709] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 184.627245][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.627261][ T5709] usb 5-1: Product: syz [ 184.627272][ T5709] usb 5-1: Manufacturer: syz [ 184.627285][ T5709] usb 5-1: SerialNumber: syz [ 184.700901][ T5709] usb 5-1: config 0 descriptor?? [ 187.598783][ T5588] usb 5-1: USB disconnect, device number 13 [ 188.106191][ T5709] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.329886][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 188.332093][ T5709] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 188.336383][ T5709] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.336411][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.336436][ T5709] usb 4-1: Product: syz [ 188.336448][ T5709] usb 4-1: Manufacturer: syz [ 188.336461][ T5709] usb 4-1: SerialNumber: syz [ 188.429052][ T5709] r8152-cfgselector 4-1: Unknown version 0x0000 [ 188.429089][ T5709] r8152-cfgselector 4-1: config 0 descriptor?? [ 188.576223][ T5709] r8152-cfgselector 4-1: Unknown version 0x0000 [ 188.577097][ T5709] r8152-cfgselector 4-1: No union descriptors [ 188.656181][ T5709] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 188.809864][ T819] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 188.978532][ T819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.978557][ T819] usb 1-1: config 0 has no interface number 0 [ 189.000130][ T819] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 189.000157][ T819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.000173][ T819] usb 1-1: Product: syz [ 189.000186][ T819] usb 1-1: Manufacturer: syz [ 189.000198][ T819] usb 1-1: SerialNumber: syz [ 189.069056][ T819] usb 1-1: config 0 descriptor?? [ 189.289918][ T5709] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 189.392562][ T819] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 189.420606][ T819] usb 1-1: USB disconnect, device number 16 [ 189.439814][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 189.478007][ T5709] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 189.478036][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.478053][ T5709] usb 4-1: Product: syz [ 189.478066][ T5709] usb 4-1: Manufacturer: syz [ 189.478079][ T5709] usb 4-1: SerialNumber: syz [ 189.832534][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 189.832596][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 190.095397][ T5709] usb 4-1: USB disconnect, device number 21 [ 190.351325][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 190.351387][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 190.975532][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.149825][ T5716] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 191.261460][ T5709] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 191.525151][ T5716] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 191.542171][ T5716] usb 2-1: config index 0 descriptor too short (expected 65016, got 133) [ 191.542214][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.570692][ T5716] usb 2-1: config index 1 descriptor too short (expected 65016, got 133) [ 191.570719][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.573641][ T5716] usb 2-1: config index 2 descriptor too short (expected 65016, got 133) [ 191.573667][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.574824][ T5716] usb 2-1: config index 3 descriptor too short (expected 65016, got 133) [ 191.574847][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.577468][ T5716] usb 2-1: config index 4 descriptor too short (expected 65016, got 133) [ 191.577505][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.718942][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 192.420288][ T5716] usb 2-1: config index 5 descriptor too short (expected 65016, got 133) [ 192.420316][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.424499][ T5716] usb 2-1: config index 6 descriptor too short (expected 65016, got 133) [ 192.424529][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.425758][ T5709] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 192.425779][ T5709] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 192.425797][ T5709] usb 4-1: config 166 has no interface number 0 [ 192.425810][ T5709] usb 4-1: config 166 has no interface number 1 [ 192.425925][ T5709] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 192.425943][ T5709] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 192.425975][ T5709] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 192.426051][ T5709] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 192.426074][ T5709] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 192.426097][ T5709] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 192.426118][ T5709] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 192.426140][ T5709] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 192.426292][ T5716] usb 2-1: config index 7 descriptor too short (expected 65016, got 133) [ 192.426311][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.426486][ T5709] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.426509][ T5709] usb 4-1: config 166 interface 177 has no altsetting 0 [ 192.426525][ T5709] usb 4-1: config 166 interface 34 has no altsetting 0 [ 192.484082][ T5716] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.484110][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.484127][ T5716] usb 2-1: Product: syz [ 192.484138][ T5716] usb 2-1: Manufacturer: syz [ 192.484150][ T5716] usb 2-1: SerialNumber: syz [ 192.517078][ T5709] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 192.517104][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.517119][ T5709] usb 4-1: Product: syz [ 192.517131][ T5709] usb 4-1: Manufacturer: syz [ 192.517143][ T5709] usb 4-1: SerialNumber: syz [ 192.820869][ T5716] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 192.840105][ T6651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.039023][ T5730] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.103862][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.128205][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.545581][ T5709] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 194.092101][ T6646] syz.2.260 (6646) used greatest stack depth: 18168 bytes left [ 194.187167][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.188040][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464915][ T5709] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 194.530004][ T5730] usb 2-1: Service connection timeout for: 256 [ 194.530027][ T5730] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 194.674564][ T5709] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 194.677990][ T5709] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 194.678020][ T5709] uvcvideo 4-1:166.34: No valid video chain found. [ 194.712030][ T5709] usb 4-1: USB disconnect, device number 22 [ 194.719035][ T5730] ath9k_htc: Failed to initialize the device [ 195.003142][ T5730] usb 2-1: ath9k_htc: USB layer deinitialized [ 195.037576][ T5723] usb 2-1: USB disconnect, device number 16 [ 196.117407][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 197.209800][ T5730] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 197.432172][ T5730] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 197.432200][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.599905][ T5730] usb 5-1: config 0 descriptor?? [ 198.885244][ T5730] IPVS: starting estimator thread 0... [ 199.099670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 199.229681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 199.278462][ T6687] IPVS: using max 15 ests per