last executing test programs: 8m37.387188814s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) stat(0x0, 0x0) unshare(0x2c060000) unshare(0x8000400) unshare(0x28000600) 8m35.054191286s ago: executing program 1 (id=43): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='wg0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00', 0x501007, 0x20) readlinkat(r5, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00', &(0x7f0000000080)=""/203, 0xcb) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 8m25.705628158s ago: executing program 1 (id=52): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 8m22.845865929s ago: executing program 1 (id=57): openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 8m21.906005695s ago: executing program 1 (id=59): creat(&(0x7f0000000000)='./file0\x00', 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 8m16.466488609s ago: executing program 1 (id=65): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 8m0.98985102s ago: executing program 32 (id=65): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 2m31.867479435s ago: executing program 5 (id=1050): r0 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m29.066459221s ago: executing program 5 (id=1056): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000280)={0x80000000, 0x5, 0x2, 0x2, 0x0, "ea710000000000f9000000024240000200", 0x303, 0x8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xa) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 2m27.149998583s ago: executing program 5 (id=1063): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(0xffffffffffffffff, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) semop(0x0, &(0x7f0000000200), 0x53) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 2m26.405024627s ago: executing program 5 (id=1067): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x10c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xfa, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a281", @nested={0x10, 0xa4, 0x0, 0x1, [@typed={0x4, 0x15c}, @typed={0x8, 0x116, 0x0, 0x0, @uid}]}]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m26.171830123s ago: executing program 5 (id=1069): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x1}, 0x94) write(r1, &(0x7f0000000500)='0123:ab', 0x7) 2m25.615472704s ago: executing program 3 (id=1071): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='wg0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) 2m24.228656232s ago: executing program 3 (id=1073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000a060300000000000000000007000000280808800c00078008000940000000000c00078074ccd1b0c060c60800064000000007003200"/67], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2m23.916586189s ago: executing program 3 (id=1074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r5 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000280)={0x80000000, 0x5, 0x2, 0x2, 0x0, "ea710000000000f9000000024240000200", 0x303, 0x8}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xa) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 2m23.905173758s ago: executing program 5 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd700a1901", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000705100010000000000000000", @ANYRES32=r7, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x4001, 0x1100000000000000, 0x7, 0x8001, 0x0, 0x400000, 0xd, 0x0, 0x8e00, 0x7fffffffffffffff, 0x6, 0x401, 0x9, 0x5, 0x20000001, 0xc], 0x2, 0x1354}) r8 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 2m23.713359262s ago: executing program 3 (id=1077): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(0xffffffffffffffff, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) semop(0x0, &(0x7f0000000200), 0x53) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 2m23.475303762s ago: executing program 3 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) 2m21.730406268s ago: executing program 3 (id=1080): syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = dup(r0) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2m8.264317936s ago: executing program 33 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd700a1901", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4004084) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000705100010000000000000000", @ANYRES32=r7, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x4001, 0x1100000000000000, 0x7, 0x8001, 0x0, 0x400000, 0xd, 0x0, 0x8e00, 0x7fffffffffffffff, 0x6, 0x401, 0x9, 0x5, 0x20000001, 0xc], 0x2, 0x1354}) r8 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 18.224010251s ago: executing program 2 (id=1220): r0 = syz_open_dev$media(&(0x7f0000000000), 0xa3f, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)={r1}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0)=[{}, {0x80000000}], &(0x7f0000000a00)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r2, 0x0, &(0x7f0000000b00)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000bc0)={{r1, 0x0, 0x0, [0xffffffff, 0x2]}, {r3, 0x0, 0x1, [0x3, 0x7]}, 0x4, [0xb4e, 0x7]}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 14.811354334s ago: executing program 2 (id=1225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x20}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.087422118s ago: executing program 2 (id=1230): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 10.329381022s ago: executing program 2 (id=1232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) semop(0x0, &(0x7f0000000200), 0x53) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 6.284354555s ago: executing program 0 (id=1240): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r2) 5.817055904s ago: executing program 0 (id=1243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) semop(0x0, &(0x7f0000000200), 0x53) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 5.0028313s ago: executing program 2 (id=1244): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010000, 0x0) sendto$inet(r1, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.608614146s ago: executing program 0 (id=1245): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) 3.93763671s ago: executing program 2 (id=1247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x28}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.342113762s ago: executing program 0 (id=1249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4087, 0xff7}], 0x1, 0xf72, 0xfc000000) 3.269804887s ago: executing program 4 (id=1250): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shmctl$SHM_UNLOCK(0x0, 0xc) socket(0xf, 0x1, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) 2.807239304s ago: executing program 4 (id=1251): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.343863613s ago: executing program 4 (id=1252): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f00000001c0)}, 0x20) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x1000000}, 0x42) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0xfffffffffffffffa, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000029c0)=0xd) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xcd8d0000) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.269812805s ago: executing program 0 (id=1253): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000ff6608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xda, &(0x7f0000000440)=""/218, 0x41000, 0x1e}, 0x94) statx(0xffffffffffffffff, 0x0, 0x800, 0x2563e05cb9c8ea01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x144}, 0x800) lseek(r1, 0x164, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000004000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00", 0xd1, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r4 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) semop(0x0, &(0x7f0000000200), 0x53) ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000080)={0xd, 0x101}) 1.627441665s ago: executing program 4 (id=1254): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xa9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0x4c09, 0x0) splice(r3, 0x0, r2, 0x0, 0x80, 0x6) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a114996acc96e3dfd42038bd3fe37d58128b25f5ab60c9e6d680f985881a7beda9d69098c8b534464c5111fd8a0f3500000200", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc06000000000000000000000000000000000200", [0x2002, 0x6]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002080007400000000808000840000000000900010073797a3000000000090002007379"], 0xa4}}, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_setup_queues(r7, 0x0, 0x0, 0x0, 0x4, &(0x7f00000017c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf6}, 0x0, 0x0, '\x00', {0x5, 0xc81, 0x0, 0x0}}, 0x0) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.070937597s ago: executing program 0 (id=1255): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) 594.042392ms ago: executing program 4 (id=1256): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x1000000}, 0x42) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) msgrcv(0x0, 0x0, 0x0, 0x3, 0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0xfffffffffffffffa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 4 (id=1257): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): MaxPacketSize 0 [ 271.976057][ T1236] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.976156][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.095126][ T1236] usb 1-1: config 0 descriptor?? [ 272.114491][ T1236] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 272.203156][ T45] bridge_slave_1: left allmulticast mode [ 272.203195][ T45] bridge_slave_1: left promiscuous mode [ 272.203541][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.314845][ T6989] ldusb 1-1:0.55: Couldn't submit interrupt_in_urb -90 [ 272.326695][ T1236] usb 1-1: USB disconnect, device number 10 [ 272.346270][ T1236] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 272.414813][ T45] bridge_slave_0: left allmulticast mode [ 272.414851][ T45] bridge_slave_0: left promiscuous mode [ 272.427945][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.533919][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.672178][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.808579][ T45] bond0 (unregistering): Released all slaves [ 276.970676][ T5243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 277.519915][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.520304][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.520716][ T6726] bridge_slave_0: entered allmulticast mode [ 277.573382][ T6726] bridge_slave_0: entered promiscuous mode [ 277.793238][ T45] hsr_slave_0: left promiscuous mode [ 277.818837][ T45] hsr_slave_1: left promiscuous mode [ 277.819901][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.858443][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.977650][ T5775] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 278.127395][ T5775] usb 5-1: Using ep0 maxpacket: 8 [ 278.131471][ T5775] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.133331][ T5775] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 278.133357][ T5775] usb 5-1: config 0 has no interface number 0 [ 278.133402][ T5775] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.133427][ T5775] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 278.133453][ T5775] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.133480][ T5775] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 278.133502][ T5775] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 278.133545][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.056491][ T5775] usb 5-1: config 0 descriptor?? [ 280.123182][ T5775] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 280.291000][ T7054] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 280.306893][ T5775] usb 5-1: USB disconnect, device number 15 [ 280.350085][ T5775] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 280.688372][ T45] team0 (unregistering): Port device team_slave_1 removed [ 280.833452][ T45] team0 (unregistering): Port device team_slave_0 removed [ 284.169236][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.169324][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.169500][ T6726] bridge_slave_1: entered allmulticast mode [ 284.397659][ T6726] bridge_slave_1: entered promiscuous mode [ 284.887180][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.048357][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.405375][ T6726] team0: Port device team_slave_0 added [ 285.436165][ T6726] team0: Port device team_slave_1 added [ 286.103331][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.103344][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.103389][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.151524][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.151543][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.151572][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.516086][ T6726] hsr_slave_0: entered promiscuous mode [ 286.530163][ T6726] hsr_slave_1: entered promiscuous mode [ 286.532978][ T6726] debugfs: 'hsr0' already exists in 'hsr' [ 286.533004][ T6726] Cannot create hsr debugfs directory [ 290.228393][ T937] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 290.411074][ T937] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.439117][ T937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.439167][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.531624][ T937] usb 3-1: config 0 descriptor?? [ 290.875975][ T6726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.977484][ T937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 291.046164][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.075377][ T6726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.147443][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 291.148464][ T937] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.153447][ T937] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 291.153474][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.153493][ T937] usb 1-1: config 0 has no interface number 0 [ 291.153541][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.259322][ T937] usb 1-1: config 0 descriptor?? [ 291.283139][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.300015][ T6726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.342442][ T937] ldusb 1-1:0.55: Interrupt in endpoint not found [ 291.566477][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.624955][ T6726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.795647][ T5775] usb 1-1: USB disconnect, device number 11 [ 