last executing test programs: 8m40.551807955s ago: executing program 4 (id=5): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002010}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000300)) 8m39.138226273s ago: executing program 4 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25270000000855fa00", @ANYRES32, @ANYBLOB="0c00990006000000310000000a000600ffffffffffff00000a003400020202020202000004002a000a003400020202020202000004005f000a000600a69710d3e38d0000110034001487f9693dd0c851a554"], 0x98}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8m23.441280092s ago: executing program 32 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYRES16=r1, @ANYBLOB="000126bd7000ffdbdf25270000000855fa00", @ANYRES32, @ANYBLOB="0c00990006000000310000000a000600ffffffffffff00000a003400020202020202000004002a000a003400020202020202000004005f000a000600a69710d3e38d0000110034001487f9693dd0c851a554"], 0x98}}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m9.485088912s ago: executing program 5 (id=1139): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0], 0x50}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x169}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m9.116966419s ago: executing program 5 (id=1145): syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) read(r0, &(0x7f0000000240)=""/148, 0x94) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a777382010203010902"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) socket$inet6(0x10, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000000c0)='0', 0x1) 1m5.852161718s ago: executing program 5 (id=1154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x448d4) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) 1m5.653290261s ago: executing program 5 (id=1156): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/85, 0x5}, {&(0x7f0000000680)=""/106, 0x20000253}], 0x2}, 0x6020) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcba}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80}]}]}, 0x90}}, 0x0) 1m5.469407397s ago: executing program 5 (id=1160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m5.184575492s ago: executing program 5 (id=1164): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001240), 0x0) read(r0, &(0x7f0000000b00), 0x64) 49.241273215s ago: executing program 33 (id=1164): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001240), 0x0) read(r0, &(0x7f0000000b00), 0x64) 25.844301629s ago: executing program 1 (id=1286): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$setregs(0xd, r1, 0x8, &(0x7f0000000200)="6a2f0527a2e2002f353158bb12250191f08af86afc2a13d121263e55580fee5602477a32d148af928dc8d474bf9bc29fa24dd6aa0b13c9d78480ba4d8533d4c54863c9577a86edce823c9b46fee1689ea91d38f8514607af30bf76a8af6d") r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3103383c4ba5442d3e1c6c08020900090200000000000000ffdbdf03"], 0x10}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.765244743s ago: executing program 1 (id=1295): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd6662", 0x54}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b7", 0x47}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b", 0x24}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 21.580117133s ago: executing program 1 (id=1296): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x20000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 20.135880902s ago: executing program 3 (id=1300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x61c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f0, 0x2, [@TCA_BPF_ACT={0x5ec, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x6a, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd56"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xfc, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0x6092, 0x70, 0x6, 0x1ff}, {0xfff9, 0x2, 0xf7}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x228, 0x13, 0x0, 0x0, {{0x7}, {0x200, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc0, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xf1, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d7395e68091c82db3f276f07384e742f6eb8057fef83bef07c6aa6d1f59fcb13c45fc7005a222e6fa"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 19.986999593s ago: executing program 2 (id=1301): recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf0", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b", 0x53}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19.707556558s ago: executing program 3 (id=1303): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000009048f0000bf575a001aa7e6d1f77f2a03497dec902853"], 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/power/level\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='au', 0x2) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0xfffffffd, 0x4c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8405) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/2-1/power/level\x00', 0x2, 0x0) 19.207948298s ago: executing program 2 (id=1304): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) 19.100748339s ago: executing program 2 (id=1306): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 18.881839205s ago: executing program 3 (id=1307): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 18.694583821s ago: executing program 0 (id=1308): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) 17.238526736s ago: executing program 1 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$setregs(0xd, r1, 0x8, &(0x7f0000000200)="6a2f0527a2e2002f353158bb12250191f08af86afc2a13d121263e55580fee5602477a32d148af928dc8d474bf9bc29fa24dd6aa0b13c9d78480ba4d8533d4c54863c9577a86edce823c9b46fee1689ea91d38f8514607af30bf76a8af6d") r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3103383c4ba5442d3e1c6c08020900090200000000000000ffdbdf03"], 0x10}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17.107998749s ago: executing program 3 (id=1310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 14.876268322s ago: executing program 6 (id=1215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 10.693426005s ago: executing program 2 (id=1311): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.221191952s ago: executing program 0 (id=1312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x61c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5f0, 0x2, [@TCA_BPF_ACT={0x5ec, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x6a, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd56"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xfc, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0x6092, 0x70, 0x6, 0x1ff}, {0xfff9, 0x2, 0xf7}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x228, 0x13, 0x0, 0x0, {{0x7}, {0x200, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc0, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xf1, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d7395e68091c82db3f276f07384e742f6eb8057fef83bef07c6aa6d1f59fcb13c45fc7005a222e6fa"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x61c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.056948535s ago: executing program 1 (id=1313): recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf0", 0x2a}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b", 0x53}, {&(0x7f0000000440)}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.673545595s ago: executing program 0 (id=1314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a0200000000011801000020207825"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.647024018s ago: executing program 6 (id=1315): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) 4.627300176s ago: executing program 3 (id=1316): mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000097ff8208582005109bc10000000109021200010000000009048f0000bf575a001aa7e6d1f77f2a03497dec902853"], 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='au', 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x31}, @void, @val={0xc, 0x99, {0xfffffffd, 0x4c}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8405) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/2-1/power/level\x00', 0x2, 0x0) 4.504334225s ago: executing program 6 (id=1317): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 4.367754435s ago: executing program 0 (id=1318): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x24044808) 4.033499027s ago: executing program 2 (id=1319): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000100)=0x200, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xb, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(r2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) 3.762562177s ago: executing program 3 (id=1320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000a00)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x802) socket$netlink(0x10, 0x3, 0x4) dup3(r1, r0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 3.286276932s ago: executing program 0 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) ptrace$setregs(0xd, r1, 0x8, &(0x7f0000000200)="6a2f0527a2e2002f353158bb12250191f08af86afc2a13d121263e55580fee5602477a32d148af928dc8d474bf9bc29fa24dd6aa0b13c9d78480ba4d8533d4c54863c9577a86edce823c9b46fee1689ea91d38f8514607af30bf76a8af6d") r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 832.452764ms ago: executing program 6 (id=1322): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) 607.174697ms ago: executing program 0 (id=1323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 606.605704ms ago: executing program 1 (id=1324): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) syz_usb_connect$printer(0x4, 0x2d, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1325): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) listen(r1, 0x802) socket$netlink(0x10, 0x3, 0x4) dup3(0xffffffffffffffff, r0, 0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x1bd, @loopback}, 0x10) listen(r2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='username=guest,password=guest,nodfs,vers=3.0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) kernel console output (not intermixed with test programs): :50:50:50:50 [ 115.563469][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.649845][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.650244][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.333980][ T1264] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 119.112905][ T1264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.113146][ T1264] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 119.113176][ T1264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 119.113204][ T1264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 119.113228][ T1264] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 119.163258][ T1264] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 119.163376][ T1264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 119.163438][ T1264] usb 4-1: Product: syz [ 119.163473][ T1264] usb 4-1: Manufacturer: syz [ 119.163525][ T1264] usb 4-1: SerialNumber: syz [ 119.772228][ T1264] usb 4-1: config 0 descriptor?? [ 119.869133][ T1383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.165187][ T1383] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.206752][ T1264] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 120.207086][ T1264] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 120.541722][ T1264] usb 4-1: USB disconnect, device number 2 [ 120.571662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.571686][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.848548][ T170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.892387][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.892410][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.314736][ T102] IPVS: starting estimator thread 0... [ 122.417985][ T5818] IPVS: using max 9 ests per chain, 21600 per kthread [ 122.791824][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.791846][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.928476][ T1264] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.008449][ T102] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.010252][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.010273][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.029385][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051189][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051364][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051469][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051574][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051675][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051774][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051877][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.051974][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.052090][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.052228][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.052333][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.052430][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.052527][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.164235][ T1264] usb 4-1: Using ep0 maxpacket: 32 [ 124.224731][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.253764][ T1264] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.253794][ T1264] usb 4-1: config 0 has no interfaces? [ 124.253826][ T1264] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.253850][ T1264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.300072][ T102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 124.300126][ T102] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 124.300161][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.561134][ T102] usb 2-1: config 0 descriptor?? [ 124.566371][ T5822] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.034320][ T1264] usb 4-1: config 0 descriptor?? [ 125.633056][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633099][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633126][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633152][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633179][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633205][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633231][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633258][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633284][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.633310][ T102] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0 [ 125.914608][ T102] asus 0003:0B05:1ABE.0001: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 126.123486][ T102] usb 2-1: USB disconnect, device number 2 [ 126.610709][ T5842] fido_id[5842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 127.269107][ T824] usb 4-1: USB disconnect, device number 3 [ 127.362763][ T5844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 130.441574][ T5877] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.044845][ T5717] IPVS: starting estimator thread 0... [ 131.375012][ T5886] IPVS: using max 7 ests per chain, 16800 per kthread [ 136.015613][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.015721][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.684524][ T5908] netlink: 'syz.3.23': attribute type 2 has an invalid length. [ 142.377996][ T5709] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.656241][ T5908] : entered promiscuous mode [ 142.667601][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 