chain, 36000 per kthread [ 200.142576][ T5588] usb 5-1: USB disconnect, device number 14 [ 201.633004][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 201.633042][ T5612] Bluetooth: hci1: command 0x0406 tx timeout [ 201.633072][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 201.633090][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 201.633108][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 203.579930][ T5610] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 203.580128][ T5723] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 203.790089][ T5610] usb 1-1: Using ep0 maxpacket: 16 [ 203.800716][ T5723] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 203.800741][ T5723] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 203.841713][ T5610] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 203.894656][ T5723] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 203.894685][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.894703][ T5723] usb 5-1: Product: syz [ 203.894715][ T5723] usb 5-1: Manufacturer: syz [ 203.894728][ T5723] usb 5-1: SerialNumber: syz [ 203.914858][ T5610] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 203.914885][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.914902][ T5610] usb 1-1: Product: syz [ 203.914914][ T5610] usb 1-1: Manufacturer: syz [ 203.914926][ T5610] usb 1-1: SerialNumber: syz [ 204.019589][ T5723] usb 5-1: config 0 descriptor?? [ 204.033691][ T5610] r8152-cfgselector 1-1: Unknown version 0x0000 [ 204.033713][ T5610] r8152-cfgselector 1-1: config 0 descriptor?? [ 204.235107][ T5723] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 204.291251][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 204.527302][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 204.533968][ T9] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 204.533994][ T9] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 204.534011][ T9] usb 2-1: config 166 has no interface number 0 [ 204.534026][ T9] usb 2-1: config 166 has no interface number 1 [ 204.534092][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 204.534111][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 204.534150][ T9] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 204.534171][ T9] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 204.534193][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 204.534216][ T9] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 204.534237][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 204.534259][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 204.534278][ T9] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 204.534301][ T9] usb 2-1: config 166 interface 177 has no altsetting 0 [ 204.534316][ T9] usb 2-1: config 166 interface 34 has no altsetting 0 [ 204.536914][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 204.536940][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.536957][ T9] usb 2-1: Product: syz [ 204.536969][ T9] usb 2-1: Manufacturer: syz [ 204.536982][ T9] usb 2-1: SerialNumber: syz [ 206.549906][ T5723] gspca_sunplus: reg_r err -110 [ 206.550024][ T5723] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 207.749402][ T5723] usb 5-1: USB disconnect, device number 15 [ 207.760695][ T6698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.870208][ T5610] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 208.935990][ T6698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.676363][ T9] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 211.450005][ T5610] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 211.599761][ T5610] usb 1-1: Using ep0 maxpacket: 16 [ 211.602436][ T5610] usb 1-1: config 166 has an invalid interface number: 177 but max is 1 [ 211.602464][ T5610] usb 1-1: config 166 has an invalid interface number: 34 but max is 1 [ 211.602482][ T5610] usb 1-1: config 166 has no interface number 0 [ 211.602496][ T5610] usb 1-1: config 166 has no interface number 1 [ 211.602549][ T5610] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 211.602568][ T5610] usb 1-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 211.602601][ T5610] usb 1-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 211.602623][ T5610] usb 1-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 211.602645][ T5610] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 211.602668][ T5610] usb 1-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 211.602689][ T5610] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 211.602710][ T5610] usb 1-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 211.602729][ T5610] usb 1-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 211.602751][ T5610] usb 1-1: config 166 interface 177 has no altsetting 0 [ 211.602766][ T5610] usb 1-1: config 166 interface 34 has no altsetting 0 [ 211.606643][ T5610] usb 1-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 211.606669][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.606686][ T5610] usb 1-1: Product: syz [ 211.606698][ T5610] usb 1-1: Manufacturer: syz [ 211.606710][ T5610] usb 1-1: SerialNumber: syz [ 211.649755][ T5709] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 212.306134][ T5709] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.306158][ T5709] usb 5-1: config 0 has no interface number 0 [ 212.309037][ T5709] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 212.309063][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.309080][ T5709] usb 5-1: Product: syz [ 212.309092][ T5709] usb 5-1: Manufacturer: syz [ 212.309105][ T5709] usb 5-1: SerialNumber: syz [ 212.385108][ T5709] usb 5-1: config 0 descriptor?? [ 213.113488][ T6713] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 213.617815][ T5709] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 218.132835][ T980] usb 5-1: USB disconnect, device number 16 [ 218.444812][ T5610] ums-realtek 1-1:166.177: USB Mass Storage device detected [ 219.074620][ T6713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.078563][ T6713] team0: Port device netdevsim1 added [ 221.249430][ T6728] loop9: detected capacity change from 0 to 7 [ 221.274130][ C1] blk_print_req_error: 36 callbacks suppressed [ 221.274149][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.274177][ C1] buffer_io_error: 35 callbacks suppressed [ 221.274187][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.356689][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.356724][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.659733][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.659769][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.662355][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.662388][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.691144][ T5844] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 221.691234][ T980] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 221.713374][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.713410][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.714004][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.714031][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.716179][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.716208][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.718466][ T6728] ldm_validate_partition_table(): Disk read failed. [ 221.729813][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.729846][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.731335][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.752747][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.766954][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.766986][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 