291.811632][ T6726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.984506][ T36] usb 3-1: USB disconnect, device number 8 [ 294.241666][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.402971][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.463549][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.475104][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.018031][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.018173][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.667447][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 298.823186][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.824674][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.824717][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.909948][ T9] usb 1-1: config 0 descriptor?? [ 300.543724][ T5703] usb 1-1: USB disconnect, device number 12 [ 300.923036][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.397451][ T5716] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 302.557409][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 302.759504][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.759546][ T5716] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 302.761540][ T5716] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 302.761566][ T5716] usb 1-1: can't read configurations, error -71 [ 303.254576][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.315738][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.340684][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.350677][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.361059][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.282202][ T37] audit: type=1326 audit(1786935199.805:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7331 comm="syz.0.427" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d4f48e0d9 code=0x0 [ 305.407480][ T5607] Bluetooth: hci5: command tx timeout [ 306.129737][ T7361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 306.129766][ T7361] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.129863][ T7361] vhci_hcd vhci_hcd.0: Device attached [ 306.437459][ T5703] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 306.438013][ T1236] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 307.596074][ T5607] Bluetooth: hci5: command tx timeout [ 308.080792][ T5703] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.081695][ T5703] usb 1-1: config 0 has no interfaces? [ 308.081731][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.140937][ T5703] usb 1-1: config 0 descriptor?? [ 308.160175][ T5775] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 308.307350][ T5775] usb 5-1: Using ep0 maxpacket: 16 [ 308.308359][ T5775] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.312251][ T5775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.312321][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.312350][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.312373][ T5775] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 308.312396][ T5775] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.314791][ T5775] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.314817][ T5775] usb 5-1: Manufacturer: syz [ 308.433170][ T5775] usb 5-1: config 0 descriptor?? [ 308.435947][ T7362] usbip_core: unknown command [ 308.435960][ T7362] vhci_hcd: unknown pdu 671088640 [ 308.435973][ T7362] usbip_core: unknown command [ 308.449171][ T5716] usb 1-1: USB disconnect, device number 15 [ 308.481115][ T5812] vhci_hcd vhci_hcd.0: stop threads [ 308.481136][ T5812] vhci_hcd vhci_hcd.0: release socket [ 308.481189][ T5812] vhci_hcd vhci_hcd.0: disconnect device [ 308.777345][ T5775] rc_core: IR keymap rc-hauppauge not found [ 308.777367][ T5775] Registered IR keymap rc-empty [ 308.777524][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.797575][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.828626][ T5775] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 308.854071][ T5775] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 308.954691][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.971576][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 308.987983][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.021389][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.037661][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.059801][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.086422][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.098986][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.121381][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.141757][ T5775] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 309.289419][ T5775] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 309.289446][ T5775] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.411396][ T5775] usb 5-1: USB disconnect, device number 16 [ 309.658300][ T5607] Bluetooth: hci5: command tx timeout [ 310.397399][ T5716] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 312.154842][ T5607] Bluetooth: hci5: command tx timeout [ 312.182293][ T5716] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.183933][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.212872][ T5716] usb 3-1: config 0 descriptor?? [ 312.231316][ T5716] cp210x 3-1:0.0: cp210x converter detected [ 312.254354][ T1236] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 312.458640][ T5716] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 312.458683][ T5716] cp210x 3-1:0.0: querying part number failed [ 312.671479][ T5716] usb 3-1: cp210x converter now attached to ttyUSB0 [ 313.302059][ T7431] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 313.302090][ T7431] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 313.306078][ T7431] vhci_hcd vhci_hcd.0: Device attached [ 313.566288][ T5703] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 313.591625][ T36] usb 3-1: USB disconnect, device number 9 [ 313.627413][ T1236] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 313.741189][ T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.760829][ T36] cp210x 3-1:0.0: device disconnected [ 313.840180][ T1236] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.840973][ T1236] usb 1-1: config 0 has no interfaces? [ 313.841007][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.890436][ T1236] usb 1-1: config 0 descriptor?? [ 314.099556][ T937] usb 1-1: USB disconnect, device number 16 [ 314.114287][ T7432] vhci_hcd: connection reset by peer [ 314.116983][ T990] vhci_hcd vhci_hcd.0: stop threads [ 314.117011][ T990] vhci_hcd vhci_hcd.0: release socket [ 314.228902][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 314.334412][ T990] vhci_hcd vhci_hcd.0: disconnect device [ 314.378161][ T36] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.378223][ T36] usb 3-1: no configurations [ 314.378236][ T36] usb 3-1: can't read configurations, error -22 [ 314.507375][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 314.739096][ T36] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.739149][ T36] usb 3-1: no configurations [ 314.739161][ T36] usb 3-1: can't read configurations, error -22 [ 314.772112][ T36] usb usb3-port1: attempt power cycle [ 315.177362][ T36] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 315.199029][ T36] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.199072][ T36] usb 3-1: no configurations [ 315.199081][ T36] usb 3-1: can't read configurations, error -22 [ 315.339115][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 315.370192][ T36] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.370238][ T36] usb 3-1: no configurations [ 315.370247][ T36] usb 3-1: can't read configurations, error -22 [ 315.370691][ T36] usb usb3-port1: unable to enumerate USB device [ 315.459536][ T37] audit: type=1326 audit(1786935209.975:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7472 comm="syz.4.469" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f683cf8e0d9 code=0x0 [ 317.176236][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.176288][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.414911][ T5825] bridge_slave_1: left allmulticast mode [ 317.414938][ T5825] bridge_slave_1: left promiscuous mode [ 317.479115][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.643951][ T5825] bridge_slave_0: left allmulticast mode [ 317.643988][ T5825] bridge_slave_0: left promiscuous mode [ 317.644271][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.997584][ T36] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 318.202408][ T36] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.204324][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.259191][ T36] usb 1-1: config 0 descriptor?? [ 318.275841][ T36] cp210x 1-1:0.0: cp210x converter detected [ 318.520191][ T36] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 318.520212][ T36] cp210x 1-1:0.0: querying part number failed [ 318.575326][ T36] usb 1-1: cp210x converter now attached to ttyUSB0 [ 318.687385][ T5703] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 319.377426][ T1236] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 319.528771][ T1236] usb 5-1: Using ep0 maxpacket: 16 [ 319.546483][ T1236] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 319.564433][ T1236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.564473][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.564492][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.564508][ T1236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 319.564524][ T1236] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.574311][ T1236] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 319.574340][ T1236] usb 5-1: Manufacturer: syz [ 319.741985][ T1236] usb 5-1: config 0 descriptor?? [ 320.590186][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.670174][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.775257][ T5825] bond0 (unregistering): Released all slaves [ 320.851486][ T5593] usb 1-1: USB disconnect, device number 17 [ 321.169156][ T5593] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 321.218549][ T5593] cp210x 1-1:0.0: device disconnected [ 321.656176][ T37] audit: type=1326 audit(1786935216.175:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.0.496" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d4f48e0d9 code=0x0 [ 322.250138][ T7544] binder: 7542:7544 ioctl 4018620d 0 returned -22 [ 322.677400][ T1236] rc_core: IR keymap rc-hauppauge not found [ 322.677422][ T1236] Registered IR keymap rc-empty [ 322.677581][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.697804][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 322.723095][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 322.727180][ T5825] hsr_slave_0: left promiscuous mode [ 322.969881][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 323.150387][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.156080][ T5825] hsr_slave_1: left promiscuous mode [ 323.167430][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.186746][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.200617][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.219517][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.237720][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.252195][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.264645][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.278837][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.297685][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.318052][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.337417][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 323.379477][ T1236] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 323.379502][ T1236] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 323.464986][ T1236] usb 5-1: USB disconnect, device number 17 [ 324.017378][ T1236] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 324.173668][ T1236] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.175361][ T1236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.219591][ T1236] usb 5-1: config 0 descriptor?? [ 324.248842][ T1236] cp210x 5-1:0.0: cp210x converter detected [ 324.461085][ T1236] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 324.461115][ T1236] cp210x 5-1:0.0: querying part number failed [ 324.486680][ T1236] usb 5-1: cp210x converter now attached to ttyUSB0 [ 326.844323][ T31] usb 5-1: USB disconnect, device number 18 [ 326.919417][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 326.920239][ T31] cp210x 5-1:0.0: device disconnected [ 327.846465][ T7604] fuse: Bad value for 'fd' [ 328.300636][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 328.422842][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 331.736900][ T37] audit: type=1326 audit(1786935226.