142.689830][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.689852][ T5709] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 142.692342][ T5709] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 142.692363][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.692377][ T5709] usb 1-1: Product: syz [ 142.692387][ T5709] usb 1-1: Manufacturer: syz [ 142.692398][ T5709] usb 1-1: SerialNumber: syz [ 142.896100][ T5709] usb 1-1: config 0 descriptor?? [ 143.119877][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.120549][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.865878][ T5922] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.427581][ T5709] mcba_usb 1-1:0.0 can0: couldn't setup read URBs [ 144.427608][ T5709] mcba_usb 1-1:0.0 can0: couldn't start device: -90 [ 144.529015][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.27'. [ 144.750402][ T5716] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.898680][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 144.903529][ T5716] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 144.903576][ T5716] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 144.903618][ T5716] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 144.903647][ T5716] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 144.903674][ T5716] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.983052][ T5716] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 144.983086][ T5716] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 144.983108][ T5716] usb 4-1: Product: syz [ 144.983123][ T5716] usb 4-1: Manufacturer: syz [ 144.983138][ T5716] usb 4-1: SerialNumber: syz [ 145.063299][ T5716] usb 4-1: config 0 descriptor?? [ 145.073663][ T5730] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.110075][ T5716] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 145.130977][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 145.188042][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 145.190555][ T4912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 145.195169][ T4912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 145.236057][ T4912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.294024][ T5730] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 145.294051][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.294070][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 145.294105][ T5730] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 0 [ 145.369104][ T5730] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.369136][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.369156][ T5730] usb 3-1: Product: syz [ 145.369171][ T5730] usb 3-1: Manufacturer: syz [ 145.369186][ T5730] usb 3-1: SerialNumber: syz [ 145.662730][ T5709] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90 [ 145.965134][ T5716] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 146.046632][ T5709] usb 1-1: USB disconnect, device number 2 [ 146.113233][ T5730] usb 3-1: 0:2 : does not exist [ 146.191154][ T5943] Bluetooth: MGMT ver 1.23 [ 147.071360][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.149146][ T5936] zram0: detected capacity change from 0 to 8 [ 147.269153][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 147.314850][ T5730] usb 3-1: USB disconnect, device number 3 [ 147.436356][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.731502][ T10] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 147.731684][ T10] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 147.731831][ T10] usb 2-1: config 14 has no interface number 0 [ 147.731968][ T10] usb 2-1: config 14 has no interface number 1 [ 147.743112][ T5604] Bluetooth: hci5: command tx timeout [ 148.130789][ T10] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 148.130823][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 148.130847][ T10] usb 2-1: config 14 interface 57 has no altsetting 0 [ 148.130862][ T10] usb 2-1: config 14 interface 228 has no altsetting 0 [ 148.442070][ T5702] IPVS: starting estimator thread 0... [ 148.547977][ T5962] IPVS: using max 8 ests per chain, 19200 per kthread [ 148.550622][ T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 148.550645][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.550660][ T10] usb 2-1: Product: syz [ 148.550671][ T10] usb 2-1: Manufacturer: syz [ 148.550681][ T10] usb 2-1: SerialNumber: syz [ 149.198322][ T10] legousbtower 2-1:14.57: interrupt endpoints not found [ 149.318888][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.460135][ T10] legousbtower 2-1:14.228: interrupt endpoints not found [ 149.728018][ T5812] usb 4-1: USB disconnect, device number 4 [ 149.799836][ T5604] Bluetooth: hci5: command tx timeout [ 150.213088][ T5812] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 151.866211][ T5812] usb 2-1: USB disconnect, device number 3 [ 151.885629][ T5604] Bluetooth: hci5: command tx timeout [ 153.963035][ T5604] Bluetooth: hci5: command tx timeout [ 157.835912][ T5994] ======================================================= [ 157.835912][ T5994] WARNING: The mand mount option has been deprecated and [ 157.835912][ T5994] and is ignored by this kernel. Remove the mand [ 157.835912][ T5994] option from the mount to silence this warning. [ 157.835912][ T5994] ======================================================= [ 158.237905][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.400256][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 158.400311][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 158.400334][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.504233][ T9] usb 2-1: config 0 descriptor?? [ 158.504949][ T5999] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 159.216782][ T9] hid_parser_main: 470 callbacks suppressed [ 159.216809][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216842][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216870][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216897][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216924][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216951][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.216978][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.217005][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.217031][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.217058][ T9] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 159.829843][ T6024] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.377690][ T9] asus 0003:0B05:1ABE.0002: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.1-1/input0 [ 160.602745][ T9] usb 2-1: USB disconnect, device number 4 [ 160.715577][ T6022] netlink: 56 bytes leftover after parsing attributes in process `syz.0.48'. [ 162.272036][ T6027] fido_id[6027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 162.497762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 168.730129][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.385477][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.385618][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.385878][ T5928] bridge_slave_0: entered allmulticast mode [ 169.433728][ T5928] bridge_slave_0: entered promiscuous mode [ 169.468299][ T5961] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 169.773042][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 169.931057][ T5961] usb 1-1: config index 0 descriptor too short (expected 8192, got 56) [ 169.931088][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.931108][ T5961] usb 1-1: config 0 has no interfaces? [ 169.948291][ T5961] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 169.948429][ T5961] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 169.948500][ T5961] usb 1-1: Manufacturer: syz [ 170.032138][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.032526][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.033435][ T5928] bridge_slave_1: entered allmulticast mode [ 170.463264][ T5928] bridge_slave_1: entered promiscuous mode [ 171.012678][ T5961] usb 1-1: config 0 descriptor?? [ 171.274822][ T5961] usb 1-1: can't set config #0, error -71 [ 171.522110][ T5961] usb 1-1: USB disconnect, device number 3 [ 175.279516][ T6082] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.380564][ T6084] netlink: 56 bytes leftover after parsing attributes in process `syz.1.63'. [ 175.411950][ T1383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.532355][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.645419][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.887841][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 176.071559][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 176.071612][ T10] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 176.071637][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.223918][ T10] usb 1-1: config 0 descriptor?? [ 176.256164][ T6087] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 176.521396][ T1383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.696665][ T10] hid_parser_main: 457 callbacks suppressed [ 176.696692][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696725][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696751][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696775][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696802][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696827][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696852][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696880][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696906][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.696930][ T10] asus 0003:0B05:1ABE.0003: unknown main item tag 0x0 [ 176.962403][ T10] asus 0003:0B05:1ABE.0003: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0 [ 177.014002][ T5928] team0: Port device team_slave_0 added [ 177.015423][ T10] usb 1-1: USB disconnect, device number 4 [ 177.139689][ T5928] team0: Port device team_slave_1 added [ 177.416505][ T6098] fido_id[6098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.166403][ T6111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 179.807483][ T1383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.877999][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.878018][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.878048][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.972245][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.972265][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.972294][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.027918][ T5730] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 180.202073][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 180.206411][ T5730] usb 1-1: config index 0 descriptor too short (expected 8192, got 56) [ 180.206441][ T5730] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.206461][ T5730] usb 1-1: config 0 has no interfaces? [ 180.237920][ T5730] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.237953][ T5730] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.237974][ T5730] usb 1-1: Manufacturer: syz [ 180.349974][ T5730] usb 1-1: config 0 descriptor?? [ 180.408539][ T5928] hsr_slave_0: entered promiscuous mode [ 180.412109][ T5928] hsr_slave_1: entered promiscuous mode [ 180.415693][ T5928] debugfs: 'hsr0' already exists in 'hsr' [ 180.415722][ T5928] Cannot create hsr debugfs directory [ 181.962588][ T6125] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 182.322811][ T5730] usb 1-1: USB disconnect, device number 5 [ 183.888758][ T5730] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 183.961666][ T5717] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 184.063259][ T5730] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 184.063294][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.063316][ T5730] usb 1-1: Product: syz [ 184.063331][ T5730] usb 1-1: Manufacturer: syz [ 184.063346][ T5730] usb 1-1: SerialNumber: syz [ 184.107929][ T5730] usb 1-1: config 0 descriptor?? [ 184.118202][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 184.147079][ T5717] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 184.147130][ T5717] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 184.147172][ T5717] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 184.147200][ T5717] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 184.147229][ T5717] usb 2-1: config 0 interface 0 has no altsetting 0 [ 184.175616][ T5717] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 184.175648][ T5717] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 184.175669][ T5717] usb 2-1: Product: syz [ 184.175683][ T5717] usb 2-1: Manufacturer: syz [ 184.175697][ T5717] usb 2-1: SerialNumber: syz [ 184.305031][ T5717] usb 2-1: config 0 descriptor?? [ 184.346360][ T5717] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 184.366297][ T5730] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 184.382155][ T1383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.442633][ T5717] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 184.534781][ T5730] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 184.836007][ T6132] zram: Can't change algorithm for initialized device [ 184.863927][ T6132] zram: Cannot change disksize for initialized device [ 184.930669][ T5812] usb 2-1: USB disconnect, device number 5 [ 185.002113][ T5812] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 186.537973][ T102] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.689961][ T102] usb 2-1: Using ep0 maxpacket: 32 [ 186.692467][ T102] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 186.692522][ T102] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 186.692564][ T102] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 186.692588][ T102] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 186.692613][ T102] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.766162][ T102] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 186.766196][ T102] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 186.766219][ T102] usb 2-1: Product: syz [ 186.766235][ T102] usb 2-1: Manufacturer: syz [ 186.766250][ T102] usb 2-1: SerialNumber: syz [ 186.871150][ T102] usb 2-1: config 0 descriptor?? [ 186.968440][ T102] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.974450][ T36] usb 1-1: USB disconnect, device number 6 [ 187.168140][ T102] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 187.609214][ T5812] usb 2-1: USB disconnect, device number 6 [ 187.712478][ T5812] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 188.857081][ T1383] bridge_slave_1: left allmulticast mode [ 188.857250][ T1383] bridge_slave_1: left promiscuous mode [ 188.915669][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.336489][ T1383] bridge_slave_0: left allmulticast mode [ 189.336558][ T1383] bridge_slave_0: left promiscuous mode [ 189.336833][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.175222][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.258887][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.310677][ T1383] bond0 (unregistering): Released all slaves [ 192.677632][ T6198] syz_tun: entered allmulticast mode [ 192.774265][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 192.873654][ T5928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 193.208466][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.232386][ T5928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 