221.776566][ T6728] Dev loop9: unable to read RDB block 0 [ 221.905368][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 221.912535][ T980] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 221.912560][ T980] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 221.912577][ T980] usb 3-1: config 166 has no interface number 0 [ 221.912591][ T980] usb 3-1: config 166 has no interface number 1 [ 221.912644][ T980] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 221.912662][ T980] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 221.912696][ T980] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 221.912716][ T980] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 221.912738][ T980] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 221.912761][ T980] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 221.912791][ T980] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 221.912814][ T980] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 221.912833][ T980] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 221.912857][ T980] usb 3-1: config 166 interface 177 has no altsetting 0 [ 221.912873][ T980] usb 3-1: config 166 interface 34 has no altsetting 0 [ 221.923515][ T980] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 221.923543][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.923560][ T980] usb 3-1: Product: syz [ 221.923572][ T980] usb 3-1: Manufacturer: syz [ 221.923584][ T980] usb 3-1: SerialNumber: syz [ 221.941507][ T5844] usb 5-1: not running at top speed; connect to a high speed hub [ 221.945871][ T5844] usb 5-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.945910][ T5844] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.983713][ T5844] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 221.983741][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.983758][ T5844] usb 5-1: Product: syz [ 221.983771][ T5844] usb 5-1: Manufacturer: syz [ 221.983783][ T5844] usb 5-1: SerialNumber: syz [ 222.087682][ T6728] loop9: unable to read partition table [ 222.087946][ T6728] loop9: partition table beyond EOD, truncated [ 222.087980][ T6728] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 223.276535][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.896379][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.940864][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.162108][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.207442][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.363505][ T980] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 227.681850][ T5844] usbhid 5-1:1.0: can't add hid device: -71 [ 227.681941][ T5844] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 227.933117][ T5844] usb 5-1: USB disconnect, device number 17 [ 228.300129][ T59] Bluetooth: hci5: command tx timeout [ 230.390068][ T59] Bluetooth: hci5: command tx timeout [ 231.072570][ T6741] netlink: 'syz.2.288': attribute type 10 has an invalid length. [ 232.379764][ T5730] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.449817][ T59] Bluetooth: hci5: command tx timeout [ 232.556242][ T5730] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 232.556269][ T5730] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 232.588870][ T5730] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 232.588899][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.588917][ T5730] usb 5-1: Product: syz [ 232.588929][ T5730] usb 5-1: Manufacturer: syz [ 232.588942][ T5730] usb 5-1: SerialNumber: syz [ 233.259778][ T5730] usb 5-1: config 0 descriptor?? [ 233.301560][ T5730] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 234.531616][ T59] Bluetooth: hci5: command tx timeout [ 235.958813][ T5730] gspca_sunplus: reg_r err -110 [ 235.958915][ T5730] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 236.352812][ T5730] usb 5-1: USB disconnect, device number 18 [ 236.499184][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.551052][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.556112][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.804160][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.840297][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.020809][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.345654][ T10] usb 5-1: too many configurations: 70, using maximum allowed: 8 [ 238.347157][ T10] usb 5-1: config index 0 descriptor too short (expected 65016, got 133) [ 238.347182][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.350968][ T10] usb 5-1: config index 1 descriptor too short (expected 65016, got 133) [ 238.350993][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.354089][ T10] usb 5-1: config index 2 descriptor too short (expected 65016, got 133) [ 238.354112][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.380645][ T10] usb 5-1: config index 3 descriptor too short (expected 65016, got 133) [ 238.380674][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.382248][ T10] usb 5-1: config index 4 descriptor too short (expected 65016, got 133) [ 238.382271][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.383689][ T10] usb 5-1: config index 5 descriptor too short (expected 65016, got 133) [ 238.383711][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.396545][ T10] usb 5-1: config index 6 descriptor too short (expected 65016, got 133) [ 238.396575][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.401966][ T10] usb 5-1: config index 7 descriptor too short (expected 65016, got 133) [ 238.401993][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.471496][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.471525][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.471543][ T10] usb 5-1: Product: syz [ 238.471556][ T10] usb 5-1: Manufacturer: syz [ 238.471568][ T10] usb 5-1: SerialNumber: syz [ 238.659186][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 238.735746][ T819] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.020122][ T59] Bluetooth: hci1: command tx timeout [ 241.097608][ T819] usb 5-1: Service connection timeout for: 256 [ 241.097632][ T819] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 241.100070][ T59] Bluetooth: hci1: command tx timeout [ 241.868664][ T819] ath9k_htc: Failed to initialize the device [ 242.038838][ T819] usb 5-1: ath9k_htc: USB layer deinitialized [ 243.210187][ T59] Bluetooth: hci1: command tx timeout [ 245.250153][ T59] Bluetooth: hci1: command tx timeout [ 249.221493][ T9] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 251.632051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 254.147869][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.303706][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.323025][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.352990][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.353777][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.571661][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.571730][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.752610][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.752745][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.752972][ T6730] bridge_slave_0: entered allmulticast mode [ 255.892707][ T6730] bridge_slave_0: entered promiscuous mode [ 256.010066][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.052423][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.094014][ T6730] bridge_slave_1: entered allmulticast mode [ 256.128534][ T6730] bridge_slave_1: entered promiscuous mode [ 256.609882][ T5617] Bluetooth: hci6: command tx timeout [ 257.587583][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.638246][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.689933][ T5617] Bluetooth: hci6: command tx timeout [ 259.115229][ T6730] team0: Port device team_slave_0 added [ 259.630275][ T6730] team0: Port device team_slave_1 added [ 259.724614][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 259.759106][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 259.777865][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 259.808326][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 259.809300][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.712744][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.712762][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.712786][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.769935][ T5617] Bluetooth: hci6: command tx timeout [ 260.771724][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.771738][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.771761][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.889836][ T5617] Bluetooth: hci7: command tx timeout [ 262.849856][ T5617] Bluetooth: hci6: command tx timeout [ 263.093358][ T6730] hsr_slave_0: entered promiscuous mode [ 263.094776][ T6730] hsr_slave_1: entered promiscuous mode [ 263.095757][ T6730] debugfs: 'hsr0' already exists in 'hsr' [ 263.095781][ T6730] Cannot create hsr debugfs directory [ 263.102739][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.102909][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.103146][ T6755] bridge_slave_0: entered allmulticast mode [ 263.113415][ T6755] bridge_slave_0: entered promiscuous mode [ 263.175848][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.175993][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.176241][ T6755] bridge_slave_1: entered allmulticast mode [ 263.262263][ T6755] bridge_slave_1: entered promiscuous mode [ 263.969813][ T5617] Bluetooth: hci7: command tx timeout [ 266.120480][ T5617] Bluetooth: hci7: command tx timeout [ 266.125521][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.317793][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.337453][ T5617] Bluetooth: hci7: command tx timeout [ 268.952497][ T6755] team0: Port device team_slave_0 added [ 269.227308][ T6755] team0: Port device team_slave_1 added [ 270.401416][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.401433][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.401458][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.543790][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.543805][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.543828][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.093028][ T6755] hsr_slave_0: entered promiscuous mode [ 273.097691][ T6755] hsr_slave_1: entered promiscuous mode [ 273.102529][ T6755] debugfs: 'hsr0' already exists in 'hsr' [ 273.102556][ T6755] Cannot create hsr debugfs directory [ 278.801848][ T4964] udevd[4964]: worker [5869] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 278.837742][ T4964] udevd[4964]: worker [5841] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 279.469690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 281.335323][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 281.402382][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 281.406111][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 281.468203][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 281.489081][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.899946][ T59] Bluetooth: hci8: command tx timeout [ 285.990396][ T59] Bluetooth: hci8: command tx timeout [ 288.049821][ T59] Bluetooth: hci8: command tx timeout [ 288.132383][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.132505][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.132763][ T6804] bridge_slave_0: entered allmulticast mode [ 288.170929][ T6804] bridge_slave_0: entered promiscuous mode [ 288.828762][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.828887][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.829154][ T6804] bridge_slave_1: entered allmulticast mode [ 288.875481][ T6804] bridge_slave_1: entered promiscuous mode [ 290.172758][ T59] Bluetooth: hci8: command tx timeout [ 290.252491][ T980] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 290.254780][ T5610] ums-realtek 1-1:166.34: USB Mass Storage device detected [ 290.494204][ T6770] usb 5-1: USB disconnect, device number 19 [ 295.369322][ T4964] udevd[4964]: worker [6401] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 295.664436][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.726386][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.784539][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.802967][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.803904][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.359230][ T1178] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.848222][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.895053][ T5617] Bluetooth: hci5: command tx timeout [ 299.989721][ T59] Bluetooth: hci5: command tx timeout [ 300.429659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 300.729674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 302.049850][ T59] Bluetooth: hci5: command tx timeout [ 303.687948][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.129817][ T59] Bluetooth: hci5: command tx timeout [ 307.080454][ T6804] team0: Port device team_slave_0 added [ 308.188253][ T6820] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.199917][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.200184][ T6820] bridge_slave_0: entered allmulticast mode [ 308.330335][ T6820] bridge_slave_0: entered promiscuous mode [ 308.345223][ T6804] team0: Port device team_slave_1 added [ 308.482004][ T6820] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.482131][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.482374][ T6820] bridge_slave_1: entered allmulticast mode [ 308.511493][ T6820] bridge_slave_1: entered promiscuous mode [ 310.118514][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.118530][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.118555][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.226568][ T6820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.309669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 313.827847][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.827866][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.827888][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.184256][ T6820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.386372][ T6911] binder: 6907:6911 ioctl c0306201 0 returned -14 [ 316.217538][ T6911] syz.2.310 (6911): drop_caches: 2 [ 316.855624][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 316.910637][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 316.914042][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 316.940355][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 316.943815][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.023766][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023831][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.038494][ T6820] team0: Port device team_slave_0 added [ 319.013003][ T5617] Bluetooth: hci3: command tx timeout [ 321.147476][ T5617] Bluetooth: hci3: command tx timeout [ 321.466639][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.506999][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.509117][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.568925][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.589269][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.176630][ T59] Bluetooth: hci3: command tx timeout [ 323.730029][ T59] Bluetooth: hci1: command tx timeout [ 