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f683cf8e0d9 code=0x0 [ 332.198258][ T7305] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.202132][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.202320][ T7305] bridge_slave_0: entered allmulticast mode [ 332.232153][ T7305] bridge_slave_0: entered promiscuous mode [ 332.497039][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 332.504298][ T7305] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.504387][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.504562][ T7305] bridge_slave_1: entered allmulticast mode [ 332.506859][ T7305] bridge_slave_1: entered promiscuous mode [ 332.905200][ T7305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.936109][ T7305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.329253][ T7305] team0: Port device team_slave_0 added [ 333.567957][ T7305] team0: Port device team_slave_1 added [ 334.220116][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.220134][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.220169][ T7305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.322797][ T7305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.322810][ T7305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.322829][ T7305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.774643][ T7305] hsr_slave_0: entered promiscuous mode [ 334.803133][ T7305] hsr_slave_1: entered promiscuous mode [ 334.810388][ T7305] debugfs: 'hsr0' already exists in 'hsr' [ 334.810459][ T7305] Cannot create hsr debugfs directory [ 336.319646][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 336.503412][ T31] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 336.518304][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.518324][ T31] usb 3-1: config 0 has no interfaces? [ 336.518345][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.644495][ T31] usb 3-1: config 0 descriptor?? [ 336.672297][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 336.694496][ T7683] can: request_module (can-proto-3) failed. [ 339.076181][ T937] usb 3-1: USB disconnect, device number 14 [ 340.175184][ T7305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 340.204114][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.205462][ T7305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 340.252672][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.255480][ T7305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.323426][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.325100][ T7305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.361941][ T7305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.525163][ T7305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.574443][ T7305] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.594773][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.595006][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.629131][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.629303][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.455762][ T7305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.856554][ T7305] veth0_vlan: entered promiscuous mode [ 341.876146][ T7305] veth1_vlan: entered promiscuous mode [ 341.960077][ T7305] veth0_macvtap: entered promiscuous mode [ 342.002684][ T7305] veth1_macvtap: entered promiscuous mode [ 342.038197][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.061738][ T7305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.138487][ T5849] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.347444][ T5849] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.350365][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.544543][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.544563][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.557685][ T1179] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.646242][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.646262][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.399611][ T7852] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 353.399703][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 353.451836][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 353.494688][ T7853] vhci_hcd: connection closed [ 353.498739][ T5825] vhci_hcd vhci_hcd.4: stop threads [ 353.498766][ T5825] vhci_hcd vhci_hcd.4: release socket [ 353.498871][ T5825] vhci_hcd vhci_hcd.4: disconnect device [ 355.737344][ T5590] Bluetooth: hci3: command 0x0406 tx timeout [ 357.902379][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 377.467528][ T5799] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 377.617381][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 377.618246][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.619917][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.619986][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.620075][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.620098][ T5799] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.620121][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.715049][ T5799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.715077][ T5799] usb 3-1: Manufacturer: syz [ 377.759436][ T5799] usb 3-1: config 0 descriptor?? [ 378.117575][ T5799] rc_core: IR keymap rc-hauppauge not found [ 378.117598][ T5799] Registered IR keymap rc-empty [ 378.117874][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.158179][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.179079][ T5799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 378.184414][ T5799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 378.220041][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.237642][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.257440][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.279843][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.297857][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.317946][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.337348][ T5703] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 378.337453][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.360723][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.387962][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.408301][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 378.467877][ T5799] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 378.467904][ T5799] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 378.497518][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 378.499241][ T5703] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 378.507085][ T5799] usb 3-1: USB disconnect, device number 15 [ 378.510500][ T5703] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 378.510609][ T5703] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.510642][ T5703] usb 5-1: config 0 has no interface number 0 [ 378.510732][ T5703] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.510771][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.621941][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622014][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.704350][ T5703] usb 5-1: config 0 descriptor?? [ 378.735055][ T5703] ldusb 5-1:0.55: Interrupt in endpoint not found [ 380.731887][ T10] usb 5-1: USB disconnect, device number 19 [ 382.597393][ T36] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 382.728027][ T36] usb 3-1: device descriptor read/64, error -71 [ 382.967420][ T36] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 383.097350][ T36] usb 3-1: device descriptor read/64, error -71 [ 383.209677][ T36] usb usb3-port1: attempt power cycle [ 391.897323][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 392.048522][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 392.049726][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.049744][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.049769][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.083560][ T10] usb 3-1: config 0 descriptor?? [ 392.390230][ T8103] binder: 8102:8103 ioctl 400c620e 200000000180 returned -22 [ 394.095802][ T8127] can: request_module (can-proto-3) failed. [ 394.918796][ T937] usb 3-1: USB disconnect, device number 19 [ 396.083221][ T8166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 396.083249][ T8166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 396.084936][ T8166] vhci_hcd vhci_hcd.0: Device attached [ 396.296128][ T8173] binder: 8163:8173 ioctl 400c620e 200000000180 returned -22 [ 396.387344][ T937] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 396.489400][ T5716] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 396.638204][ T5716] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.639109][ T5716] usb 3-1: config 0 has no interfaces? [ 396.639145][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.688055][ T5716] usb 3-1: config 0 descriptor?? [ 396.895962][ T8167] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 396.896386][ T5856] vhci_hcd vhci_hcd.2: stop threads [ 396.896403][ T5856] vhci_hcd vhci_hcd.2: release socket [ 396.896484][ T5856] vhci_hcd vhci_hcd.2: disconnect device [ 396.923842][ T5718] usb 3-1: USB disconnect, device number 20 [ 397.523474][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.688'. [ 399.358996][ T8213] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 401.621050][ T937] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 402.854185][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 403.245531][ T8230] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 403.245561][ T8230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 403.245654][ T8230] vhci_hcd vhci_hcd.0: Device attached [ 403.587299][ T937] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 403.609434][ T1236] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 403.617523][ T9] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 403.737367][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 403.738376][ T937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.740257][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.740326][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.740359][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.740383][ T937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.740415][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.742013][ T937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.742040][ T937] usb 1-1: Manufacturer: syz [ 403.814466][ T1236] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.823856][ T1236] usb 3-1: config 0 has no interfaces? [ 403.823923][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.872486][ T937] usb 1-1: config 0 descriptor?? [ 403.899939][ T1236] usb 3-1: config 0 descriptor?? [ 404.103523][ T8231] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 404.117404][ T5857] vhci_hcd vhci_hcd.2: stop threads [ 404.117432][ T5857] vhci_hcd vhci_hcd.2: release socket [ 404.117524][ T5857] vhci_hcd vhci_hcd.2: disconnect device [ 404.247281][ T937] rc_core: IR keymap rc-hauppauge not found [ 404.247304][ T937] Registered IR keymap rc-empty [ 404.247460][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.256566][ T5799] usb 3-1: USB disconnect, device number 21 [ 404.281812][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.301688][ T937] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 404.368728][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 404.431654][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.453806][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.467499][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.487483][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.507486][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.527417][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.547394][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.567377][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.577761][ T1236] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 404.592438][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.607383][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 404.654600][ T937] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.654628][ T937] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.721104][ T937] usb 1-1: USB disconnect, device number 18 [ 404.727887][ T1236] usb 5-1: Using ep0 maxpacket: 8 [ 404.922237][ T1236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.922285][ T1236] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 404.947104][ T1236] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 404.947144][ T1236] usb 5-1: can't read configurations, error -71 [ 404.977402][ T8255] can: request_module (can-proto-3) failed. [ 408.757424][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 410.837597][ T8287] binder: 8276:8287 ioctl 400c620e 200000000180 returned -22 [ 411.498088][ T8292] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 411.667618][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.723'. [ 419.517331][ T1236] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 419.673721][ T1236] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.675691][ T1236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.675737][ T1236] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.675774][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.358707][ T1236] usb 1-1: config 0 descriptor?? [ 420.599083][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 420.831200][ T8388] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 421.698759][ T8414] netlink: 'syz.4.756': attribute type 2 has an invalid length. [ 421.698784][ T8414] netlink: 224 bytes leftover after parsing attributes in process `syz.4.756'. [ 422.048713][ T8430] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 422.349559][ T937] usb 1-1: USB disconnect, device number 19 [ 423.129434][ T8456] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 423.983355][ T8482] binder: 8474:8482 ioctl 4018620d 0 returned -22 [ 425.159165][ T37] audit: type=1326 audit(1786935319.375:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8488 comm="syz.4.776" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f683cf8e0d9 code=0x0 [ 426.767343][ T5607] Bluetooth: hci5: command 0x0406 tx timeout [ 430.527325][ T1236] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 430.657401][ T1236] usb 6-1: device descriptor read/64, error -71 [ 430.897361][ T1236] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.027327][ T1236] usb 6-1: device descriptor read/64, error -71 [ 432.040248][ T1236] usb usb6-port1: attempt power cycle [ 432.397409][ T1236] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 432.420291][ T1236] usb 6-1: device descriptor read/8, error -71 [ 432.492928][ T8555] can: request_module (can-proto-3) failed. [ 432.716367][ T1236] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 432.744064][ T1236] usb 6-1: device descriptor read/8, error -71 [ 432.862846][ T1236] usb usb6-port1: unable to enumerate USB device [ 437.975628][ T8608] can: request_module (can-proto-3) failed. [ 438.768871][ T5716] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 438.927378][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 438.928359][ T5716] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.929173][ T5716] usb 3-1: config 0 has no interfaces? [ 438.929206][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.957749][ T5716] usb 3-1: config 0 descriptor?? [ 440.049298][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049368][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.617284][ T5703] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 440.657598][ T1236] usb 3-1: USB disconnect, device number 22 [ 440.767276][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 440.769593][ T5703] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.771297][ T5703] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.771363][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.771392][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.771413][ T5703] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 440.771435][ T5703] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.772911][ T5703] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.772935][ T5703] usb 5-1: Manufacturer: syz [ 440.891034][ T5703] usb 5-1: config 0 