194.316534][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316606][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.050450][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 196.413475][ T5961] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.018142][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 197.029449][ T5961] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 197.029479][ T5961] usb 1-1: config 0 has no interface number 0 [ 197.038058][ T5961] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.045701][ T5961] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.045772][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.389665][ T5928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.723226][ T5961] usb 1-1: config 0 descriptor?? [ 198.020955][ T5961] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 198.903490][ T9] usb 1-1: USB disconnect, device number 7 [ 198.961049][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.969276][ T5928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.153213][ T5928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.217784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 202.138723][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.548402][ T5928] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.633736][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.633838][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.711836][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.712087][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.042895][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 203.066733][ T6317] gre0: entered promiscuous mode [ 203.066761][ T6317] gre0: entered allmulticast mode [ 203.280952][ T6325] overlayfs: failed to clone upperpath [ 203.672164][ T6325] netlink: 'syz.2.120': attribute type 2 has an invalid length. [ 203.977420][ T6325] : entered promiscuous mode [ 204.501015][ T4912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.554679][ T4912] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.582671][ T4912] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.659656][ T4912] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.690947][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.667790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 209.331345][ T5604] Bluetooth: hci4: command tx timeout [ 211.625939][ T5604] Bluetooth: hci4: command tx timeout [ 211.699024][ T1383] hsr_slave_0: left promiscuous mode [ 211.774209][ T1383] hsr_slave_1: left promiscuous mode [ 211.775524][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.777558][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.816591][ T1383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.816622][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.939237][ T1383] veth1_macvtap: left promiscuous mode [ 211.939601][ T1383] veth0_macvtap: left promiscuous mode [ 211.940339][ T1383] veth1_vlan: left promiscuous mode [ 211.940770][ T1383] veth0_vlan: left promiscuous mode [ 212.069096][ T6382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 212.797902][ T102] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 212.966647][ T102] usb 2-1: Using ep0 maxpacket: 8 [ 212.975032][ T102] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 212.975062][ T102] usb 2-1: config 0 has no interface number 0 [ 212.975111][ T102] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 212.975136][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.982550][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 213.059340][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 213.350089][ T102] usb 2-1: config 0 descriptor?? [ 213.602106][ T6392] WARNING! power/level is deprecated; use power/control instead [ 213.638704][ T5604] Bluetooth: hci4: command tx timeout [ 213.667669][ T102] viperboard 2-1:0.143: version 0.00 found at bus 002 address 007 [ 213.883315][ T102] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 213.883348][ T102] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 214.095611][ T102] usb 2-1: USB disconnect, device number 7 [ 214.421906][ T5258] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.684272][ T6416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 215.528074][ T6420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 215.528103][ T6420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.618921][ T6420] vhci_hcd vhci_hcd.0: Device attached [ 215.722015][ T5604] Bluetooth: hci4: command tx timeout [ 215.837944][ T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 216.094628][ T6429] vhci_hcd: connection reset by peer [ 216.228017][ T90] vhci_hcd vhci_hcd.0: stop threads [ 216.228913][ T90] vhci_hcd vhci_hcd.0: release socket [ 216.368701][ T90] vhci_hcd vhci_hcd.0: disconnect device [ 219.955964][ T5258] 8021q: adding VLAN 0 to HW filter on device eth4 [ 220.616669][ T5716] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 220.778057][ T5716] usb 1-1: Using ep0 maxpacket: 32 [ 220.780447][ T5716] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 220.780479][ T5716] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 220.780513][ T5716] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 220.780533][ T5716] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 220.780552][ T5716] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.784096][ T5716] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 220.784119][ T5716] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 220.784134][ T5716] usb 1-1: Product: syz [ 220.784144][ T5716] usb 1-1: Manufacturer: syz [ 220.784154][ T5716] usb 1-1: SerialNumber: syz [ 221.328556][ T10] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 221.388488][ T5716] usb 1-1: config 0 descriptor?? [ 221.449422][ T5716] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 221.621319][ T6476] overlayfs: failed to clone upperpath [ 221.672536][ T5716] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 221.958067][ T5606] Bluetooth: hci2: command 0x0406 tx timeout [ 221.965258][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 221.965303][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 221.965335][ T5599] Bluetooth: hci1: command 0x0406 tx timeout [ 222.071058][ T6476] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 222.126022][ T5702] usb 1-1: USB disconnect, device number 8 [ 222.201549][ T5702] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 222.438750][ T5961] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 222.573522][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.573797][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.574058][ T6337] bridge_slave_0: entered allmulticast mode [ 222.607836][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 222.609875][ T5961] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 222.609903][ T5961] usb 2-1: config 0 has no interface number 0 [ 222.609963][ T5961] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 222.615712][ T5961] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 222.615744][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.615765][ T5961] usb 2-1: Product: syz [ 222.615781][ T5961] usb 2-1: Manufacturer: syz [ 222.615796][ T5961] usb 2-1: SerialNumber: syz [ 222.651213][ T6337] bridge_slave_0: entered promiscuous mode [ 222.730023][ T5961] usb 2-1: config 0 descriptor?? [ 222.731089][ T6486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.962697][ T6486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 222.991610][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.991713][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.991942][ T6337] bridge_slave_1: entered allmulticast mode [ 223.069080][ T6337] bridge_slave_1: entered promiscuous mode [ 223.374903][ T5961] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 223.375487][ T5961] asix 2-1:0.188: probe with driver asix failed with error -32 [ 223.415600][ T6337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.448975][ T6337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.710188][ T6337] team0: Port device team_slave_0 added [ 223.740549][ T6337] team0: Port device team_slave_1 added [ 224.036531][ T6502] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.194846][ T6503] netlink: 56 bytes leftover after parsing attributes in process `syz.3.154'. [ 224.301257][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.301271][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.301291][ T6337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.467545][ T6337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.467559][ T6337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.467580][ T6337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.101624][ T5716] usb 2-1: USB disconnect, device number 8 [ 225.513371][ T6514] fuse: Bad value for 'fd' [ 227.887918][ T1264] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.047918][ T1264] usb 1-1: Using ep0 maxpacket: 32 [ 228.057205][ T1264] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 228.057238][ T1264] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 228.057266][ T1264] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 228.057286][ T1264] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 228.057305][ T1264] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.091464][ T1264] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 228.091497][ T1264] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 228.091521][ T1264] usb 1-1: Product: syz [ 228.091557][ T1264] usb 1-1: Manufacturer: syz [ 228.091599][ T1264] usb 1-1: SerialNumber: syz [ 228.176931][ T1264] usb 1-1: config 0 descriptor?? [ 228.218215][ T1264] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 228.353521][ T1264] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 228.606521][ T6337] hsr_slave_0: entered promiscuous mode [ 228.672892][ T6337] hsr_slave_1: entered promiscuous mode [ 228.684669][ T6337] debugfs: 'hsr0' already exists in 'hsr' [ 228.684701][ T6337] Cannot create hsr debugfs directory [ 228.685054][ T6533] warning: `syz.3.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 228.961784][ T5812] usb 1-1: USB disconnect, device number 9 [ 228.986456][ T5812] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 229.047903][ T5716] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.200244][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 229.202876][ T5716] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 229.202926][ T5716] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 229.202957][ T5716] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.202975][ T5716] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 229.202994][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 229.205629][ T5716] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 229.205659][ T5716] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 229.205682][ T5716] usb 2-1: Product: syz [ 229.205697][ T5716] usb 2-1: Manufacturer: syz [ 229.205712][ T5716] usb 2-1: SerialNumber: syz [ 229.357122][ T5716] usb 2-1: config 0 descriptor?? [ 229.544341][ T5716] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.582675][ T5716] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.670169][ T5716] usb 2-1: USB disconnect, device number 9 [ 229.769676][ T5716] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 232.057977][ T5961] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 232.220866][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.220914][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 232.220938][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 232.220958][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.226873][ T5961] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 232.226905][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 232.226926][ T5961] usb 1-1: Product: syz [ 232.226941][ T5961] usb 1-1: Manufacturer: syz [ 232.226956][ T5961] usb 1-1: SerialNumber: syz [ 232.337181][ T5961] usb 1-1: config 0 descriptor?? [ 232.404294][ T5961] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 232.404357][ T5961] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 232.411387][ T5961] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 235.314253][ T102] usb 1-1: USB disconnect, device number 10 [ 236.038296][ T1264] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.187940][ T1264] usb 2-1: Using ep0 maxpacket: 32 [ 236.189724][ T1264] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 236.189758][ T1264] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.189789][ T1264] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.189811][ T1264] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.189832][ T1264] usb 2-1: config 0 interface 0 has no altsetting 0 [ 236.192074][ T1264] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.192096][ T1264] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.192113][ T1264] usb 2-1: Product: syz [ 236.192124][ T1264] usb 2-1: Manufacturer: syz [ 236.192136][ T1264] usb 2-1: SerialNumber: syz [ 236.345722][ T1264] usb 2-1: config 0 descriptor?? [ 236.442627][ T1264] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 236.468517][ T1264] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 236.828729][ T102] usb 2-1: USB disconnect, device number 10 [ 236.882371][ T102] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 237.487831][ T5702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 237.779572][ T5702] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 237.779603][ T5702] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.779621][ T5702] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.779642][ T5702] usb 1-1: config 1 has no interface number 1 [ 237.780253][ T5702] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 237.924081][ T5702] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.924113][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.924132][ T5702] usb 1-1: Product: syz [ 237.924147][ T5702] usb 1-1: Manufacturer: syz [ 237.924165][ T5702] usb 1-1: SerialNumber: syz [ 238.610364][ T1383] bridge_slave_1: left allmulticast mode [ 238.610419][ T1383] bridge_slave_1: left promiscuous mode [ 238.610779][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.723392][ T5702] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 238.723479][ T5702] usb 1-1: MIDIStreaming interface descriptor not found [ 239.262468][ T1383] bridge_slave_0: left allmulticast mode [ 239.262508][ T1383] bridge_slave_0: left promiscuous mode [ 239.262785][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.841213][ T5702] usb 1-1: USB disconnect, device number 11 [ 240.382776][ T6640] udevd[6640]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.217901][ T5730] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 245.243201][ T1383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.348506][ T1383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.387893][ T5730] usb 2-1: Using ep0 maxpacket: 8 [ 245.389709][ T5730] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 245.389730][ T5730] usb 2-1: config 0 has no interface number 0 [ 245.389763][ T5730] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 245.389779][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.461230][ T5730] usb 2-1: config 0 descriptor?? [ 245.546945][ T1383] bond0 (unregistering): Released all slaves [ 245.743783][ T5730] viperboard 