325.259501][ T59] Bluetooth: hci3: command tx timeout [ 325.815532][ T59] Bluetooth: hci1: command tx timeout [ 327.890284][ T59] Bluetooth: hci1: command tx timeout [ 329.969828][ T59] Bluetooth: hci1: command tx timeout [ 337.849487][ T6854] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.857259][ T6854] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.857530][ T6854] bridge_slave_0: entered allmulticast mode [ 337.876420][ T6854] bridge_slave_0: entered promiscuous mode [ 337.928919][ T6854] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.929066][ T6854] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.929362][ T6854] bridge_slave_1: entered allmulticast mode [ 337.960360][ T6854] bridge_slave_1: entered promiscuous mode [ 339.574267][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.314'. [ 340.619979][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.620099][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.620369][ T6881] bridge_slave_0: entered allmulticast mode [ 340.623181][ T6881] bridge_slave_0: entered promiscuous mode [ 341.052824][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.052945][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.053205][ T6881] bridge_slave_1: entered allmulticast mode [ 341.085666][ T6881] bridge_slave_1: entered promiscuous mode [ 341.419469][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.127934][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.140085][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.148423][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.149195][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.439796][ T5617] Bluetooth: hci4: command tx timeout [ 346.450306][ T5617] Bluetooth: hci4: command tx timeout [ 346.523055][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.716348][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.530244][ T5617] Bluetooth: hci4: command tx timeout [ 349.626011][ T6881] team0: Port device team_slave_0 added [ 349.897400][ T6881] team0: Port device team_slave_1 added [ 350.559664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 350.719822][ T5617] Bluetooth: hci4: command tx timeout [ 352.590221][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.590235][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.590249][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.793806][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.793818][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.793833][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.896425][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.896563][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.896912][ T6915] bridge_slave_0: entered allmulticast mode [ 356.134499][ T6915] bridge_slave_0: entered promiscuous mode [ 356.678933][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.679066][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.679316][ T6915] bridge_slave_1: entered allmulticast mode [ 356.778192][ T6915] bridge_slave_1: entered promiscuous mode [ 358.920113][ T9] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 358.974178][ T9] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 358.974321][ T9] uvcvideo 2-1:166.34: No valid video chain found. [ 358.983508][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 359.014344][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 359.015620][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 359.017065][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 359.017845][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.459787][ T9] usb 2-1: USB disconnect, device number 17 [ 361.265458][ T59] Bluetooth: hci6: command tx timeout [ 361.393740][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.613796][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.166755][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.166879][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.167142][ T6922] bridge_slave_0: entered allmulticast mode [ 362.197687][ T6922] bridge_slave_0: entered promiscuous mode [ 363.532265][ T59] Bluetooth: hci6: command tx timeout [ 365.580283][ T59] Bluetooth: hci6: command tx timeout [ 366.176643][ T6922] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.176766][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.177373][ T6922] bridge_slave_1: entered allmulticast mode [ 366.215133][ T6922] bridge_slave_1: entered promiscuous mode [ 366.427906][ T6915] team0: Port device team_slave_0 added [ 366.688949][ T6915] team0: Port device team_slave_1 added [ 367.649893][ T59] Bluetooth: hci6: command tx timeout [ 368.181532][ T6922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.318314][ T6922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.513394][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.513412][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.513435][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.854738][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.854755][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.854780][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.435500][ T6922] team0: Port device team_slave_0 added [ 371.874106][ T6922] team0: Port device team_slave_1 added [ 374.721255][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.721271][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.721296][ T6922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.846533][ T6922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.846551][ T6922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.846576][ T6922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.454588][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.506253][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.510672][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.512763][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.513460][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.742507][ T6922] hsr_slave_0: entered promiscuous mode [ 375.743398][ T6922] hsr_slave_1: entered promiscuous mode [ 375.744041][ T6922] debugfs: 'hsr0' already exists in 'hsr' [ 375.744056][ T6922] Cannot create hsr debugfs directory [ 377.649966][ T59] Bluetooth: hci2: command tx timeout [ 378.489068][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.489149][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.730016][ T59] Bluetooth: hci2: command tx timeout [ 380.596155][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.722499][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.797937][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.839234][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.847350][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.809911][ T59] Bluetooth: hci2: command tx timeout [ 383.125111][ T59] Bluetooth: hci3: command tx timeout [ 383.980120][ T59] Bluetooth: hci2: command tx timeout [ 385.192753][ T59] Bluetooth: hci3: command tx timeout [ 387.249815][ T59] Bluetooth: hci3: command tx timeout [ 389.329846][ T59] Bluetooth: hci3: command tx timeout [ 391.505505][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.505725][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.506008][ T6963] bridge_slave_0: entered allmulticast mode [ 391.513325][ T6963] bridge_slave_0: entered promiscuous mode [ 391.602892][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.603048][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.603339][ T6963] bridge_slave_1: entered allmulticast mode [ 391.610632][ T6963] bridge_slave_1: entered promiscuous mode [ 392.809086][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.959443][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.647899][ T6963] team0: Port device team_slave_0 added [ 395.002572][ T6963] team0: Port device team_slave_1 added [ 397.387919][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.387935][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.387961][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.618301][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.618318][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.618344][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.533905][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.534032][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.534223][ T6991] bridge_slave_0: entered allmulticast mode [ 399.535655][ T6991] bridge_slave_0: entered promiscuous mode [ 400.444631][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.444749][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.445017][ T6991] bridge_slave_1: entered allmulticast mode [ 400.476405][ T6991] bridge_slave_1: entered promiscuous mode [ 401.470551][ T4964] udevd[4964]: worker [5869] /devices/platform/dummy_hcd.0/usb1/1-1 timeout; kill it [ 401.511235][ T4964] udevd[4964]: seq 11993 '/devices/platform/dummy_hcd.0/usb1/1-1' killed [ 401.682289][ T4964] udevd[4964]: worker [5869] terminated by signal 9 (Killed) [ 401.682338][ T4964] udevd[4964]: worker [5869] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 403.124533][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.922644][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.340693][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.391742][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.394874][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.415240][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.416000][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.387038][ T6991] team0: Port device team_slave_0 added [ 405.510990][ T6991] team0: Port device team_slave_1 added [ 406.613299][ T5617] Bluetooth: hci1: command tx timeout [ 407.143245][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.143264][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.143289][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.729789][ T59] Bluetooth: hci1: command tx timeout [ 410.694104][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.694120][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.694147][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.770003][ T59] Bluetooth: hci1: command tx timeout [ 412.849966][ T59] Bluetooth: hci1: command tx timeout [ 415.449297][ T6991] hsr_slave_0: entered promiscuous mode [ 416.012502][ T6991] hsr_slave_1: entered promiscuous mode [ 416.103644][ T6991] debugfs: 'hsr0' already exists in 'hsr' [ 416.103671][ T6991] Cannot create hsr debugfs directory [ 416.105349][ T7028] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.105518][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.105799][ T7028] bridge_slave_0: entered allmulticast mode [ 416.157113][ T7028] bridge_slave_0: entered promiscuous mode [ 416.300219][ T7028] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.300336][ T7028] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.300620][ T7028] bridge_slave_1: entered allmulticast mode [ 416.306130][ T7028] bridge_slave_1: entered promiscuous mode [ 417.687699][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 417.708108][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 417.709346][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 417.740285][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 417.746515][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 418.224100][ T7028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.933072][ T7028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.889855][ T5617] Bluetooth: hci4: command tx timeout [ 420.553979][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.554091][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.554365][ T7039] bridge_slave_0: entered allmulticast mode [ 420.557079][ T7039] bridge_slave_0: entered promiscuous mode [ 420.562037][ T7028] team0: Port device team_slave_0 added [ 421.107570][ T7028] team0: Port device team_slave_1 added [ 421.130276][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.130400][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.354741][ T7039] bridge_slave_1: entered allmulticast mode [ 421.369542][ T7039] bridge_slave_1: entered promiscuous mode [ 422.273396][ T5617] Bluetooth: hci4: command tx timeout [ 424.290025][ T5617] Bluetooth: hci4: command tx timeout [ 425.543296][ T4964] udevd[4964]: worker [6401] /devices/platform/dummy_hcd.2/usb3/3-1 timeout; kill it [ 425.546741][ T4964] udevd[4964]: seq 12027 '/devices/platform/dummy_hcd.2/usb3/3-1' killed [ 426.127959][ T4964] udevd[4964]: worker [6401] terminated by signal 9 (Killed) [ 426.340632][ T4964] udevd[4964]: worker [6401] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 426.369804][ T5617] Bluetooth: hci4: command tx timeout [ 428.075150][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.075177][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.075201][ T7028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.146745][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.517194][ T7028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.517211][ T7028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.517236][ T7028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.567653][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.226650][ T7039] team0: Port device team_slave_0 added [ 432.437030][ T7039] team0: Port device team_slave_1 added [ 432.763482][ T7028] hsr_slave_0: entered promiscuous mode [ 432.777260][ T7028] hsr_slave_1: entered promiscuous mode [ 432.778847][ T7028] debugfs: 'hsr0' already exists in 'hsr' [ 432.778871][ T7028] Cannot create hsr debugfs directory [ 435.220131][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.220147][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.220173][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.432574][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.432590][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.432616][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.336258][ T38] INFO: task kworker/1:2:980 blocked for more than 143 seconds. [ 437.336284][ T38] Not tainted syzkaller #0 [ 437.336294][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.336315][ T38] task:kworker/1:2 state:D stack:20448 [ 437.336315][ T38] task:kworker/1:2 state:D stack:20448 pid:980 tgid:980 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 437.336362][ T38] Workqueue: usb_hub_wq hub_event [ 437.336581][ T38] Call Trace: [ 437.336619][ T38] [ 437.336695][ T38] __schedule+0x16ec/0x5620 [ 437.336875][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 437.337026][ T38] ? __pfx___schedule+0x10/0x10 [ 437.337062][ T38] rt_mutex_schedule+0x76/0xf0 [ 437.337112][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 437.337160][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 437.337186][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 437.337206][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.337223][ T38] ? usb_stor_probe2+0x349/0xd00 [ 437.337298][ T38] ? rcu_barrier+0x4c/0x580 [ 437.337369][ T38] ? rcu_barrier+0x4c/0x580 [ 437.337394][ T38] mutex_lock_nested+0x168/0x1d0 [ 437.337423][ T38] rcu_barrier+0x4c/0x580 [ 437.337439][ T38] ? devres_release_all+0x1e7/0x250 [ 437.337562][ T38] ? rcu_is_watching+0x15/0xb0 [ 437.337616][ T38] scsi_host_dev_release+0xab/0x300 [ 437.337715][ T38] ? __pfx_scsi_host_dev_release+0x10/0x10 [ 437.337738][ T38] device_release+0xc4/0x1f0 [ 437.337801][ T38] kobject_put+0x228/0x560 [ 437.337896][ T38] usb_stor_probe2+0x349/0xd00 [ 437.337931][ T38] ? __pfx_usb_stor_probe2+0x10/0x10 [ 437.337953][ T38] ? usb_stor_probe1+0x1253/0x18c0 [ 437.338019][ T38] realtek_cr_probe+0xfa/0x1c0 [ 437.338043][ T38] ? __pfx_realtek_cr_probe+0x10/0x10 [ 437.338070][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.338092][ T38] usb_probe_interface+0x659/0xc70 [ 437.338166][ T38] ? __pfx_usb_probe_interface+0x10/0x10 [ 437.338186][ T38] really_probe+0x267/0xaf0 [ 437.338215][ T38] __driver_probe_device+0x1ef/0x380 [ 437.338240][ T38] driver_probe_device+0x4f/0x240 [ 437.338271][ T38] __device_attach_driver+0x279/0x430 [ 437.338297][ T38] bus_for_each_drv+0x25b/0x2f0 [ 437.338323][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 437.338345][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 437.338370][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.338396][ T38] __device_attach+0x2c8/0x450 [ 437.338419][ T38] ? __pfx___device_attach+0x10/0x10 [ 437.338499][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.338532][ T38] device_initial_probe+0xa1/0xd0 [ 437.338558][ T38] bus_probe_device+0x12d/0x220 [ 437.338585][ T38] device_add+0x7e9/0xbb0 [ 437.338611][ T38] usb_set_configuration+0x1a87/0x2110 [ 437.338659][ T38] usb_generic_driver_probe+0x8d/0x150 [ 437.338754][ T38] usb_probe_device+0x1c4/0x3b0 [ 437.338779][ T38] ? __pfx_usb_probe_device+0x10/0x10 [ 437.338798][ T38] really_probe+0x267/0xaf0 [ 437.338827][ T38] __driver_probe_device+0x1ef/0x380 [ 437.338851][ T38] driver_probe_device+0x4f/0x240 [ 437.338876][ T38] __device_attach_driver+0x279/0x430 [ 437.338902][ T38] bus_for_each_drv+0x25b/0x2f0 [ 437.338928][ T38] ? __pfx___device_attach_driver+0x10/0x10 [ 437.338954][ T38] ? __pfx_bus_for_each_drv+0x10/0x10 [ 437.338979][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.339010][ T38] __device_attach+0x2c8/0x450 [ 437.339034][ T38] ? __pfx___device_attach+0x10/0x10 [ 437.339055][ T38] ? rt_spin_unlock+0x160/0x200 [ 437.339098][ T38] device_initial_probe+0xa1/0xd0 [ 437.339121][ T38] bus_probe_device+0x12d/0x220 [ 437.339150][ T38] device_add+0x7e9/0xbb0 [ 437.339174][ T38] usb_new_device+0x9f8/0x16e0 [ 437.339204][ T38] ? __pfx_usb_new_device+0x10/0x10 [ 437.339233][ T38] hub_event+0x2a49/0x4f60 [ 437.339300][ T38] ? __pfx_hub_event+0x10/0x10 [ 437.339320][ T38] ? process_scheduled_works+0xa70/0x1860 [ 437.339368][ T38] ? process_scheduled_works+0xa70/0x1860 [ 437.339386][ T38] ? process_scheduled_works+0xa70/0x1860 [ 437.339408][ T38] process_scheduled_works+0xb5d/0x1860 [ 437.339459][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.339486][ T38] ? assign_work+0x3d5/0x5e0 [ 437.339513][ T38] worker_thread+0xa53/0xfc0 [ 437.339559][ T38] kthread+0x388/0x470 [ 437.353998][ T38] ? __pfx_worker_thread+0x10/0x10 [ 437.354031][ T38] ? __pfx_kthread+0x10/0x10 [ 437.354064][ T38] ret_from_fork+0x514/0xb70 [ 437.354124][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.354143][ T38] ? __switch_to+0xc79/0x1410 [ 437.354171][ T38] ? __pfx_kthread+0x10/0x10 [ 437.354194][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.354231][ T38] [ 437.354495][ T38] [ 437.354495][ T38] Showing all locks held in the system: [ 437.354535][ T38] 4 locks held by pr/legacy/17: [ 437.354583][ T38] 4 locks held by rcuc/0/20: [ 437.354594][ T38] 1 lock held by khungtaskd/38: [ 437.354622][ T38] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.354803][ T38] 6 locks held by kworker/u8:3/44: [ 437.354813][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.354855][ T38] #1: ffffc90000b67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.354902][ T38] #2: ffff888034ef2310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 437.355041][ T38] #3: ffff888032e60120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 437.355095][ T38] #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 437.355136][ T38] #5: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 437.355240][ T38] 6 locks held by kworker/u8:4/66: [ 437.355250][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.355290][ T38] #1: ffffc9000151fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.355330][ T38] #2: ffff88803bac0310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 437.355383][ T38] #3: ffff88803bfef920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 437.355429][ T38] #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 437.355467][ T38] #5: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 437.355517][ T38] 6 locks held by kworker/u8:6/830: [ 437.355526][ T38] #0: ffff888032d94938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.355567][ T38] #1: ffffc90005877c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.355609][ T38] #2: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 437.355658][ T38] #3: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 437.355762][ T38] #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 437.355847][ T38] #5: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 437.355894][ T38] 6 locks held by kworker/1:2/980: [ 437.355904][ T38] #0: ffff8880222b4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.355945][ T38] #1: ffffc900051f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.357179][ T38] #2: ffff88802a0ca210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 437.357230][ T38] #3: ffff888035204210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 437.357275][ T38] #4: ffff8880332891d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 437.357316][ T38] #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.357361][ T38] 6 locks held by kworker/u8:11/1178: [ 437.357371][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.357413][ T38] #1: ffffc9000670fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.357454][ T38] #2: ffffffff8f349020 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 437.357573][ T38] #3: ffff888039df8160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 437.357703][ T38] #4: ffff88803414a310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 437.357749][ T38] #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.357807][ T38] 3 locks held by kworker/u8:14/3389: [ 437.357818][ T38] #0: ffff8880327ef938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.357860][ T38] #1: ffffc9000f1efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.357901][ T38] #2: ffffffff8f357d78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 437.357980][ T38] 1 lock held by klogd/4953: [ 437.357991][ T38] #0: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 437.358042][ T38] 2 locks held by getty/5351: [ 437.358052][ T38] #0: ffff8880370a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.358156][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 437.358231][ T38] 1 lock held by syz-executor/5599: [ 437.358241][ T38] #0: ffff888062844480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 437.358329][ T38] 6 locks held by kworker/1:4/5610: [ 437.358339][ T38] #0: ffff8880222b4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.358380][ T38] #1: ffffc900046a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.358883][ T38] #2: ffff888029f50210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 437.358931][ T38] #3: ffff888063938210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 437.358987][ T38] #4: ffff88804c2181d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 437.359028][ T38] #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359085][ T38] 1 lock held by syz.1.284/6718: [ 437.359096][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359136][ T38] 1 lock held by syz-executor/6755: [ 437.359146][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359206][ T38] 1 lock held by syz.4.293/6762: [ 437.359216][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359257][ T38] 3 locks held by kworker/0:8/6770: [ 437.359267][ T38] 1 lock held by syz.0.296/6784: [ 437.359277][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359317][ T38] 1 lock held by syz-executor/6804: [ 437.359326][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359366][ T38] 1 lock held by syz-executor/6820: [ 437.359376][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359417][ T38] 1 lock held by syz-executor/6854: [ 437.359427][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359468][ T38] 1 lock held by syz-executor/6881: [ 437.359477][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359517][ T38] 1 lock held by syz-executor/6915: [ 437.359527][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.359567][ T38] 1 lock held by syz-executor/6922: [ 437.359576][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.363324][ T38] 1 lock held by syz-executor/6963: [ 437.363340][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.363389][ T38] 1 lock held by syz-executor/6991: [ 437.363399][ T38] #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 437.363440][ T38] 1 lock held by syz-executor/7028: [ 437.363451][ T38] 1 lock held by syz-executor/7039: [ 437.363460][ T38] #0: ffffffff8f357d78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.363574][ T38] 4 locks held by syz-executor/7077: [ 437.363585][ T38] #0: ffffffff8f891fc8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 437.363632][ T38] #1: ffffffff8f357d78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.363673][ T38] #2: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.363746][ T38] #3: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 437.363791][ T38] 2 locks held by syz-executor/7103: [ 437.363800][ T38] #0: ffffffff8f349020 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 437.363841][ T38] #1: ffffffff8f357d78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 437.363912][ T38] 6 locks held by kworker/u8:5/7125: [ 437.363923][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 437.363966][ T38] #1: ffffc90004f47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 437.364008][ T38] #2: ffff88803bac6310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0 [ 437.364066][ T38] #3: ffff88803469d920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0 [ 437.364111][ T38] #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 437.364153][ T38] #5: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x87/0x560 [ 437.364198][ T38] 3 locks held by syz-executor/7127: [ 437.364207][ T38] #0: ffff8880299c03b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 437.364285][ T38] #1: ffffffff8e1096f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 437.364323][ T38] #2: ffff88801ee98858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 437.364365][ T38] 1 lock held by dhcpcd/7133: [ 437.364374][ T38] #0: ffff88803a430358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 437.364450][ T38] [ 437.364455][ T38] ============================================= [ 437.364455][ T38] [ 437.364472][ T38] NMI backtrace for cpu 1 [ 437.364542][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.364565][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.364574][ T38] Call Trace: [ 437.364581][ T38] [ 437.364588][ T38] dump_stack_lvl+0xe8/0x150 [ 437.364610][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 437.364629][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.364658][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.364678][ T38] sys_info+0x135/0x170 [ 437.364734][ T38] watchdog+0xfd3/0x1030 [ 437.364816][ T38] ? watchdog+0x1c9/0x1030 [ 437.364839][ T38] kthread+0x388/0x470 [ 437.364861][ T38] ? __pfx_watchdog+0x10/0x10 [ 437.364884][ T38] ? __pfx_kthread+0x10/0x10 [ 437.364906][ T38] ret_from_fork+0x514/0xb70 [ 437.364929][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.364947][ T38] ? __switch_to+0xc79/0x1410 [ 437.364972][ T38] ? __pfx_kthread+0x10/0x10 [ 437.364994][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.365028][ T38] [ 437.365035][ T38] Sending NMI from CPU 1 to CPUs 0: [ 437.365064][ C0] NMI backtrace for cpu 0 [ 437.365084][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.365101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.365149][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 437.365207][ C0] Code: e8 0e 21 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 2f 2e f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 437.365254][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 437.365268][ C0] RAX: 1ffffffff3363800 RBX: 00000000000003fd RCX: 0000000000000000 [ 437.365278][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 437.365288][ C0] RBP: ffffffff99b1c970 R08: 0000000000000000 R09: 0000000000000000 [ 437.365298][ C0] R10: dffffc0000000000 R11: ffffffff85345830 R12: dffffc0000000000 [ 437.365309][ C0] R13: 0000000000000000 R14: ffffffff99b1c6e0 R15: 0000000000000000 [ 437.365319][ C0] FS: 0000000000000000(0000) GS:ffff888126173000(0000) knlGS:0000000000000000 [ 437.365332][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.365343][ C0] CR2: 00007f2e2e6c5f40 CR3: 000000005ffd4000 CR4: 00000000003526f0 [ 437.365356][ C0] Call Trace: [ 437.365362][ C0] [ 437.365370][ C0] wait_for_lsr+0x1aa/0x2f0 [ 437.365393][ C0] serial8250_console_write+0x120d/0x1b90 [ 437.365419][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 437.365437][ C0] ? console_flush_one_record+0xfa/0xb90 [ 437.365504][ C0] ? console_flush_one_record+0x48f/0xb90 [ 437.365523][ C0] console_flush_one_record+0x68b/0xb90 [ 437.365544][ C0] ? console_flush_one_record+0xfa/0xb90 [ 437.365570][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 437.365589][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.365635][ C0] legacy_kthread_func+0x1b6/0x250 [ 437.365654][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 437.365675][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 437.365720][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 437.365740][ C0] kthread+0x388/0x470 [ 437.365758][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 437.365775][ C0] ? __pfx_kthread+0x10/0x10 [ 437.365792][ C0] ret_from_fork+0x514/0xb70 [ 437.365810][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 437.365825][ C0] ? __switch_to+0xc79/0x1410 [ 437.365846][ C0] ? __pfx_kthread+0x10/0x10 [ 437.365864][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.365887][ C0] [ 437.366080][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 437.366094][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.366113][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.366123][ T38] Call Trace: [ 437.366130][ T38] [ 437.366137][ T38] vpanic+0x56c/0xa60 [ 437.366159][ T38] ? __pfx___schedule+0x10/0x10 [ 437.366179][ T38] ? __pfx_vpanic+0x10/0x10 [ 437.366207][ T38] panic+0xc5/0xd0 [ 437.366226][ T38] ? __pfx_panic+0x10/0x10 [ 437.366247][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 437.366274][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 437.366295][ T38] watchdog+0x102c/0x1030 [ 437.366320][ T38] ? watchdog+0x1c9/0x1030 [ 437.366344][ T38] kthread+0x388/0x470 [ 437.366365][ T38] ? __pfx_watchdog+0x10/0x10 [ 437.366382][ T38] ? __pfx_kthread+0x10/0x10 [ 437.366404][ T38] ret_from_fork+0x514/0xb70 [ 437.366424][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 437.366443][ T38] ? __switch_to+0xc79/0x1410 [ 437.366469][ T38] ? __pfx_kthread+0x10/0x10 [ 437.366490][ T38] ret_from_fork_asm+0x1a/0x30 [ 437.366524][ T38] [ 437.366825][ T38] Kernel Offset: disabled