descriptor?? [ 441.197943][ T5703] rc_core: IR keymap rc-hauppauge not found [ 441.197964][ T5703] Registered IR keymap rc-empty [ 441.198124][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.228683][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.266511][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 441.288163][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 441.397416][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.420642][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.437641][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.470182][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.487372][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.517367][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.539430][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.557483][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.587545][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.617570][ T5703] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 441.675539][ T5703] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 441.675568][ T5703] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 441.709690][ T5703] usb 5-1: USB disconnect, device number 22 [ 442.485308][ T8659] can: request_module (can-proto-3) failed. [ 442.567300][ T1236] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 442.717331][ T1236] usb 3-1: Using ep0 maxpacket: 16 [ 442.718487][ T1236] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 442.720203][ T1236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.720256][ T1236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.720293][ T1236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.720316][ T1236] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 442.720339][ T1236] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.724419][ T1236] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 442.724442][ T1236] usb 3-1: Manufacturer: syz [ 443.910021][ T1236] usb 3-1: config 0 descriptor?? [ 444.519245][ T1236] rc_core: IR keymap rc-hauppauge not found [ 444.519267][ T1236] Registered IR keymap rc-empty [ 444.519422][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 444.550043][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 444.639821][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 444.653187][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 446.381912][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 446.401531][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 446.699879][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 446.717475][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 446.747694][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.683283][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.709289][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.728043][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.791200][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.808727][ T1236] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 448.834109][ T1236] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 448.834135][ T1236] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 448.930742][ T1236] usb 3-1: USB disconnect, device number 23 [ 451.265868][ T5717] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 451.708690][ T5717] usb 5-1: device descriptor read/64, error -71 [ 452.217305][ T5717] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 452.365108][ T5717] usb 5-1: device descriptor read/64, error -71 [ 452.470308][ T5717] usb usb5-port1: attempt power cycle [ 453.677442][ T5717] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 453.699529][ T5717] usb 5-1: device descriptor read/8, error -71 [ 455.297299][ T1236] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 455.450692][ T1236] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 455.454774][ T1236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.454833][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.501159][ T1236] usb 3-1: config 0 descriptor?? [ 455.578949][ T1236] pwc: Askey VC010 type 2 USB webcam detected. [ 455.607593][ T5717] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 455.629633][ T5717] usb 5-1: not running at top speed; connect to a high speed hub [ 455.629675][ T5717] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 455.710151][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.710181][ T5717] usb 5-1: Product: syz [ 455.710196][ T5717] usb 5-1: Manufacturer: syz [ 455.710211][ T5717] usb 5-1: SerialNumber: syz [ 455.862783][ T5717] oti6858 5-1:1.0: oti6858 converter detected [ 455.942272][ T1236] pwc: recv_control_msg error -32 req 02 val 2b00 [ 455.948020][ T1236] pwc: recv_control_msg error -32 req 02 val 2700 [ 455.972493][ T1236] pwc: recv_control_msg error -32 req 02 val 2c00 [ 455.973687][ T1236] pwc: recv_control_msg error -32 req 04 val 1000 [ 455.981317][ T1236] pwc: recv_control_msg error -32 req 04 val 1300 [ 455.986491][ T1236] pwc: recv_control_msg error -32 req 04 val 1400 [ 455.992784][ T1236] pwc: recv_control_msg error -32 req 02 val 2000 [ 455.994259][ T1236] pwc: recv_control_msg error -32 req 02 val 2100 [ 455.997612][ T1236] pwc: recv_control_msg error -32 req 04 val 1500 [ 456.019972][ T1236] pwc: recv_control_msg error -32 req 02 val 2500 [ 456.043860][ T1236] pwc: recv_control_msg error -71 req 02 val 2400 [ 456.044319][ T1236] pwc: recv_control_msg error -71 req 02 val 2600 [ 456.046733][ T1236] pwc: recv_control_msg error -71 req 02 val 2900 [ 456.047730][ T1236] pwc: recv_control_msg error -71 req 02 val 2800 [ 456.048446][ T1236] pwc: recv_control_msg error -71 req 04 val 1100 [ 456.085541][ T1236] pwc: recv_control_msg error -71 req 04 val 1200 [ 456.109584][ T1236] pwc: Registered as video103. [ 456.233048][ T1236] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 456.234756][ T5717] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 456.420577][ T1236] usb 3-1: USB disconnect, device number 24 [ 456.441720][ T5717] usb 5-1: USB disconnect, device number 26 [ 456.764085][ T5717] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 456.765105][ T5717] oti6858 5-1:1.0: device disconnected [ 457.517383][ T5716] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 457.547611][ T1236] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 457.668379][ T5716] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 457.670270][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.670310][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.711831][ T5716] usb 5-1: config 0 descriptor?? [ 457.727285][ T1236] usb 3-1: Using ep0 maxpacket: 8 [ 457.728107][ T1236] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.728921][ T1236] usb 3-1: config 0 has no interfaces? [ 457.728953][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.773464][ T5716] pwc: Askey VC010 type 2 USB webcam detected. [ 457.776031][ T1236] usb 3-1: config 0 descriptor?? [ 458.168640][ T5716] pwc: recv_control_msg error -32 req 02 val 2b00 [ 458.169887][ T5716] pwc: recv_control_msg error -32 req 02 val 2700 [ 458.173648][ T5716] pwc: recv_control_msg error -32 req 02 val 2c00 [ 458.204953][ T5716] pwc: recv_control_msg error -32 req 04 val 1000 [ 458.206984][ T5716] pwc: recv_control_msg error -32 req 04 val 1300 [ 458.225336][ T5716] pwc: recv_control_msg error -32 req 04 val 1400 [ 458.233950][ T5716] pwc: recv_control_msg error -32 req 02 val 2000 [ 458.243991][ T5716] pwc: recv_control_msg error -32 req 02 val 2100 [ 458.267877][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.283106][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.315994][ T5716] pwc: recv_control_msg error -32 req 04 val 1500 [ 458.316381][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.332440][ T5716] pwc: recv_control_msg error -32 req 02 val 2500 [ 458.333257][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.333405][ T5716] pwc: recv_control_msg error -32 req 02 val 2400 [ 458.334048][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.335161][ T5716] pwc: recv_control_msg error -32 req 02 val 2600 [ 458.335540][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.335687][ T5716] pwc: recv_control_msg error -32 req 02 val 2900 [ 458.336047][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.336452][ T5716] pwc: recv_control_msg error -32 req 02 val 2800 [ 458.337026][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.371243][ T5716] pwc: recv_control_msg error -32 req 04 val 1100 [ 458.371645][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 458.412906][ T5716] pwc: recv_control_msg error -32 req 04 val 1200 [ 458.445514][ T5716] pwc: Registered as video103. [ 458.473734][ T5716] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 458.522646][ T5716] usb 5-1: USB disconnect, device number 27 [ 458.715090][ T8781] binder: 8774:8781 ioctl 400c620e 200000000180 returned -22 [ 460.951284][ T1236] usb 3-1: USB disconnect, device number 25 [ 466.404398][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 466.580049][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 466.581457][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.581537][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.624599][ T9] usb 3-1: config 0 descriptor?? [ 467.640056][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 467.889065][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 467.894106][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 467.897709][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 467.918600][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 467.923191][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 467.925204][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 467.950982][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 467.967377][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 467.969583][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 467.970644][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 467.973454][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 467.974596][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 467.975099][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 467.975573][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 467.985467][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 468.011061][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 468.080107][ T9] pwc: Registered as video103. [ 468.085166][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 468.099551][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 468.130573][ T9] usb 3-1: USB disconnect, device number 26 [ 468.253684][ T31] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 468.269891][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.269951][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.396036][ T31] usb 6-1: config 0 descriptor?? [ 468.451562][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 468.865681][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 468.881101][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 468.882420][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 468.883376][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 468.886750][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 468.919131][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 468.933754][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 468.946139][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 468.975450][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.009051][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.014161][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 469.038719][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 469.039556][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 469.043438][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 469.044019][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 469.094757][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 469.152528][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 469.166603][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 469.698041][ T31] pwc: Registered as video103. [ 469.742216][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 469.778290][ T31] usb 6-1: USB disconnect, device number 6 [ 470.225240][ T8883] ALSA: mixer_oss: invalid OSS volume '' [ 474.257281][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 476.089767][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 476.090759][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.092587][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.092640][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.092669][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.092692][ T36] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 476.092715][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.094739][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.094772][ T36] usb 5-1: Manufacturer: syz [ 476.160576][ T36] usb 5-1: config 0 descriptor?? [ 476.637270][ T36] rc_core: IR keymap rc-hauppauge not found [ 476.637291][ T36] Registered IR keymap rc-empty [ 476.637450][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.641679][ T8945] ALSA: mixer_oss: invalid OSS volume '' [ 476.658112][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.692792][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 476.720697][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20 [ 476.891485][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.912296][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.929266][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.947396][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.968286][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 476.987505][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.008272][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.030874][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.060254][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.078772][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 477.128021][ T36] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 477.128041][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 477.209015][ T36] usb 5-1: USB disconnect, device number 28 [ 478.907337][ T1236] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 479.077271][ T1236] usb 5-1: Using ep0 maxpacket: 16 [ 479.080507][ T1236] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 479.084406][ T1236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.084460][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 