2-1:0.143: version 0.00 found at bus 002 address 011 [ 246.116292][ T5730] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 246.116323][ T5730] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 246.467532][ T5730] usb 2-1: USB disconnect, device number 11 [ 247.561270][ T1383] hsr_slave_0: left promiscuous mode [ 247.632245][ T1383] hsr_slave_1: left promiscuous mode [ 247.633315][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.716878][ T1383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.018051][ T5730] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 248.168680][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 248.170981][ T5730] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 248.171002][ T5730] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.171015][ T5730] usb 2-1: config 0 has no interface number 0 [ 248.171047][ T5730] usb 2-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.171067][ T5730] usb 2-1: config 0 interface 184 has no altsetting 0 [ 248.173749][ T5730] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 248.173781][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.173803][ T5730] usb 2-1: Product: syz [ 248.173818][ T5730] usb 2-1: Manufacturer: syz [ 248.173834][ T5730] usb 2-1: SerialNumber: syz [ 248.301878][ T5730] usb 2-1: config 0 descriptor?? [ 248.408732][ T5730] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 248.409281][ T5730] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 250.061590][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 250.233735][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 250.474435][ T5716] usb 2-1: USB disconnect, device number 12 [ 255.756432][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756503][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.208866][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 256.250926][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 256.254591][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 256.314886][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 262.290771][ T6787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.226'. [ 265.357984][ T5817] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 265.519377][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 265.521561][ T5817] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 265.521592][ T5817] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 265.521620][ T5817] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 265.521639][ T5817] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 265.521658][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 265.526690][ T5817] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 265.526728][ T5817] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 265.526744][ T5817] usb 2-1: Product: syz [ 265.526754][ T5817] usb 2-1: Manufacturer: syz [ 265.526765][ T5817] usb 2-1: SerialNumber: syz [ 265.676282][ T5817] usb 2-1: config 0 descriptor?? [ 265.701054][ T5817] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 265.711636][ T5817] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 265.841376][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.911549][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.927587][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.941636][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.959864][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.182196][ T6819] zram: Can't change algorithm for initialized device [ 266.189783][ T6819] zram: Cannot change disksize for initialized device [ 266.280853][ T5730] usb 2-1: USB disconnect, device number 13 [ 266.408450][ T5730] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 268.124096][ T60] Bluetooth: hci5: command tx timeout [ 268.816471][ T6856] fuse: Bad value for 'fd' [ 268.850670][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 269.027883][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 269.030403][ T9] usb 1-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 269.030431][ T9] usb 1-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 269.030586][ T9] usb 1-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 269.030619][ T9] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.030653][ T9] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 269.033268][ T9] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 269.033298][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.033318][ T9] usb 1-1: Product: syz [ 269.033333][ T9] usb 1-1: Manufacturer: syz [ 269.033347][ T9] usb 1-1: SerialNumber: syz [ 270.199369][ T60] Bluetooth: hci5: command tx timeout [ 270.996113][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 271.570113][ T9] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 271.570386][ T9] powermate 1-1:129.0: probe with driver powermate failed with error -5 [ 271.767753][ T9] usb 1-1: USB disconnect, device number 12 [ 272.280806][ T60] Bluetooth: hci5: command tx timeout [ 273.878039][ T60] Bluetooth: hci1: unexpected event for opcode 0x203c [ 274.180733][ T6894] netlink: 1 bytes leftover after parsing attributes in process `syz.0.252'. [ 274.357915][ T60] Bluetooth: hci5: command tx timeout [ 275.695748][ T6830] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.696075][ T6830] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.696319][ T6830] bridge_slave_0: entered allmulticast mode [ 275.710647][ T6830] bridge_slave_0: entered promiscuous mode [ 275.725725][ T6830] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.725904][ T6830] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.726171][ T6830] bridge_slave_1: entered allmulticast mode [ 275.748884][ T6830] bridge_slave_1: entered promiscuous mode [ 275.847843][ T5702] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 275.999340][ T5702] usb 1-1: Using ep0 maxpacket: 8 [ 276.003255][ T5702] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 276.003284][ T5702] usb 1-1: config 0 has no interface number 0 [ 276.003334][ T5702] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 276.003359][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.093689][ T5702] usb 1-1: config 0 descriptor?? [ 276.214421][ T5702] viperboard 1-1:0.143: version 0.00 found at bus 001 address 013 [ 276.282516][ T5702] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 276.282547][ T5702] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 276.397448][ T60] Bluetooth: hci0: unexpected event for opcode 0x203c [ 276.779036][ T6830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.831919][ T6830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.898893][ T1264] usb 1-1: USB disconnect, device number 13 [ 277.185142][ T6830] team0: Port device team_slave_0 added [ 277.212941][ T6830] team0: Port device team_slave_1 added [ 277.493338][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.493357][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.493389][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.550934][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.550947][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.550967][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.604569][ T6830] hsr_slave_0: entered promiscuous mode [ 278.612876][ T6830] hsr_slave_1: entered promiscuous mode [ 278.613924][ T6830] debugfs: 'hsr0' already exists in 'hsr' [ 278.613946][ T6830] Cannot create hsr debugfs directory [ 278.927930][ T5812] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 279.140177][ T5812] usb 2-1: Using ep0 maxpacket: 8 [ 279.176105][ T5812] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 279.176135][ T5812] usb 2-1: config 0 has no interface number 0 [ 279.176184][ T5812] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 279.176209][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.228606][ T5812] usb 2-1: config 0 descriptor?? [ 279.378355][ T5812] viperboard 2-1:0.143: version 0.00 found at bus 002 address 014 [ 279.506877][ T5812] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 279.506912][ T5812] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 279.736372][ T1264] usb 2-1: USB disconnect, device number 14 [ 281.816244][ T93] bridge_slave_1: left allmulticast mode [ 281.816282][ T93] bridge_slave_1: left promiscuous mode [ 281.816554][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.113526][ T93] bridge_slave_0: left allmulticast mode [ 282.113566][ T93] bridge_slave_0: left promiscuous mode [ 282.150606][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.956484][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 286.200621][ T93] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.397103][ T93] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.485924][ T93] bond0 (unregistering): Released all slaves [ 286.799174][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5 [ 287.679013][ T93] hsr_slave_0: left promiscuous mode [ 288.752758][ T93] hsr_slave_1: left promiscuous mode [ 288.753947][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.844434][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.509214][ T93] team0 (unregistering): Port device team_slave_1 removed [ 292.559183][ T93] team0 (unregistering): Port device team_slave_0 removed [ 292.814562][ T7033] syz_tun: entered allmulticast mode [ 292.815809][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 292.888054][ T7039] syz_tun: left allmulticast mode [ 293.418801][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.568190][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 293.571132][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 293.572775][ T5817] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 293.572801][ T5817] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 293.572821][ T5817] usb 2-1: config 14 has no interface number 0 [ 293.572837][ T5817] usb 2-1: config 14 has no interface number 1 [ 293.572912][ T5817] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 293.572936][ T5817] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 293.572963][ T5817] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 293.572991][ T5817] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 293.573017][ T5817] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 293.573040][ T5817] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.573083][ T5817] usb 2-1: config 14 interface 57 has no altsetting 0 [ 293.573102][ T5817] usb 2-1: config 14 interface 228 has no altsetting 0 [ 293.576220][ T5817] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 293.576250][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.576271][ T5817] usb 2-1: Product: syz [ 293.576286][ T5817] usb 2-1: Manufacturer: syz [ 293.576301][ T5817] usb 2-1: SerialNumber: syz [ 294.338275][ T5817] legousbtower 2-1:14.57: interrupt endpoints not found [ 294.794419][ T5817] legousbtower 2-1:14.228: get version request failed: -71 [ 294.794603][ T5817] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 295.005473][ T5817] usb 2-1: USB disconnect, device number 15 [ 296.020918][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 298.277985][ T5812] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 298.451507][ T5812] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.451536][ T5812] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.451556][ T5812] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 298.451577][ T5812] usb 1-1: config 1 has no interface number 1 [ 298.451621][ T5812] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 298.557930][ T5812] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.557960][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.557979][ T5812] usb 1-1: Product: syz [ 298.557996][ T5812] usb 1-1: Manufacturer: syz [ 298.558023][ T5812] usb 1-1: SerialNumber: syz [ 299.407547][ T5812] usb 1-1: USB disconnect, device number 14 [ 299.412437][ T7174] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.736121][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.325'. [ 300.744673][ T7185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.379162][ T7169] udevd[7169]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.507623][ T6830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.591009][ T5812] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 302.793976][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.813156][ T6830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.159264][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.188424][ T6830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.443520][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.503215][ T6830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.718562][ T6830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.957327][ T7222] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 305.279181][ T7222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.335'. [ 305.665084][ T6830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.833328][ T6830] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.914367][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.914471][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.336118][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.349147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.089347][ T7260] Zero length message leads to an empty skb [ 309.981895][ T7300] capability: warning: `syz.2.352' uses 32-bit capabilities (legacy support in use) [ 310.043169][ T6830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.621266][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 315.245161][ T6830] veth0_vlan: entered promiscuous mode [ 315.290798][ T6830] veth1_vlan: entered promiscuous mode [ 315.749613][ T6830] veth0_macvtap: entered promiscuous mode [ 315.792342][ T6830] veth1_macvtap: entered promiscuous mode [ 317.162412][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162487][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.334235][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.444155][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.721071][ T5913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.722103][ T5913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.722134][ T5913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.722161][ T5913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.327856][ T5716] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 318.490999][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 318.496251][ T5716] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 318.513181][ T5716] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 318.513277][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.513331][ T5716] usb 2-1: Product: syz [ 318.513380][ T5716] usb 2-1: Manufacturer: syz [ 318.513429][ T5716] usb 2-1: SerialNumber: syz [ 318.595340][ T5716] r8152-cfgselector 2-1: Unknown version 0x0000 [ 318.595369][ T5716] r8152-cfgselector 2-1: config 0 descriptor?? [ 318.801619][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.801644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.084410][ T5716] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 319.135343][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 319.137154][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 319.137493][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 319.139267][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 