479.084489][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 479.084510][ T1236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 479.084531][ T1236] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.086741][ T1236] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 479.086767][ T1236] usb 5-1: Manufacturer: syz [ 479.185758][ T1236] usb 5-1: config 0 descriptor?? [ 479.743226][ T1236] rc_core: IR keymap rc-hauppauge not found [ 479.743299][ T1236] Registered IR keymap rc-empty [ 479.743849][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 479.769107][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.056052][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 480.639256][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 480.899383][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.931797][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.957454][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 480.987429][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.023146][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.047456][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.067412][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.087554][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.127744][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.154874][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.170425][ T1236] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 481.170451][ T1236] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.207559][ T1236] usb 5-1: USB disconnect, device number 29 [ 482.167699][ T5717] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 482.900670][ T5717] usb 6-1: Using ep0 maxpacket: 16 [ 482.901699][ T5717] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.903540][ T5717] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.903594][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 482.903623][ T5717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 482.903645][ T5717] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 482.903678][ T5717] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.905183][ T5717] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.905208][ T5717] usb 6-1: Manufacturer: syz [ 483.013378][ T5717] usb 6-1: config 0 descriptor?? [ 483.913450][ T5717] rc_core: IR keymap rc-hauppauge not found [ 483.913472][ T5717] Registered IR keymap rc-empty [ 483.913699][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 483.927388][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 483.959820][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 484.000020][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 484.064120][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.079988][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.108570][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.130012][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.147608][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.312320][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.329683][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.349005][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.377113][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.397371][ T5717] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 484.436781][ T5717] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 484.436800][ T5717] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 484.633034][ T5717] usb 6-1: USB disconnect, device number 7 [ 487.510457][ T1236] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 487.547261][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 487.687551][ T1236] usb 6-1: Using ep0 maxpacket: 16 [ 487.740050][ T1236] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 487.805148][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 488.159083][ T1236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.167367][ T1236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.206060][ T1236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.221114][ T1236] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 488.223054][ T1236] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.261277][ T1236] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 488.261305][ T1236] usb 6-1: Manufacturer: syz [ 488.265141][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 488.297639][ T9] usb 5-1: config 0 has an invalid descriptor of length 35, skipping remainder of the config [ 488.297680][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.297700][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 488.297715][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 488.297731][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.298865][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 488.298889][ T9] usb 5-1: Manufacturer: syz [ 488.311707][ T1236] usb 6-1: config 0 descriptor?? [ 488.473603][ T9] usb 5-1: config 0 descriptor?? [ 488.982825][ T1236] rc_core: IR keymap rc-hauppauge not found [ 488.982846][ T1236] Registered IR keymap rc-empty [ 488.983001][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.020362][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.039644][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 489.044343][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 489.094363][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.107421][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.131726][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.174598][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.219069][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.260785][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.288629][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.320178][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.345072][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.357356][ T1236] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 489.510620][ T1236] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 489.510648][ T1236] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 489.528996][ T9] rc_core: IR keymap rc-hauppauge not found [ 489.529063][ T9] Registered IR keymap rc-empty [ 489.529466][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.557364][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.595422][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 489.644104][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input24 [ 489.667231][ T1236] usb 6-1: USB disconnect, device number 8 [ 489.775781][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.787707][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.809593][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.827401][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.849122][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.867472][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.889076][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.914771][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.927389][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 489.947356][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 490.854171][ T9] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 490.854262][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 491.227790][ T9] usb 5-1: USB disconnect, device number 30 [ 492.251031][ T9102] syz.2.989 (9102) used greatest stack depth: 18632 bytes left [ 492.667970][ T1236] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 492.897577][ T1236] usb 6-1: Using ep0 maxpacket: 8 [ 492.898668][ T1236] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 492.900213][ T1236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.900237][ T1236] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.900273][ T1236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.971124][ T1236] usb 6-1: config 0 descriptor?? [ 493.254100][ T5703] usb 6-1: USB disconnect, device number 9 [ 495.777424][ T5717] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 495.950587][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 496.088427][ T5717] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 496.134349][ T1236] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 496.257367][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.257429][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.257458][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 496.257480][ T5717] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 496.257504][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.557342][ T1236] usb 6-1: Using ep0 maxpacket: 8 [ 496.586961][ T5717] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 496.587007][ T5717] usb 3-1: Manufacturer: syz [ 496.808705][ T5717] usb 3-1: config 0 descriptor?? [ 496.992740][ T1236] usb 6-1: unable to get BOS descriptor or descriptor too short [ 496.992803][ T1236] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 496.993850][ T1236] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 496.993897][ T1236] usb 6-1: can't read configurations, error -71 [ 497.477313][ T5717] rc_core: IR keymap rc-hauppauge not found [ 497.477330][ T5717] Registered IR keymap rc-empty [ 497.477445][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.497726][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.526182][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 497.571292][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 497.591429][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.607545][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.627416][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.647493][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.667670][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.711588][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.731433][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.749290][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.772728][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.787340][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 497.948221][ T5717] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 497.948259][ T5717] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 498.001024][ T5717] usb 3-1: USB disconnect, device number 27 [ 498.677362][ T1236] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 498.830191][ T1236] usb 5-1: Using ep0 maxpacket: 16 [ 498.836835][ T1236] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 498.872284][ T1236] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 498.872341][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.872371][ T1236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 498.872393][ T1236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 498.872417][ T1236] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.243463][ T1236] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 499.243496][ T1236] usb 5-1: Manufacturer: syz [ 500.098046][ T1236] usb 5-1: config 0 descriptor?? [ 502.910856][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.910934][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.017228][ T1236] rc_core: IR keymap rc-hauppauge not found [ 503.017249][ T1236] Registered IR keymap rc-empty [ 503.017410][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.047366][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.145722][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 503.172491][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 503.195520][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.207578][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.237356][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.257370][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.277391][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.298035][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.328397][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.348411][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.432648][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.447533][ T1236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 503.902846][ T1236] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 503.902899][ T1236] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.000477][ T1236] usb 5-1: USB disconnect, device number 31 [ 505.539891][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 514.334728][ T9320] ALSA: mixer_oss: invalid OSS volume '' [ 526.510384][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 526.566686][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 526.584885][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 526.586378][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 526.641840][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.048586][ T1236] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 528.209096][ T1236] usb 3-1: Using ep0 maxpacket: 8 [ 528.209926][ T1236] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 528.212803][ T1236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.212827][ T1236] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.212864][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.373989][ T1236] usb 3-1: config 0 descriptor?? [ 528.701534][ T1236] usb 3-1: USB disconnect, device number 28 [ 529.248390][ T5590] Bluetooth: hci1: command tx timeout [ 531.328049][ T5590] Bluetooth: hci1: command tx timeout [ 533.407974][ T5590] Bluetooth: hci1: command tx timeout [ 534.828097][ T5856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.705127][ T5590] Bluetooth: hci1: command tx timeout [ 538.031921][ T9402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 538.067579][ T9402] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 538.091333][ T9402] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 538.110674][ T9402] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 538.191111][ T9402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.938215][ T5856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.087320][ T5703] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 540.238947][ T5703] usb 1-1: Using ep0 maxpacket: 16 [ 540.240631][ T5703] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.266212][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.266283][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.266314][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 540.266339][ T5703] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 540.266356][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.287379][ T5590] Bluetooth: hci2: command tx timeout [ 540.309383][ T5703] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.309411][ T5703] usb 1-1: Manufacturer: syz [ 540.383086][ T5703] usb 1-1: config 0 descriptor?? [ 540.877225][ T5703] rc_core: IR keymap rc-hauppauge not found [ 540.877249][ T5703] Registered IR keymap rc-empty [ 540.877411][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 540.907373][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 540.929698][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 540.933883][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 542.102548][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.117367][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.309579][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.337339][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.367479][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.367560][ T5590] Bluetooth: hci2: command tx timeout [ 542.387299][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.407324][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.427521][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.449965][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.467349][ T5703] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 542.505748][ T5703] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 542.505771][ T5703] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 542.555668][ T5703] usb 1-1: USB disconnect, device number 20 [ 544.388359][ T5856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.924798][ T5590] Bluetooth: hci2: command tx timeout [ 547.967339][ T9402] Bluetooth: hci2: command tx timeout [ 548.037327][ T5703] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 548.177398][ T5703] usb 5-1: device descriptor read/64, error -71 [ 548.281600][ T5856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.427269][ T5703] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 548.599036][ T5703] usb 5-1: device descriptor read/64, error -71 [ 548.708088][ T5703] usb usb5-port1: attempt power cycle [ 552.478253][ T5716] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 552.549276][ T5856] bridge_slave_1: left allmulticast mode [ 552.549311][ T5856] bridge_slave_1: left promiscuous mode [ 552.549599][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.678517][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 553.726962][ T5716] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 553.744753][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.744825][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.744856][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 553.744877][ T5716] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 553.744900][ T5716] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.746594][ T5716] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 553.746620][ T5716] usb 3-1: Manufacturer: syz [ 553.822647][ T5716] usb 3-1: config 0 descriptor?? [ 555.623130][ T5856] bridge_slave_0: left allmulticast mode [ 555.623167][ T5856] bridge_slave_0: left promiscuous mode [ 555.623584][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.200578][ T9536] fuse: Bad value for 'fd' [ 556.362982][ T5716] rc_core: IR keymap rc-hauppauge not found [ 556.363005][ T5716] Registered IR keymap rc-empty [ 556.363157][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.969456][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.989932][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 556.993292][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 557.037657][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.057331][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.077342][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.097346][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.117338][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.137404][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.179181][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.210464][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.228428][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.247347][ T5716] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 557.272468][ T5716] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 557.272487][ T5716] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 557.400136][ T5716] usb 3-1: USB disconnect, device number 29 [ 558.929188][ T9552] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 560.356277][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.955793][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.326400][ T5856] bond0 (unregistering): Released all slaves [ 561.625534][ T9563] netlink: 'syz.2.1126': attribute type 2 has an invalid length. [ 561.625559][ T9563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1126'. [ 562.840134][ T37] audit: type=1326 audit(1786935457.385:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9574 comm="syz.0.1130" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d4f48e0d9 code=0x0 [ 563.430255][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.435313][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.997337][ T5703] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 565.253293][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 565.678825][ T5703] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.917563][ T5703] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 565.917599][ T5703] usb 5-1: can't read configurations, error -71 [ 567.928003][ T9593] netlink: 'syz.0.1135': attribute type 2 has an invalid length. [ 567.928020][ T9593] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1135'. [ 567.998059][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.998149][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.998391][ T9396] bridge_slave_0: entered allmulticast mode [ 568.004130][ T9396] bridge_slave_0: entered promiscuous mode [ 569.220828][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.220958][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.221515][ T9396] bridge_slave_1: entered allmulticast mode [ 569.224592][ T9396] bridge_slave_1: entered promiscuous mode [ 570.547372][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.950334][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.857001][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.858711][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.859428][ T9445] bridge_slave_0: entered allmulticast mode [ 571.898840][ T9445] bridge_slave_0: entered promiscuous mode [ 571.953298][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.953420][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.953591][ T9445] bridge_slave_1: entered allmulticast mode [ 571.989675][ T9445] bridge_slave_1: entered promiscuous mode [ 572.433054][ T5856] hsr_slave_0: left promiscuous mode [ 572.469553][ T5856] hsr_slave_1: left promiscuous mode [ 572.470606][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.470633][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.530249][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.530279][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.588737][ T9642] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(50) [ 572.710578][ T9643] binder: 9639:9643 ioctl 4018620d 0 returned -22 [ 573.208673][ T5716] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 573.357285][ T5716] usb 3-1: Using ep0 maxpacket: 8 [ 573.358105][ T5716] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 573.359142][ T5716] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 573.359160][ T5716] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.359174][ T5716] usb 3-1: config 0 has no interface number 0 [ 573.359210][ T5716] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.359226][ T5716] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 573.359256][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.460485][ T5716] usb 3-1: config 0 descriptor?? [ 573.484515][ T5716] ldusb 3-1:0.55: Interrupt in endpoint not found [ 573.628466][ T5856] veth1_macvtap: left promiscuous mode [ 573.628577][ T5856] veth0_macvtap: left promiscuous mode [ 573.628849][ T5856] veth1_vlan: left promiscuous mode [ 573.629059][ T5856] veth0_vlan: left promiscuous mode [ 573.695623][ T5593] usb 3-1: USB disconnect, device number 30 [ 573.957414][ T5716] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 574.167251][ T5716] usb 1-1: Using ep0 maxpacket: 16 [ 574.171309][ T5716] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 574.204299][ T5716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.204551][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 574.204696][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 574.204756][ T5716] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 574.204819][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.323387][ T5716] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 574.323417][ T5716] usb 1-1: Manufacturer: syz [ 574.673924][ T5716] usb 1-1: config 0 descriptor?? [ 575.157296][ T5716] rc_core: IR keymap rc-hauppauge not found [ 575.157318][ T5716] Registered IR keymap rc-empty [ 575.157563][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.177357][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.198999][ T5716] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 575.216955][ T5716] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 575.245670][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.257378][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.277709][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.297334][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.317270][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.337334][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.351317][ T36] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 575.357431][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.377349][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.397311][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.417292][ T5716] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 575.467329][ T5716] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 575.467586][ T5716] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 575.518106][ T36] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 575.519801][ T36] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 575.519829][ T36] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 575.519849][ T36] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 575.519898][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 575.519926][ T36] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 575.575771][ T36] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 575.575852][ T36] usb 5-1: Product: syz [ 575.575886][ T36] usb 5-1: Manufacturer: syz [ 575.615474][ T5716] usb 1-1: USB disconnect, device number 21 [ 575.725769][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 575.725791][ T36] cdc_wdm 5-1:1.0: skipping garbage [ 576.127772][ T36] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 576.127873][ T36] cdc_wdm 5-1:1.0: Unknown control protocol [ 576.304588][ T9672] netlink: 'syz.0.1144': attribute type 2 has an invalid length. [ 576.304612][ T9672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1144'. [ 576.329663][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 576.334916][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 576.335822][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 576.335842][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 576.358075][ T1236] usb 5-1: USB disconnect, device number 37 [ 578.116942][ T5856] team0 (unregistering): Port device team_slave_1 removed [ 578.209743][ T5856] team0 (unregistering): Port device team_slave_0 removed [ 580.446330][ T9396] team0: Port device team_slave_0 added [ 580.488683][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 580.510115][ T9396] team0: Port device team_slave_1 added [ 580.645213][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.659121][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.659141][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.659172][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.718769][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.721110][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.721127][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.721159][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.110290][ T9445] team0: Port device team_slave_0 added [ 581.155019][ T9445] team0: Port device team_slave_1 added [ 581.339511][ T9396] hsr_slave_0: entered promiscuous mode [ 581.353234][ T9396] hsr_slave_1: entered promiscuous mode [ 581.569724][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.569742][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.569772][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.127660][ T937] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 582.192570][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.192589][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.192619][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.327625][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 583.638864][ T937] usb 1-1: unable to get BOS descriptor or descriptor too short [ 583.638925][ T937] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 583.639780][ T937] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 583.639809][ T937] usb 1-1: can't read configurations, error -71 [ 584.813243][ T9445] hsr_slave_0: entered promiscuous mode [ 584.823120][ T9445] hsr_slave_1: entered promiscuous mode [ 584.865350][ T9445] debugfs: 'hsr0' already exists in 'hsr' [ 584.865381][ T9445] Cannot create hsr debugfs directory [ 585.043014][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 585.135669][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 585.162626][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 585.197471][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 585.200614][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.247421][ T5590] Bluetooth: hci5: command tx timeout [ 588.157358][ T1236] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 588.320359][ T1236] usb 1-1: Using ep0 maxpacket: 8 [ 588.881353][ T1404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.043574][ T1236] usb 1-1: unable to get BOS descriptor or descriptor too short [ 589.043633][ T1236] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 