319.530715][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.530737][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.052310][ T1264] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 322.198231][ T1264] usb 2-1: Using ep0 maxpacket: 32 [ 322.201212][ T1264] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.202623][ T1264] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 322.202644][ T1264] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 322.202659][ T1264] usb 2-1: config 14 has no interface number 0 [ 322.202671][ T1264] usb 2-1: config 14 has no interface number 1 [ 322.202722][ T1264] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 322.202739][ T1264] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 322.202758][ T1264] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 322.202777][ T1264] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 322.202796][ T1264] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 322.202815][ T1264] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.202835][ T1264] usb 2-1: config 14 interface 57 has no altsetting 0 [ 322.202847][ T1264] usb 2-1: config 14 interface 228 has no altsetting 0 [ 322.205014][ T1264] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 322.205036][ T1264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.205050][ T1264] usb 2-1: Product: syz [ 322.205061][ T1264] usb 2-1: Manufacturer: syz [ 322.205071][ T1264] usb 2-1: SerialNumber: syz [ 322.857043][ T1264] legousbtower 2-1:14.57: interrupt endpoints not found [ 323.259965][ T1264] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 44.206 build 23566 [ 323.280407][ T1264] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 323.301514][ T102] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 323.450210][ T102] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 323.450254][ T102] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.505217][ T102] usb 6-1: config 0 descriptor?? [ 323.529460][ T102] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 323.564450][ T1264] usb 2-1: USB disconnect, device number 17 [ 323.755261][ T1264] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 324.374780][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.383506][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.703653][ T102] usb 6-1: USB disconnect, device number 2 [ 324.830458][ T7417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.385'. [ 326.854467][ T7447] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 326.908734][ T7447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.396'. [ 328.556668][ T7462] zram: Can't change algorithm for initialized device [ 329.921707][ T7472] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 330.026011][ T7472] netlink: 56 bytes leftover after parsing attributes in process `syz.3.403'. [ 342.472199][ T5812] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.709374][ T5812] usb 6-1: Using ep0 maxpacket: 32 [ 342.715630][ T5812] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 342.715675][ T5812] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 342.715719][ T5812] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 342.715754][ T5812] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 342.715782][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0 [ 342.723372][ T5812] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 342.723405][ T5812] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 342.723429][ T5812] usb 6-1: Product: syz [ 342.723444][ T5812] usb 6-1: Manufacturer: syz [ 342.723460][ T5812] usb 6-1: SerialNumber: syz [ 342.736566][ T5812] usb 6-1: config 0 descriptor?? [ 343.838154][ T5812] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 343.843853][ T5812] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 343.903348][ T7596] zram: Cannot change disksize for initialized device [ 344.012865][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 344.012905][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.452'. [ 344.122454][ T7614] dummy0: entered promiscuous mode [ 344.148691][ T7614] virtio_net virtio1 eth0: entered promiscuous mode [ 344.151817][ T7614] debugfs: 'hsr0' already exists in 'hsr' [ 344.151847][ T7614] Cannot create hsr debugfs directory [ 345.680306][ T5812] usb 6-1: USB disconnect, device number 3 [ 345.804779][ T5812] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 345.932789][ T7621] binder: 7618:7621 unknown command 0 [ 345.932824][ T7621] binder: 7618:7621 ioctl c0306201 2000000004c0 returned -22 [ 345.933200][ T7621] binder: 7618:7621 ioctl c0306201 0 returned -14 [ 346.481610][ T7641] syz.1.460 (7641) used greatest stack depth: 19600 bytes left [ 347.826399][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 347.826443][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'. [ 348.197872][ T5716] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 348.484737][ T5716] usb 2-1: Using ep0 maxpacket: 32 [ 348.497614][ T5716] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 348.497709][ T5716] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 348.497762][ T5716] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 348.497888][ T5716] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 348.497917][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 348.536961][ T5716] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 348.536986][ T5716] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 348.537072][ T5716] usb 2-1: Product: syz [ 348.537087][ T5716] usb 2-1: Manufacturer: syz [ 348.537102][ T5716] usb 2-1: SerialNumber: syz [ 348.655337][ T5716] usb 2-1: config 0 descriptor?? [ 348.679029][ T5716] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 348.713769][ T5716] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 350.753538][ T5812] usb 2-1: USB disconnect, device number 18 [ 350.791271][ T5812] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 351.157895][ T5730] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 351.347055][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 351.361910][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 351.385541][ T5730] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.385606][ T5730] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 351.385681][ T5730] usb 1-1: config 0 interface 0 has no altsetting 0 [ 351.385728][ T5730] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 351.385754][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.478955][ T5730] usb 1-1: config 0 descriptor?? [ 352.575485][ T5730] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 354.171418][ T7731] block device autoloading is deprecated and will be removed. [ 354.418405][ T5702] usb 1-1: USB disconnect, device number 16 [ 354.418643][ T5730] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 354.598664][ T5730] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 354.598697][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.661625][ T5730] usb 6-1: config 0 descriptor?? [ 354.681896][ T5730] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 354.914512][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'. [ 354.914555][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'. [ 355.701478][ T7725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.730150][ T7725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.812024][ T5730] usb 6-1: USB disconnect, device number 4 [ 358.911366][ T7767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.979378][ T7767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.046572][ T7767] bond0 (unregistering): Released all slaves [ 362.697843][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 362.857816][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 362.860757][ T9] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 362.864210][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 362.864243][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.864264][ T9] usb 1-1: Product: syz [ 362.864280][ T9] usb 1-1: Manufacturer: syz [ 362.864299][ T9] usb 1-1: SerialNumber: syz [ 363.002894][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 363.002932][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 364.435366][ T9] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 368.556989][ T7882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.638630][ T7882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.694590][ T7882] bond0 (unregistering): Released all slaves [ 369.009172][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 369.337806][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 370.137303][ T7867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.156747][ T10] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 370.157266][ T10] usb 6-1: config 0 has no interface number 0 [ 370.157317][ T10] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 370.157342][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.271379][ T10] usb 6-1: config 0 descriptor?? [ 370.398630][ T10] viperboard 6-1:0.143: version 0.00 found at bus 006 address 005 [ 370.475903][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 370.475937][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 371.985534][ T9] usb 6-1: USB disconnect, device number 5 [ 373.513590][ T7942] syz.3.551 (7942) used greatest stack depth: 17544 bytes left [ 375.273541][ T7962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 376.463556][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 376.501877][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 376.505952][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 376.510388][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 376.513100][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 379.322222][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.322330][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.994855][ T8008] netlink: 72 bytes leftover after parsing attributes in process `syz.3.575'. [ 385.622325][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 385.622976][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 385.623368][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 385.623918][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 385.624213][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 385.727799][ T36] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 385.897977][ T5961] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 385.922430][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 385.922464][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.954908][ T36] usb 2-1: config 0 descriptor?? [ 385.979747][ T36] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 386.060482][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 386.062874][ T5961] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 386.067368][ T5961] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 386.067504][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.067528][ T5961] usb 6-1: Product: syz [ 386.067544][ T5961] usb 6-1: Manufacturer: syz [ 386.111229][ T5961] usb 6-1: SerialNumber: syz [ 386.139283][ T5961] r8152-cfgselector 6-1: Unknown version 0x0000 [ 386.139397][ T5961] r8152-cfgselector 6-1: config 0 descriptor?? [ 386.436345][ T5961] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 386.634338][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.682204][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.396322][ T36] usb 2-1: USB disconnect, device number 19 [ 390.225573][ T8057] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.238959][ T31] IPVS: starting estimator thread 0... [ 390.337879][ T8062] IPVS: using max 7 ests per chain, 16800 per kthread [ 390.513686][ T8056] netlink: 56 bytes leftover after parsing attributes in process `syz.5.590'. [ 390.852651][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 390.853387][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 390.853695][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 390.853951][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 390.854334][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 392.918722][ T5604] Bluetooth: hci5: command 0x0406 tx timeout [ 395.181281][ T8098] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 395.200488][ T8098] netlink: 56 bytes leftover after parsing attributes in process `syz.2.600'. [ 396.967910][ T8117] capability: warning: `syz.3.605' uses deprecated v2 capabilities in a way that may be insecure [ 398.895095][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 398.896288][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 398.896711][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 398.897117][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 398.897453][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 401.687853][ T5702] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 401.849804][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 401.854206][ T5702] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 401.854245][ T5702] usb 1-1: config 0 has no interface number 0 [ 401.854295][ T5702] usb 1-1: config 0 interface 184 has no altsetting 0 [ 401.916228][ T5702] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 401.916267][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.916282][ T5702] usb 1-1: Product: syz [ 401.916292][ T5702] usb 1-1: Manufacturer: syz [ 401.916303][ T5702] usb 1-1: SerialNumber: syz [ 401.926553][ T5702] usb 1-1: config 0 descriptor?? [ 403.281705][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 403.281737][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 404.185256][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 404.185289][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 404.185310][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 404.185328][ T5702] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 404.185641][ T5702] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 405.201583][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 405.204690][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 405.205033][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 405.205298][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 405.205551][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 405.392773][ T5716] usb 1-1: USB disconnect, device number 18 [ 407.727824][ T1264] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 407.888277][ T1264] usb 1-1: Using ep0 maxpacket: 32 [ 407.890716][ T1264] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.890746][ T1264] usb 1-1: config 0 has no interface number 0 [ 407.890796][ T1264] usb 1-1: config 0 interface 184 has no altsetting 0 [ 407.896642][ T1264] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.896675][ T1264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.896697][ T1264] usb 1-1: Product: syz [ 407.896712][ T1264] usb 1-1: Manufacturer: syz [ 407.896728][ T1264] usb 1-1: SerialNumber: syz [ 408.265361][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 408.342059][ T1264] usb 1-1: config 0 descriptor?? [ 409.461666][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 409.461700][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.655769][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 409.655804][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 409.655825][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 