589.044668][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 589.046863][ T1236] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 589.046901][ T1236] usb 1-1: can't read configurations, error -71 [ 589.327321][ T5590] Bluetooth: hci5: command tx timeout [ 589.759323][ T1404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.418700][ T5590] Bluetooth: hci5: command tx timeout [ 591.662365][ T9819] netlink: zone id is out of range [ 591.662438][ T9819] netlink: set zone limit has 4 unknown bytes [ 591.754708][ T1404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.539056][ T5590] Bluetooth: hci5: command tx timeout [ 596.538641][ T9402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 596.601756][ T9402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 596.605246][ T9402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 596.621829][ T9402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 596.638649][ T9402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.026218][ T9859] ALSA: mixer_oss: invalid OSS volume '' [ 598.131859][ T1404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.310674][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 598.770478][ T9402] Bluetooth: hci1: command tx timeout [ 600.571239][ T9872] FAT-fs (nbd2): unable to read boot sector [ 600.877243][ T9402] Bluetooth: hci1: command tx timeout [ 604.306455][ T9402] Bluetooth: hci1: command tx timeout [ 606.367317][ T9402] Bluetooth: hci1: command tx timeout [ 606.602528][ T1404] bridge_slave_1: left allmulticast mode [ 606.602566][ T1404] bridge_slave_1: left promiscuous mode [ 606.602845][ T1404] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.739085][ T1404] bridge_slave_0: left allmulticast mode [ 606.739124][ T1404] bridge_slave_0: left promiscuous mode [ 606.739415][ T1404] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.127268][ T5717] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 609.295362][ T5717] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 609.306753][ T5717] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 609.306782][ T5717] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 609.306801][ T5717] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 609.306849][ T5717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 609.306874][ T5717] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 610.190817][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 610.190847][ T5717] usb 1-1: Product: syz [ 610.190862][ T5717] usb 1-1: Manufacturer: syz [ 610.236738][ T5717] cdc_wdm 1-1:1.0: skipping garbage [ 610.236761][ T5717] cdc_wdm 1-1:1.0: skipping garbage [ 610.251235][ T5717] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 610.251257][ T5717] cdc_wdm 1-1:1.0: Unknown control protocol [ 610.379627][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 610.393463][ T9927] kAFS: unable to lookup cell '' [ 610.530480][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 610.531718][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 610.531745][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 610.531766][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 610.531819][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 610.531845][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 610.578996][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 610.579042][ T9] usb 3-1: Product: syz [ 610.579100][ T9] usb 3-1: Manufacturer: syz [ 610.635902][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 610.635924][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 610.654960][ T9] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 610.654977][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 610.744219][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 610.744310][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.744329][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.744549][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.744563][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.744820][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.744840][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.747978][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.748007][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.748529][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.748580][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.748981][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.749032][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.749405][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.749438][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.749799][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.749850][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.750211][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.750262][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.750655][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 610.750705][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 610.835599][ T937] usb 1-1: USB disconnect, device number 26 [ 610.835652][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 610.971244][ T1404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.058161][ T1404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.106251][ T1404] bond0 (unregistering): Released all slaves [ 611.149153][ T5593] usb 3-1: USB disconnect, device number 31 [ 611.295601][ T5243] 8021q: adding VLAN 0 to HW filter on device eth8 [ 612.348608][ T1236] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 612.501338][ T1236] usb 3-1: Using ep0 maxpacket: 8 [ 612.503331][ T1236] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 612.504640][ T1236] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 612.504659][ T1236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.504673][ T1236] usb 3-1: config 0 has no interface number 0 [ 612.504703][ T1236] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 612.504719][ T1236] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 612.504747][ T1236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.584245][ T1236] usb 3-1: config 0 descriptor?? [ 612.628723][ T1236] ldusb 3-1:0.55: Interrupt in endpoint not found [ 613.042231][ T5703] usb 3-1: USB disconnect, device number 32 [ 617.308538][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.308688][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.308961][ T9765] bridge_slave_0: entered allmulticast mode [ 618.900505][ T9765] bridge_slave_0: entered promiscuous mode [ 619.036252][ T9765] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.036371][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.036614][ T9765] bridge_slave_1: entered allmulticast mode [ 619.039435][ T9765] bridge_slave_1: entered promiscuous mode [ 619.348400][ T1404] hsr_slave_0: left promiscuous mode [ 619.387450][ T1404] hsr_slave_1: left promiscuous mode [ 619.393659][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.393696][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.450590][ T1404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.450620][ T1404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.695994][ T1404] veth1_macvtap: left promiscuous mode [ 619.696106][ T1404] veth0_macvtap: left promiscuous mode [ 619.696376][ T1404] veth1_vlan: left promiscuous mode [ 619.696571][ T1404] veth0_vlan: left promiscuous mode [ 620.689342][ T5799] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 621.109390][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 621.126364][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.327507][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.327626][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 621.327695][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.327746][ T5799] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 621.327821][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 621.376535][ T5799] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.376608][ T5799] usb 3-1: Manufacturer: syz [ 622.008400][ T5799] usb 3-1: config 0 descriptor?? [ 624.370468][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.370541][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.526599][ T5799] rc_core: IR keymap rc-hauppauge not found [ 624.526623][ T5799] Registered IR keymap rc-empty [ 624.526777][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.545921][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.558966][ T5799] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 624.562245][ T5799] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 624.592635][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.607276][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.627368][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.647274][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.668608][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.687280][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.707321][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.727301][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.748661][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.767340][ T5799] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 624.820879][ T5799] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 624.820906][ T5799] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 624.892029][ T5799] usb 3-1: USB disconnect, device number 33 [ 626.980574][ T1236] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 627.047820][ T1404] team0 (unregistering): Port device team_slave_1 removed [ 627.078059][ T1404] team0 (unregistering): Port device team_slave_0 removed [ 627.147347][ T1236] usb 5-1: Using ep0 maxpacket: 8 [ 627.148369][ T1236] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 627.152978][ T1236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.153003][ T1236] usb 5-1: Product: syz [ 627.153019][ T1236] usb 5-1: Manufacturer: syz [ 627.153033][ T1236] usb 5-1: SerialNumber: syz [ 627.300901][ T1236] usb 5-1: config 0 descriptor?? [ 629.136038][ T9765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.156833][ T1236] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 629.166104][ T1236] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 629.210857][ T5716] usb 5-1: USB disconnect, device number 38 [ 629.297718][ T9765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.484070][T10007] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 629.703024][ T9765] team0: Port device team_slave_0 added [ 629.779517][ T9765] team0: Port device team_slave_1 added [ 629.916260][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.916279][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.916306][ T9765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.970817][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.970836][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.970863][ T9765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.046212][ T9765] hsr_slave_0: entered promiscuous mode [ 632.062236][ T9765] hsr_slave_1: entered promiscuous mode [ 632.063322][ T9765] debugfs: 'hsr0' already exists in 'hsr' [ 632.063348][ T9765] Cannot create hsr debugfs directory [ 634.120213][ T36] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 634.161476][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.163252][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.164568][ T9847] bridge_slave_0: entered allmulticast mode [ 635.371255][ T9847] bridge_slave_0: entered promiscuous mode [ 637.057604][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 637.385393][ T36] usb 5-1: device descriptor read/all, error -71 [ 637.599298][T10058] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 638.232683][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.232843][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.233080][ T9847] bridge_slave_1: entered allmulticast mode [ 638.263898][ T9847] bridge_slave_1: entered promiscuous mode [ 638.326007][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 639.747402][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.534524][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.039207][ T9847] team0: Port device team_slave_0 added [ 642.285476][ T9847] team0: Port device team_slave_1 added [ 644.670020][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.670037][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.670063][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.772775][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 644.822834][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 644.851925][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 644.864833][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 644.879143][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 644.977590][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.977611][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.977639][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.177184][ T5717] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 646.338294][ T5717] usb 3-1: Using ep0 maxpacket: 16 [ 646.341028][ T5717] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 646.342511][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.342558][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.342585][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.342605][ T5717] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 646.342626][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.345455][ T5717] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.345480][ T5717] usb 3-1: Manufacturer: syz [ 646.433276][ T5717] usb 3-1: config 0 descriptor?? [ 646.557444][ T937] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 646.737293][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 646.739782][ T937] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 646.742490][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.742544][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 646.742569][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 646.742590][ T937] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 646.742611][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.744660][ T937] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 646.744687][ T937] usb 1-1: Manufacturer: syz [ 646.835873][ T937] usb 1-1: config 0 descriptor?? [ 646.857168][ T5717] rc_core: IR keymap rc-hauppauge not found [ 646.857191][ T5717] Registered IR keymap rc-empty [ 646.857425][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.887404][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 646.936293][ T5717] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 647.009353][ T9402] Bluetooth: hci2: command tx timeout [ 647.048248][ T5717] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input31 [ 647.056019][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.077991][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.097614][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.127287][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.157241][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.168276][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.187328][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.207462][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.237258][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.247443][ T5717] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 647.285787][ T5717] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 647.285815][ T5717] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.329857][ T937] rc_core: IR keymap rc-hauppauge not found [ 647.329878][ T937] Registered IR keymap rc-empty [ 647.330064][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.366784][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.377305][ T5717] usb 3-1: USB disconnect, device number 34 [ 647.380492][ T937] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 647.410625][ T937] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input32 [ 647.415925][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.436887][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.447328][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.467243][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.488291][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.507782][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.527282][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.547253][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.568841][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.597256][ T937] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.656492][ T937] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 647.656521][ T937] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 647.759031][ T937] usb 1-1: USB disconnect, device number 27 [ 647.774218][ T9847] hsr_slave_0: entered promiscuous mode [ 647.792316][ T9847] hsr_slave_1: entered promiscuous mode [ 647.803315][ T9847] debugfs: 'hsr0' already exists in 'hsr' [ 647.803343][ T9847] Cannot create hsr debugfs directory [ 649.089533][ T9402] Bluetooth: hci2: command tx timeout [ 651.167322][ T9402] Bluetooth: hci2: command tx timeout [ 652.630740][ T5243] 8021q: adding VLAN 0 to HW filter on device eth10 [ 653.252277][ T9402] Bluetooth: hci2: command tx timeout [ 653.308807][ T1236] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 653.627261][ T1236] usb 1-1: Using ep0 maxpacket: 16 [ 653.636568][ T1236] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 653.665253][ T1236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.665293][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 653.665313][ T1236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 653.665329][ T1236] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 653.665352][ T1236] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.666919][ T1236] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 653.666941][ T1236] usb 1-1: Manufacturer: syz [ 653.753750][ T1236] usb 1-1: config 0 descriptor?? [ 654.343862][ T1236] rc_core: IR keymap rc-hauppauge not found [ 654.343885][ T1236] Registered IR keymap rc-empty [ 654.344073][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.376286][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.417468][ T1236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 654.464879][ T1236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 654.493821][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.507341][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.529085][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.547313][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.567403][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.587266][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.607260][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.629504][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.648145][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.667264][ T1236] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 654.714549][ T1236] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 654.714576][ T1236] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 654.766811][ T1236] usb 1-1: USB disconnect, device number 28 [ 654.871673][ T5593] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 655.040672][ T5593] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 655.061659][ T5593] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 655.061689][ T5593] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 655.061709][ T5593] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 655.062872][ T5593] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 655.062901][ T5593] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 655.075699][ T5593] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 655.075719][ T5593] usb 5-1: Product: syz [ 655.075730][ T5593] usb 5-1: Manufacturer: syz [ 655.308576][ T5593] cdc_wdm 5-1:1.0: skipping garbage [ 655.308595][ T5593] cdc_wdm 5-1:1.0: skipping garbage [ 655.346706][ T5593] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 655.346729][ T5593] cdc_wdm 5-1:1.0: Unknown control protocol [ 656.005611][ T1236] usb 5-1: USB disconnect, device number 41 [ 656.114079][ T5590] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 656.139058][ T5590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 656.142560][ T5590] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 656.188070][ T5590] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 656.191196][ T5590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 656.290387][ T66] bridge_slave_1: left allmulticast mode [ 656.290423][ T66] bridge_slave_1: left promiscuous mode [ 656.290722][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.639379][ T66] bridge_slave_0: left allmulticast mode [ 656.639407][ T66] bridge_slave_0: left promiscuous mode [ 656.639637][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.128450][ T66] bridge_slave_1: left allmulticast mode [ 657.128488][ T66] bridge_slave_1: left promiscuous mode [ 657.128761][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.653533][ T66] bridge_slave_0: left allmulticast mode [ 657.653562][ T66] bridge_slave_0: left promiscuous mode [ 657.653742][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.292324][ T9402] Bluetooth: hci6: command tx timeout [ 659.560839][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.678312][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.915091][ T66] bond0 (unregistering): Released all slaves [ 660.367240][ T9402] Bluetooth: hci6: command tx timeout [ 661.603028][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.711613][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.711985][T10269] loop7: detected capacity change from 0 to 7 [ 661.823905][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.824101][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.854574][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.854639][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.914426][ T66] bond0 (unregistering): Released all slaves [ 661.946504][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.946597][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.959151][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.959366][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.960444][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.960649][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.961614][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.961758][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.962739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.962962][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.963107][T10269] ldm_validate_partition_table(): Disk read failed. [ 661.963835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.964021][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.964537][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.964742][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.965668][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 661.965799][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 661.967023][T10269] Dev loop7: unable to read RDB block 0 [ 662.019786][T10269] loop7: unable to read partition table [ 662.022148][T10269] loop7: partition table beyond EOD, truncated [ 662.026661][T10269] loop_reread_partitions: partition scan of loop7 (j̖ 8?}X%`ր{֐ȵ4FLQ5) failed (rc=-5) [ 662.452729][ T9402] Bluetooth: hci6: command tx timeout [ 663.010895][ T5856] ------------[ cut here ]------------ [ 663.010911][ T5856] in_task() && kcov_mode_enabled(mode) [ 663.010930][ T5856] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5bb/0x6f0, CPU#1: kworker/u8:20/5856 [ 663.011056][ T5856] Modules linked in: [ 663.011091][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.011151][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.011165][ T5856] Workqueue: events_unbound cfg80211_wiphy_work [ 663.011295][ T5856] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 663.011358][ T5856] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 97 69 7f 09 89 c0 48 c7 c7 c0 f2 9e [ 663.011377][ T5856] RSP: 0000:ffffc90004db79f8 EFLAGS: 00010202 [ 663.011422][ T5856] RAX: 0000000000000000 RBX: ffff888026d5be00 RCX: 0000000080000001 [ 663.011437][ T5856] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920 [ 663.011452][ T5856] RBP: ffff88805be8ea00 R08: ffffffff8b477b80 R09: 0000000000000000 [ 663.011466][ T5856] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 663.011480][ T5856] R13: ffff888031511ef8 R14: 0000000000000000 R15: ffff888061691180 [ 663.011496][ T5856] FS: 0000000000000000(0000) GS:ffff888125d3a000(0000) knlGS:0000000000000000 [ 663.011514][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.011528][ T5856] CR2: 0000560f6a933000 CR3: 000000003bbbe000 CR4: 00000000003526f0 [ 663.011553][ T5856] Call Trace: [ 663.011589][ T5856] [ 663.011712][ T5856] ieee80211_iface_work+0x20c/0x1010 [ 663.011841][ T5856] cfg80211_wiphy_work+0x29e/0x420 [ 663.011885][ T5856] ? process_scheduled_works+0xa20/0x14e0 [ 663.012000][ T5856] process_scheduled_works+0xa8e/0x14e0 [ 663.012056][ T5856] ? __pfx_process_scheduled_works+0x10/0x10 [ 663.012090][ T5856] ? assign_work+0x3cf/0x5d0 [ 663.012122][ T5856] worker_thread+0xa47/0xfb0 [ 663.012206][ T5856] kthread+0x388/0x470 [ 663.012266][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 663.012292][ T5856] ? __pfx_kthread+0x10/0x10 [ 663.012335][ T5856] ret_from_fork+0x514/0xb70 [ 663.012420][ T5856] ? __pfx_ret_from_fork+0x10/0x10 [ 663.012454][ T5856] ? __switch_to+0xc89/0x1420 [ 663.012510][ T5856] ? __pfx_kthread+0x10/0x10 [ 663.012543][ T5856] ret_from_fork_asm+0x1a/0x30 [ 663.012614][ T5856] [ 663.012634][ T5856] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 663.012652][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.012679][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 663.012694][ T5856] Workqueue: events_unbound cfg80211_wiphy_work [ 663.012734][ T5856] Call Trace: [ 663.012744][ T5856] [ 663.012753][ T5856] vpanic+0x56c/0xa60 [ 663.012795][ T5856] ? __pfx__printk+0x10/0x10 [ 663.012822][ T5856] ? __pfx_vpanic+0x10/0x10 [ 663.012853][ T5856] ? is_bpf_text_address+0x292/0x2b0 [ 663.012910][ T5856] ? is_bpf_text_address+0x26/0x2b0 [ 663.012947][ T5856] panic+0xc5/0xd0 [ 663.012981][ T5856] ? __pfx_panic+0x10/0x10 [ 663.013027][ T5856] ? ret_from_fork_asm+0x1a/0x30 [ 663.013068][ T5856] __warn+0x315/0x4c0 [ 663.013101][ T5856] ? kcov_remote_start+0x5bb/0x6f0 [ 663.013137][ T5856] ? kcov_remote_start+0x5bb/0x6f0 [ 663.013168][ T5856] __report_bug+0x276/0x570 [ 663.013255][ T5856] ? kcov_remote_start+0x5bb/0x6f0 [ 663.013292][ T5856] ? __pfx___report_bug+0x10/0x10 [ 663.013332][ T5856] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 663.013393][ T5856] ? rt_spin_lock+0x1e0/0x400 [ 663.013451][ T5856] ? rt_spin_lock+0x1e0/0x400 [ 663.013489][ T5856] ? kcov_remote_start+0x5bb/0x6f0 [ 663.013523][ T5856] report_bug+0x16a/0x220 [ 663.013553][ T5856] ? kcov_remote_start+0x5bb/0x6f0 [ 663.013585][ T5856] ? kcov_remote_start+0x5bd/0x6f0 [ 663.013618][ T5856] handle_bug+0x9c/0x200 [ 663.013694][ T5856] exc_invalid_op+0x1a/0x50 [ 663.013727][ T5856] asm_exc_invalid_op+0x1a/0x20 [ 663.013769][ T5856] RIP: 0010:kcov_remote_start+0x5bb/0x6f0 [ 663.013802][ T5856] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 2c b7 fc 02 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 b7 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 97 69 7f 09 89 c0 48 c7 c7 c0 f2 9e [ 663.013822][ T5856] RSP: 0000:ffffc90004db79f8 EFLAGS: 00010202 [ 663.013841][ T5856] RAX: 0000000000000000 RBX: ffff888026d5be00 RCX: 0000000080000001 [ 663.013856][ T5856] RDX: 0000000000000000 RSI: ffffffff8bca5960 RDI: ffffffff8bca5920 [ 663.013871][ T5856] RBP: ffff88805be8ea00 R08: ffffffff8b477b80 R09: 0000000000000000 [ 663.013887][ T5856] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 663.013902][ T5856] R13: ffff888031511ef8 R14: 0000000000000000 R15: ffff888061691180 [ 663.013926][ T5856] ? rt_spin_lock+0x1e0/0x400 [ 663.013968][ T5856] ? kcov_remote_start+0xda/0x6f0 [ 663.014003][ T5856] ieee80211_iface_work+0x20c/0x1010 [ 663.014047][ T5856] cfg80211_wiphy_work+0x29e/0x420 [ 663.014087][ T5856] ? process_scheduled_works+0xa20/0x14e0 [ 663.014114][ T5856] process_scheduled_works+0xa8e/0x14e0 [ 663.014175][ T5856] ? __pfx_process_scheduled_works+0x10/0x10 [ 663.014209][ T5856] ? assign_work+0x3cf/0x5d0 [ 663.014242][ T5856] worker_thread+0xa47/0xfb0 [ 663.014302][ T5856] kthread+0x388/0x470 [ 663.014341][ T5856] ? __pfx_worker_thread+0x10/0x10 [ 663.014367][ T5856] ? __pfx_kthread+0x10/0x10 [ 663.014403][ T5856] ret_from_fork+0x514/0xb70 [ 663.014449][ T5856] ? __pfx_ret_from_fork+0x10/0x10 [ 663.014483][ T5856] ? __switch_to+0xc89/0x1420 [ 663.014516][ T5856] ? __pfx_kthread+0x10/0x10 [ 663.014549][ T5856] ret_from_fork_asm+0x1a/0x30 [ 663.014601][ T5856] [ 663.015221][ T5856] Kernel Offset: disabled