409.655845][ T1264] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 409.657031][ T1264] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 411.109773][ T8249] netlink: 76 bytes leftover after parsing attributes in process `syz.3.647'. [ 412.031453][ T1264] usb 1-1: USB disconnect, device number 19 [ 413.367716][ T102] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 413.569992][ T102] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 413.570025][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.948208][ T102] usb 2-1: config 0 descriptor?? [ 413.970857][ T102] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 414.208262][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 415.308813][ T5702] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 415.400106][ T8286] block device autoloading is deprecated and will be removed. [ 415.417031][ T5597] block device autoloading is deprecated and will be removed. [ 415.617680][ T5702] usb 6-1: Using ep0 maxpacket: 32 [ 415.620453][ T5702] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 415.620485][ T5702] usb 6-1: config 0 has no interface number 0 [ 415.620565][ T5702] usb 6-1: config 0 interface 184 has no altsetting 0 [ 415.623427][ T5702] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 415.623461][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.623543][ T5702] usb 6-1: Product: syz [ 415.623559][ T5702] usb 6-1: Manufacturer: syz [ 415.623575][ T5702] usb 6-1: SerialNumber: syz [ 415.762555][ T5702] usb 6-1: config 0 descriptor?? [ 416.048568][ T102] usb 2-1: USB disconnect, device number 20 [ 416.327590][ T36] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 416.709934][ T36] usb 1-1: device descriptor read/64, error -71 [ 416.868778][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 416.868805][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 417.065251][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 417.065275][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 417.065290][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 417.065302][ T5702] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 417.065532][ T5702] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 417.121459][ T36] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 417.287386][ T36] usb 1-1: device descriptor read/64, error -71 [ 417.432072][ T36] usb usb1-port1: attempt power cycle [ 417.907586][ T36] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.320579][ T36] usb 1-1: device descriptor read/8, error -71 [ 419.893364][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 419.997271][ T36] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 420.127204][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 420.129815][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 420.129845][ T10] usb 2-1: config 179 has no interface number 0 [ 420.129893][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 420.129923][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 420.129953][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 420.129981][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 420.130009][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 420.130056][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 420.130081][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.292001][ T8320] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 420.347329][ T36] usb 1-1: device descriptor read/8, error -71 [ 420.348104][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 420.353460][ T9] usb 6-1: USB disconnect, device number 7 [ 420.457607][ T36] usb usb1-port1: unable to enumerate USB device [ 422.730560][ T8345] netlink: 40 bytes leftover after parsing attributes in process `syz.5.679'. [ 422.893418][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 422.893504][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 422.893942][ T10] usb 2-1: USB disconnect, device number 21 [ 426.317111][ T5709] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.014745][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 427.076889][ T5709] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 427.076918][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.076938][ T5709] usb 1-1: config 0 has no interfaces? [ 427.080386][ T5709] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 427.080415][ T5709] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 427.080435][ T5709] usb 1-1: Product: syz [ 427.080449][ T5709] usb 1-1: Manufacturer: syz [ 427.080464][ T5709] usb 1-1: SerialNumber: syz [ 427.171297][ T5709] usb 1-1: config 0 descriptor?? [ 428.010529][ T8361] zram: Cannot change disksize for initialized device [ 428.012319][ T9] usb 1-1: USB disconnect, device number 24 [ 429.780437][ T5817] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 429.890487][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 430.134357][ T5817] usb 2-1: device descriptor read/64, error -32 [ 431.157046][ T5817] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 431.333973][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 431.498327][ T5817] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 431.498425][ T5817] usb 2-1: config 179 has no interface number 0 [ 431.498524][ T5817] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 431.498591][ T5817] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 431.498666][ T5817] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.498735][ T5817] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 431.499015][ T5817] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.499112][ T5817] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 431.499150][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.832373][ T8390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 434.148880][ T5702] usb 2-1: USB disconnect, device number 23 [ 434.148880][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.148950][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.168743][ T8400] netlink: 76 bytes leftover after parsing attributes in process `syz.2.696'. [ 436.871546][ T8437] fuse: Bad value for 'fd' [ 440.058722][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.058797][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.415558][ T8462] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 441.920459][ T8465] binder: 8464:8465 ioctl c0306201 200000000080 returned -14 [ 442.046758][ T8466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'. [ 442.047408][ T8459] netlink: 56 bytes leftover after parsing attributes in process `syz.5.714'. [ 442.056626][ T8465] binder: 8464:8465 ioctl c0306201 2000000003c0 returned -14 [ 445.435956][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 445.778364][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 445.778395][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.800849][ T10] usb 6-1: config 0 descriptor?? [ 445.873738][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 446.335837][ T5817] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 446.486152][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 446.510777][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 446.528863][ T5817] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 446.528892][ T5817] usb 2-1: config 7 has no interface number 0 [ 446.528951][ T5817] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 446.528975][ T5817] usb 2-1: config 7 interface 187 has no altsetting 0 [ 446.599063][ T5817] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 446.599096][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.599115][ T5817] usb 2-1: Product: syz [ 446.599130][ T5817] usb 2-1: Manufacturer: syz [ 446.599145][ T5817] usb 2-1: SerialNumber: syz [ 446.640419][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.662903][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.754749][ T10] usb 6-1: USB disconnect, device number 8 [ 447.198519][ T5817] usb 2-1: Cannot retrieve CPort count: -110 [ 447.198573][ T5817] usb 2-1: Cannot retrieve CPort count: -110 [ 447.198612][ T5817] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 448.573079][ T5817] usb 2-1: USB disconnect, device number 24 [ 449.356135][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.735'. [ 450.046676][ T1264] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 450.197900][ T1264] usb 6-1: Using ep0 maxpacket: 16 [ 450.356352][ T1264] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 450.415645][ T1264] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 450.415677][ T1264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.415698][ T1264] usb 6-1: Product: syz [ 450.415714][ T1264] usb 6-1: Manufacturer: syz [ 450.415731][ T1264] usb 6-1: SerialNumber: syz [ 450.675032][ T1264] r8152-cfgselector 6-1: Unknown version 0x0000 [ 450.675053][ T1264] r8152-cfgselector 6-1: config 0 descriptor?? [ 450.981797][ T9] r8152-cfgselector 6-1: USB disconnect, device number 9 [ 452.555034][ T1264] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 452.730184][ T1264] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 452.730226][ T1264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.768274][ T1264] usb 1-1: config 0 descriptor?? [ 452.828575][ T1264] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 453.402619][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.424369][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.245089][ T1264] usb 1-1: USB disconnect, device number 25 [ 458.136986][ T8609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 458.203795][ T8609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 458.238963][ T8609] vhci_hcd vhci_hcd.0: Device attached [ 458.425100][ T1264] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 458.475062][ T102] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 458.575250][ T1264] usb 6-1: Using ep0 maxpacket: 32 [ 458.583633][ T1264] usb 6-1: unable to get BOS descriptor or descriptor too short [ 458.629355][ T1264] usb 6-1: config 7 has an invalid interface number: 187 but max is 0 [ 458.629388][ T1264] usb 6-1: config 7 has no interface number 0 [ 458.629442][ T1264] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 458.629468][ T1264] usb 6-1: config 7 interface 187 has no altsetting 0 [ 458.669100][ T1264] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 458.669132][ T1264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.669153][ T1264] usb 6-1: Product: syz [ 458.669166][ T1264] usb 6-1: Manufacturer: syz [ 458.669181][ T1264] usb 6-1: SerialNumber: syz [ 458.950941][ T8618] vhci_hcd: connection reset by peer [ 458.979066][ T12] vhci_hcd vhci_hcd.0: stop threads [ 458.979100][ T12] vhci_hcd vhci_hcd.0: release socket [ 458.981614][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 459.276168][ T1264] usb 6-1: Cannot retrieve CPort count: -110 [ 459.276219][ T1264] usb 6-1: Cannot retrieve CPort count: -110 [ 459.276256][ T1264] es2_ap_driver 6-1:7.187: probe with driver es2_ap_driver failed with error -110 [ 459.460803][ T9] usb 6-1: USB disconnect, device number 10 [ 462.093146][ T8659] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 462.093179][ T8659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.137715][ T8659] vhci_hcd vhci_hcd.0: Device attached [ 462.414939][ T5730] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 462.581326][ T8671] xfrm0: entered promiscuous mode [ 462.581356][ T8671] xfrm0: entered allmulticast mode [ 462.803690][ T8663] vhci_hcd: connection reset by peer [ 462.838708][ T67] vhci_hcd vhci_hcd.5: stop threads [ 462.838745][ T67] vhci_hcd vhci_hcd.5: release socket [ 462.863944][ T67] vhci_hcd vhci_hcd.5: disconnect device [ 464.244863][ T102] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 466.246994][ T5702] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 466.790090][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 466.990087][ T5702] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 466.990119][ T5702] usb 2-1: config 0 has no interface number 0 [ 468.104600][ T5730] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 469.533265][ T5702] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 469.533290][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.601862][ T5702] usb 2-1: config 0 descriptor?? [ 469.611192][ T5702] usb 2-1: can't set config #0, error -71 [ 469.635252][ T5702] usb 2-1: USB disconnect, device number 25 [ 471.625230][ T8730] xt_hashlimit: size too large, truncated to 1048576 [ 471.625398][ T8730] xt_hashlimit: max too large, truncated to 1048576 [ 476.115094][ T8769] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 476.115125][ T8769] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.115230][ T8769] vhci_hcd vhci_hcd.0: Device attached [ 476.357662][ T8776] vhci_hcd: connection closed [ 476.359541][ T93] vhci_hcd vhci_hcd.5: stop threads [ 476.359569][ T93] vhci_hcd vhci_hcd.5: release socket [ 476.359641][ T93] vhci_hcd vhci_hcd.5: disconnect device [ 476.364738][ T102] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 476.364830][ T102] usb 43-1: enqueue for inactive port 0 [ 476.444494][ T102] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 476.527220][ T5702] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 476.714146][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 476.716343][ T5702] usb 1-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 476.716375][ T5702] usb 1-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 476.716427][ T5702] usb 1-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 476.716455][ T5702] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 476.716483][ T5702] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.718906][ T5702] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 476.718938][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.718959][ T5702] usb 1-1: Product: syz [ 476.718975][ T5702] usb 1-1: Manufacturer: syz [ 476.718990][ T5702] usb 1-1: SerialNumber: syz [ 476.744073][ T5709] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 476.907426][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 476.934829][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 476.940113][ T5709] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 476.940143][ T5709] usb 2-1: config 7 has no interface number 0 [ 476.940292][ T5709] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 476.940317][ T5709] usb 2-1: config 7 interface 187 has no altsetting 0 [ 476.968331][ T5709] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 476.968428][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.968451][ T5709] usb 2-1: Product: syz [ 476.968466][ T5709] usb 2-1: Manufacturer: syz [ 476.968482][ T5709] usb 2-1: SerialNumber: syz [ 477.362048][ T5709] usb 2-1: Cannot retrieve CPort count: -71 [ 477.363001][ T5709] usb 2-1: Cannot retrieve CPort count: -71 [ 477.363043][ T5709] es2_ap_driver 2-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 477.444524][ T5709] usb 2-1: USB disconnect, device number 26 [ 477.684372][ T5702] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 477.684700][ T5702] powermate 1-1:129.0: probe with driver powermate failed with error -5 [ 477.723165][ T5702] usb 1-1: USB disconnect, device number 26 [ 482.289769][ T8849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 483.285728][ T36] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 483.633670][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 483.636696][ T36] usb 6-1: config index 0 descriptor too short (expected 8192, got 56) [ 483.636725][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.636745][ T36] usb 6-1: config 0 has no interfaces? [ 483.638226][ T36] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 483.638255][ T36] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 483.638275][ T36] usb 6-1: Manufacturer: syz [ 483.705250][ T36] usb 6-1: config 0 descriptor?? [ 485.339919][ T60] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 486.518341][ T36] usb 6-1: USB disconnect, device number 11 [ 487.793628][ T5709] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 488.235045][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 488.241730][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 488.261625][ T5709] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 488.261658][ T5709] usb 1-1: config 7 has no interface number 0 [ 488.261710][ T5709] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 488.261735][ T5709] usb 1-1: config 7 interface 187 has no altsetting 0 [ 488.318899][ T5709] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 488.318933][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.319014][ T5709] usb 1-1: Product: syz [ 488.319031][ T5709] usb 1-1: Manufacturer: syz [ 488.319048][ T5709] usb 1-1: SerialNumber: syz [ 488.778710][ T5709] usb 1-1: Cannot retrieve CPort count: -71 [ 488.778762][ T5709] usb 1-1: Cannot retrieve CPort count: -71 [ 488.778800][ T5709] es2_ap_driver 1-1:7.187: probe with driver es2_ap_driver failed with error -71 [ 488.848233][ T5709] usb 1-1: USB disconnect, device number 27 [ 489.397672][ T60] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 489.446532][ T60] Bluetooth: hci2: Injecting HCI hardware error event [ 489.473927][ T5604] Bluetooth: hci2: hardware error 0x00 [ 491.106824][ T8939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.867'. [ 491.417728][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.0.867'. [ 492.593824][ T5604] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 492.703358][ T5709] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 494.036529][ T5709] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 494.036562][ T5709] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 494.036601][ T5709] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 494.036628][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.322722][ T102] usb 6-1: USB disconnect, device number 12 [ 495.763063][ T5709] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 496.735932][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 496.742522][ T5709] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 496.742554][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.742574][ T5709] usb 1-1: Product: syz [ 496.742621][ T5709] usb 1-1: Manufacturer: syz [ 496.742636][ T5709] usb 1-1: SerialNumber: syz [ 496.805493][ T5709] usb 1-1: config 0 descriptor?? [ 496.868724][ T5709] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 498.893131][ T102] usb 1-1: USB disconnect, device number 28 [ 499.518058][ T9024] sg_read: process 572 (syz.0.891) changed security contexts after opening file descriptor, this is not allowed. [ 500.576723][ T9045] netlink: 212 bytes leftover after parsing attributes in process `syz.1.900'. [ 501.522740][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.522820][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.239354][ T9111] netlink: 212 bytes leftover after parsing attributes in process `syz.5.926'. [ 507.322434][ T5817] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 507.662465][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.662496][ T5817] usb 1-1: config 0 has no interfaces? [ 507.669704][ T5817] usb 1-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.40 [ 507.669728][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.669743][ T5817] usb 1-1: Product: syz [ 507.669754][ T5817] usb 1-1: Manufacturer: syz [ 507.669764][ T5817] usb 1-1: SerialNumber: syz [ 508.684864][ T5817] usb 1-1: config 0 descriptor?? [ 509.006253][ T5709] usb 1-1: USB disconnect, device number 29 [ 510.906999][ T9157] Invalid ELF header magic: != ELF [ 514.180230][ T9176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.816416][ T5604] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 515.031931][ T5817] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 515.203316][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 515.205470][ T5817] usb 2-1: config index 0 descriptor too short (expected 8192, got 56) [ 515.205495][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 515.205512][ T5817] usb 2-1: config 0 has no interfaces? [ 515.246149][ T5817] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.246195][ T5817] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.246217][ T5817] usb 2-1: Manufacturer: syz [ 515.367710][ T5817] usb 2-1: config 0 descriptor?? [ 515.621844][ T5702] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 515.775719][ T5702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.778881][ T5702] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 515.778922][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.778945][ T5702] usb 6-1: Product: syz [ 515.778959][ T5702] usb 6-1: Manufacturer: syz [ 515.778974][ T5702] usb 6-1: SerialNumber: syz [ 515.867689][ T5702] usb 6-1: config 0 descriptor?? [ 515.995816][ T5702] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 516.164138][ T1264] usb 6-1: USB disconnect, device number 13 [ 516.810544][ T5817] usb 2-1: USB disconnect, device number 27 [ 518.843088][ T9231] Invalid ELF header magic: != ELF [ 518.970652][ T5604] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 519.028829][ T5604] Bluetooth: hci3: Injecting HCI hardware error event [ 519.100994][ T60] Bluetooth: hci3: hardware error 0x00 [ 524.351395][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 524.851353][ T5702] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 525.012027][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 525.014997][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.015048][ T5702] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 525.015095][ T5702] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 525.015116][ T5702] usb 2-1: config 1 interface 0 has no altsetting 0 [ 525.028610][ T5702] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 525.028671][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.028720][ T5702] usb 2-1: Product: syz [ 525.028772][ T5702] usb 2-1: Manufacturer: syz [ 525.028842][ T5702] usb 2-1: SerialNumber: syz [ 525.041385][ T5817] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 525.209709][ T5817] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 525.209913][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 525.209943][ T5817] usb 1-1: Product: syz [ 525.209958][ T5817] usb 1-1: SerialNumber: syz [ 525.275604][ T5817] usb 1-1: config 0 descriptor?? [ 525.782706][ T5702] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 525.835230][ T5702] usb 2-1: USB disconnect, device number 28 [ 525.890848][ T9272] xt_hashlimit: size too large, truncated to 1048576 [ 525.890872][ T9272] xt_hashlimit: max too large, truncated to 1048576 [ 525.998738][ T9] usb 1-1: USB disconnect, device number 30 [ 526.947174][ T9307] Invalid ELF header magic: != ELF [ 530.782224][ T9339] Invalid ELF header magic: != ELF [ 532.847531][ T9349] Invalid ELF header magic: != ELF [ 534.210829][ T102] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 534.241749][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 534.590927][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 534.594554][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.594597][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 534.594703][ T9] usb 2-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 534.594736][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 534.600599][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 534.602349][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.602700][ T9] usb 2-1: Product: syz [ 534.602726][ T9] usb 2-1: Manufacturer: syz [ 534.602767][ T9] usb 2-1: SerialNumber: syz [ 535.945137][ T102] usb 6-1: unable to read config index 0 descriptor/all [ 535.945182][ T102] usb 6-1: can't read configurations, error -71 [ 536.690833][ T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 536.714723][ T9] usb 2-1: USB disconnect, device number 29 [ 537.307714][ T9382] Invalid ELF header magic: != ELF [ 539.250928][ T9395] Invalid ELF header magic: != ELF [ 540.161019][ T9396] Invalid ELF header magic: != ELF [ 540.966121][ T9410] Invalid ELF header magic: != ELF [ 548.054776][ T9468] Invalid ELF header magic: != ELF [ 548.282827][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 548.292730][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 548.311143][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 548.403763][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 548.408630][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 551.648546][ T9487] sg_write: data in/out 331740/136 bytes for SCSI command 0x0-- guessing data in; [ 551.648546][ T9487] program syz.1.1046 not setting count and/or reply_len properly [ 551.969840][ T5702] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 552.152219][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 552.171432][ T5702] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 552.171465][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.171487][ T5702] usb 1-1: Product: syz [ 552.171503][ T5702] usb 1-1: Manufacturer: syz [ 552.171519][ T5702] usb 1-1: SerialNumber: syz [ 552.218155][ T5702] usb 1-1: config 0 descriptor?? [ 552.235829][ T5702] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 552.456510][ T5702] usb 1-1: USB disconnect, device number 31 [ 553.415363][ T9511] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1052'. [ 556.170312][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1058'. [ 556.769306][ T9536] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.259652][ T102] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 558.436175][ T102] usb 6-1: Using ep0 maxpacket: 16 [ 558.437116][ T102] usb 6-1: no configurations [ 558.437136][ T102] usb 6-1: can't read configurations, error -22 [ 558.710735][ T102] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 558.889666][ T102] usb 6-1: Using ep0 maxpacket: 16 [ 558.890668][ T102] usb 6-1: no configurations [ 558.890687][ T102] usb 6-1: can't read configurations, error -22 [ 558.898425][ T102] usb usb6-port1: attempt power cycle [ 560.506286][ T9560] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 563.167234][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.167315][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.470985][ T9576] binder: 9575:9576 ioctl c0306201 200000000080 returned -14 [ 563.503450][ T9576] binder: 9575:9576 ioctl c0306201 2000000003c0 returned -14 [ 563.598257][ T9578] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1071'. [ 564.218658][ T1264] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 564.413456][ T1264] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 564.413492][ T1264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.476986][ T1264] usb 1-1: config 0 descriptor?? [ 564.561146][ T1264] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 564.946485][ T9580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.947181][ T9580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.998466][ T1264] gspca_stv06xx: I2C: Read error writing address: -71 [ 565.066061][ T1264] usb 1-1: USB disconnect, device number 32 [ 566.231741][ T9636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1090'. [ 567.143147][ T9644] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 567.408957][ T1264] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 567.562304][ T1264] usb 2-1: Using ep0 maxpacket: 8 [ 567.564989][ T1264] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 567.565031][ T1264] usb 2-1: config 0 has no interface number 0 [ 567.565081][ T1264] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 567.565107][ T1264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.641511][ T1264] usb 2-1: config 0 descriptor?? [ 567.779728][ T1264] viperboard 2-1:0.143: version 0.00 found at bus 002 address 030 [ 568.236779][ T1264] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 568.236819][ T1264] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 568.724709][ T1264] usb 2-1: USB disconnect, device number 30 [ 570.046595][ T9695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.268581][ T5709] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 574.772630][ T9738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.497293][ T5709] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 575.497326][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.618473][ T5817] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 575.621984][ T5709] usb 2-1: config 0 descriptor?? [ 575.674440][ T5709] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 575.768530][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 575.769429][ T5817] usb 6-1: no configurations [ 575.769449][ T5817] usb 6-1: can't read configurations, error -22 [ 575.898605][ T5817] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 575.972244][ T9747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1132'. [ 576.037565][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.057809][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 576.066281][ T5817] usb 6-1: no configurations [ 576.066303][ T5817] usb 6-1: can't read configurations, error -22 [ 576.067071][ T5817] usb usb6-port1: attempt power cycle [ 576.085459][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.146943][ T5709] gspca_stv06xx: I2C: Read error writing address: -71 [ 576.225751][ T5709] usb 2-1: USB disconnect, device number 31 [ 576.398477][ T5817] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 576.419188][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 576.419894][ T5817] usb 6-1: no configurations [ 576.419911][ T5817] usb 6-1: can't read configurations, error -22 [ 576.568650][ T5817] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 576.593698][ T5817] usb 6-1: Using ep0 maxpacket: 16 [ 576.594685][ T5817] usb 6-1: no configurations [ 576.594704][ T5817] usb 6-1: can't read configurations, error -22 [ 576.615457][ T5817] usb usb6-port1: unable to enumerate USB device [ 578.708403][ T5709] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 578.858692][ T5709] usb 6-1: Using ep0 maxpacket: 16 [ 578.861425][ T5709] usb 6-1: config 0 has no interfaces? [ 578.896861][ T5709] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 578.896897][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.896919][ T5709] usb 6-1: Product: syz [ 578.896935][ T5709] usb 6-1: Manufacturer: syz [ 578.896951][ T5709] usb 6-1: SerialNumber: syz [ 578.967287][ T5709] usb 6-1: config 0 descriptor?? [ 580.787961][ T5817] usb 6-1: USB disconnect, device number 23 [ 581.144484][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 581.874172][ T60] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 582.138490][ T5817] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 582.345758][ T5817] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 582.345849][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 582.345902][ T5817] usb 2-1: Product: syz [ 582.345975][ T5817] usb 2-1: SerialNumber: syz [ 583.157139][ T5817] usb 2-1: config 0 descriptor?? [ 583.626845][ T9832] xt_hashlimit: size too large, truncated to 1048576 [ 583.626876][ T9832] xt_hashlimit: max too large, truncated to 1048576 [ 583.933756][ T31] usb 2-1: USB disconnect, device number 32 [ 584.782209][ T9872] binder: 9870:9872 ioctl c0306201 200000000080 returned -14 [ 585.948236][ T60] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 585.948651][ T60] Bluetooth: hci0: Injecting HCI hardware error event [ 585.952717][ T60] Bluetooth: hci0: hardware error 0x00 [ 589.338137][ T9919] Invalid ELF header magic: != ELF [ 590.188929][ T60] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 591.933641][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1196'. [ 593.564710][ T9958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1206'. [ 598.824702][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.873182][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.908398][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.925627][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.945803][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 601.163455][ T60] Bluetooth: hci4: command tx timeout [ 602.167096][T10043] CIFS: Attempting to mount //127.0.0.1/share [ 602.210360][T10035] xt_hashlimit: size too large, truncated to 1048576 [ 602.210382][T10035] xt_hashlimit: max too large, truncated to 1048576 [ 603.103003][T10043] CIFS: VFS: Error connecting to socket. Aborting operation. [ 603.103374][T10043] CIFS: VFS: cifs_mount failed w/return code = -4 [ 603.227114][ T60] Bluetooth: hci4: command tx timeout [ 605.874180][ T60] Bluetooth: hci4: command tx timeout [ 607.360560][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.379843][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.380115][ T9994] bridge_slave_0: entered allmulticast mode [ 607.406131][ T9994] bridge_slave_0: entered promiscuous mode [ 607.464429][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.466393][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.484354][ T9994] bridge_slave_1: entered allmulticast mode [ 607.504517][ T9994] bridge_slave_1: entered promiscuous mode [ 607.791537][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.814647][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.886916][ T9994] team0: Port device team_slave_0 added [ 607.891546][ T9994] team0: Port device team_slave_1 added [ 607.948305][ T5604] Bluetooth: hci4: command tx timeout [ 607.950512][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.950532][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.950563][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.262234][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.262253][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.262293][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.141651][ T9994] hsr_slave_0: entered promiscuous mode [ 609.166083][ T9994] hsr_slave_1: entered promiscuous mode [ 609.170095][ T9994] debugfs: 'hsr0' already exists in 'hsr' [ 609.170127][ T9994] Cannot create hsr debugfs directory [ 611.102879][T10122] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 611.102918][T10122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 611.174610][T10122] vhci_hcd vhci_hcd.0: Device attached [ 611.416457][ T102] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 611.681166][T10126] vhci_hcd: connection reset by peer [ 611.688094][ T93] vhci_hcd vhci_hcd.0: stop threads [ 611.688122][ T93] vhci_hcd vhci_hcd.0: release socket [ 611.688239][ T93] vhci_hcd vhci_hcd.0: disconnect device [ 614.802299][ T9994] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 615.133381][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.150952][ T9994] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 615.456891][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.462254][ T9994] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 615.717559][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.723775][ T9994] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 615.971181][ T9994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 616.900268][ T102] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 618.329169][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.440785][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.528517][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.530274][ T8002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.655601][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.655705][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.322085][T10208] xt_hashlimit: size too large, truncated to 1048576 [ 619.322116][T10208] xt_hashlimit: max too large, truncated to 1048576 [ 620.039585][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1282'. [ 622.540954][T10235] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 622.917129][ T5817] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 623.094853][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 623.106686][ T5817] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 623.106706][ T5817] usb 1-1: config 0 has no interface number 0 [ 623.106740][ T5817] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 623.106757][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.152379][ T5817] usb 1-1: config 0 descriptor?? [ 623.296538][ T5817] viperboard 1-1:0.143: version 0.00 found at bus 001 address 033 [ 623.690677][ T5817] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 623.690704][ T5817] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 624.076300][ T5817] usb 1-1: USB disconnect, device number 33 [ 624.354022][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.354096][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.495977][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.667915][ T9994] veth0_vlan: entered promiscuous mode [ 625.727167][ T9994] veth1_vlan: entered promiscuous mode [ 625.865241][ T9994] veth0_macvtap: entered promiscuous mode [ 625.884495][ T9994] veth1_macvtap: entered promiscuous mode [ 625.938499][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.993417][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.090006][ T1383] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.090352][ T1383] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.090414][ T1383] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.679993][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.274850][ T1383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.274877][ T1383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.916633][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.916660][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.194895][T10323] Invalid ELF header magic: != ELF [ 633.027216][T10322] Invalid ELF header magic: != ELF [ 642.974353][T10346] CIFS: Attempting to mount //127.0.0.1/share [ 646.104670][ T5604] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 646.105016][ T5604] Bluetooth: hci4: Injecting HCI hardware error event [ 646.110876][ T60] Bluetooth: hci4: hardware error 0x00 [ 646.700152][T10346] CIFS: VFS: \\127.0.0.1 Error -512 sending data on socket to server [ 646.909122][T10348] ------------[ cut here ]------------ [ 646.909138][T10348] server->in_flight == 0 [ 646.909157][T10348] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x125b/0x2b90, CPU#0: cifsd/10348 [ 646.909296][T10348] Modules linked in: [ 646.909346][T10348] CPU: 0 UID: 0 PID: 10348 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.909377][T10348] Tainted: [L]=SOFTLOCKUP [ 646.909385][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.909407][T10348] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 646.909435][T10348] Code: de 83 e6 01 31 ff e8 04 17 c7 fe f6 c3 01 75 0a e8 4a 12 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 3b 12 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d a9 80 9a 0c 01 0f 85 9e 03 00 00 e8 20 12 c7 fe 49 [ 646.909454][T10348] RSP: 0018:ffffc9001e257458 EFLAGS: 00010246 [ 646.909472][T10348] RAX: ffffffff82febb1e RBX: 1ffff1100cb38489 RCX: ffff88802e781f00 [ 646.909490][T10348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.909503][T10348] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 646.909516][T10348] R10: 0000000000000000 R11: ffffffff82fee890 R12: ffff8880659c2448 [ 646.909531][T10348] R13: ffffc9001e257520 R14: ffff8880659c2000 R15: 0000000000000000 [ 646.909547][T10348] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 646.909566][T10348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.909580][T10348] CR2: 0000200000001000 CR3: 0000000011678000 CR4: 00000000003526f0 [ 646.909599][T10348] Call Trace: [ 646.909608][T10348] [ 646.909621][T10348] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 646.909656][T10348] cifs_compound_last_callback+0x181/0x2d0 [ 646.909730][T10348] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 646.909764][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.909793][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.909816][T10348] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 646.909852][T10348] cifs_abort_connection+0x949/0xf60 [ 646.909944][T10348] ? __pfx_cifs_abort_connection+0x10/0x10 [ 646.909978][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.910007][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.910035][T10348] _cifs_reconnect+0xbba/0x1670 [ 646.910068][T10348] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.910101][T10348] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.913430][T10348] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 646.913477][T10348] ? reacquire_held_locks+0x104/0x190 [ 646.913581][T10348] ? __pfx__cifs_reconnect+0x10/0x10 [ 646.913624][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.913653][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.913680][T10348] cifs_readv_from_socket+0x78b/0x8e0 [ 646.913734][T10348] cifs_demultiplex_thread+0x53d/0x3310 [ 646.913805][T10348] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 646.913846][T10348] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.913883][T10348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.913927][T10348] ? __lock_acquire+0x683/0x2ce0 [ 646.914001][T10348] ? __kthread_parkme+0x196/0x1f0 [ 646.914095][T10348] kthread+0x388/0x470 [ 646.914130][T10348] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 646.914161][T10348] ? __pfx_kthread+0x10/0x10 [ 646.914199][T10348] ret_from_fork+0x514/0xb70 [ 646.914614][T10348] ? __pfx_ret_from_fork+0x10/0x10 [ 646.914672][T10348] ? __switch_to+0xc89/0x1420 [ 646.914760][T10348] ? __pfx_kthread+0x10/0x10 [ 646.914799][T10348] ret_from_fork_asm+0x1a/0x30 [ 646.914864][T10348] [ 646.914877][T10348] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 646.914899][T10348] CPU: 0 UID: 0 PID: 10348 Comm: cifsd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 646.914931][T10348] Tainted: [L]=SOFTLOCKUP [ 646.914940][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 646.914954][T10348] Call Trace: [ 646.914963][T10348] [ 646.914973][T10348] vpanic+0x56c/0xa60 [ 646.914996][T10348] ? __pfx__printk+0x10/0x10 [ 646.915024][T10348] ? __pfx_vpanic+0x10/0x10 [ 646.915045][T10348] ? is_bpf_text_address+0x292/0x2b0 [ 646.915126][T10348] ? is_bpf_text_address+0x26/0x2b0 [ 646.915162][T10348] panic+0xc5/0xd0 [ 646.915184][T10348] ? __pfx_panic+0x10/0x10 [ 646.915216][T10348] ? ret_from_fork_asm+0x1a/0x30 [ 646.915246][T10348] __warn+0x315/0x4c0 [ 646.915268][T10348] ? smb2_add_credits+0x125b/0x2b90 [ 646.915300][T10348] ? smb2_add_credits+0x125b/0x2b90 [ 646.915373][T10348] __report_bug+0x276/0x570 [ 646.915445][T10348] ? smb2_add_credits+0x125b/0x2b90 [ 646.915477][T10348] ? __pfx___report_bug+0x10/0x10 [ 646.915513][T10348] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 646.915543][T10348] ? rt_spin_lock+0x1e0/0x400 [ 646.915569][T10348] ? rt_spin_lock+0x1e0/0x400 [ 646.915593][T10348] ? smb2_add_credits+0x125b/0x2b90 [ 646.915620][T10348] report_bug+0x16a/0x220 [ 646.915652][T10348] ? smb2_add_credits+0x125b/0x2b90 [ 646.915677][T10348] ? smb2_add_credits+0x125d/0x2b90 [ 646.915701][T10348] handle_bug+0x9c/0x200 [ 646.915737][T10348] exc_invalid_op+0x1a/0x50 [ 646.915771][T10348] asm_exc_invalid_op+0x1a/0x20 [ 646.915793][T10348] RIP: 0010:smb2_add_credits+0x125b/0x2b90 [ 646.915820][T10348] Code: de 83 e6 01 31 ff e8 04 17 c7 fe f6 c3 01 75 0a e8 4a 12 c7 fe e9 22 13 00 00 0f 1f 44 00 00 e8 3b 12 c7 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d a9 80 9a 0c 01 0f 85 9e 03 00 00 e8 20 12 c7 fe 49 [ 646.915841][T10348] RSP: 0018:ffffc9001e257458 EFLAGS: 00010246 [ 646.915861][T10348] RAX: ffffffff82febb1e RBX: 1ffff1100cb38489 RCX: ffff88802e781f00 [ 646.915880][T10348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.915894][T10348] RBP: 0000000000000200 R08: 0000000000000000 R09: 0000000000000000 [ 646.915908][T10348] R10: 0000000000000000 R11: ffffffff82fee890 R12: ffff8880659c2448 [ 646.915924][T10348] R13: ffffc9001e257520 R14: ffff8880659c2000 R15: 0000000000000000 [ 646.915946][T10348] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 646.915976][T10348] ? smb2_add_credits+0x3fe/0x2b90 [ 646.916008][T10348] ? smb2_add_credits+0x3fe/0x2b90 [ 646.916036][T10348] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 646.916069][T10348] cifs_compound_last_callback+0x181/0x2d0 [ 646.916108][T10348] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 646.916144][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.916174][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.916196][T10348] ? __pfx_cifs_compound_last_callback+0x10/0x10 [ 646.916231][T10348] cifs_abort_connection+0x949/0xf60 [ 646.916279][T10348] ? __pfx_cifs_abort_connection+0x10/0x10 [ 646.916323][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.916352][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.916380][T10348] _cifs_reconnect+0xbba/0x1670 [ 646.916413][T10348] ? lockdep_hardirqs_on+0x7a/0x110 [ 646.916545][T10348] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 646.916578][T10348] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 646.916606][T10348] ? reacquire_held_locks+0x104/0x190 [ 646.916652][T10348] ? __pfx__cifs_reconnect+0x10/0x10 [ 646.916688][T10348] ? rt_spin_unlock+0x157/0x200 [ 646.916717][T10348] ? rt_spin_unlock+0x163/0x200 [ 646.916744][T10348] cifs_readv_from_socket+0x78b/0x8e0 [ 646.916798][T10348] cifs_demultiplex_thread+0x53d/0x3310 [ 646.916868][T10348] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 646.916909][T10348] ? do_raw_spin_lock+0x12b/0x2f0 [ 646.916947][T10348] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 646.916991][T10348] ? __lock_acquire+0x683/0x2ce0 [ 646.917068][T10348] ? __kthread_parkme+0x196/0x1f0 [ 646.917105][T10348] kthread+0x388/0x470 [ 646.917141][T10348] ? __pfx_cifs_demultiplex_thread+0x10/0x10 [ 646.917171][T10348] ? __pfx_kthread+0x10/0x10 [ 646.917209][T10348] ret_from_fork+0x514/0xb70 [ 646.917293][T10348] ? __pfx_ret_from_fork+0x10/0x10 [ 646.917329][T10348] ? __switch_to+0xc89/0x1420 [ 646.917365][T10348] ? __pfx_kthread+0x10/0x10 [ 646.917403][T10348] ret_from_fork_asm+0x1a/0x30 [ 646.917446][T10348] [ 646.918084][T10348] Kernel Offset: disabled