last executing test programs: 15.738670594s ago: executing program 2 (id=4936): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) fsopen(0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 12.725505371s ago: executing program 2 (id=4943): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00p', @ANYRES32=r4, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 8.966606219s ago: executing program 4 (id=4947): openat$kvm(0xffffffffffffff9c, 0x0, 0x80400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 8.94002974s ago: executing program 0 (id=4948): chdir(&(0x7f0000000480)='./cgroup\x00') rt_sigqueueinfo(0x0, 0x9, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6c0a, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0xd8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x40000c16) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r3, 0x0, 0x27, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0xa}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x15}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 8.772199152s ago: executing program 2 (id=4951): ptrace$peekuser(0x3, 0x0, 0x101) socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x37) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) 8.580064543s ago: executing program 0 (id=4954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe8c, 0x86d, 0x1, 0x2, 0xd59f80, 0x19f2, 0x80000000, 0x8001, 0x3, 0x7, 0x2800, 0x9, 0x440, 0x1, 0xb, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) close(r2) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) 7.156671029s ago: executing program 4 (id=4962): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000540)={0xf0f024}) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000007c0)={0x2, @sdr={0x34343452, 0x4}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffbb, 0x2) preadv(r3, &(0x7f0000003640)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, 0x0, 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000100)={'veth0_to_batadv', 0x32, 0x30}, 0x12) io_uring_setup(0x6a4, &(0x7f0000000040)={0x0, 0x31d, 0xc000, 0x0, 0x20002f7}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x24, r5, 0x105, 0xfff7ffff, 0xa, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f0000000240)={0x0, 0x21, 0xea, {0xea, 0x2, "941e9cf02c30d6331091b2b750525f6f7b24710bea8406760841e0cfadadfc197ea95145a28f2d2a22c228f588452eda0b8b94c4ae830527728f050612a8de57f95595cbb0e32c08ee09b60a5eaf1e3e66aa7bd20d2bf8f68db74d49453fdaecde5ab8e8bde48466c872085ff0f943c0519ec260e9705f7aaf1b102e0264fb0c08fc1506f6a6141fe9364f52218036c34b402efc78af473779542cbe59a15ece2bc900b98ecc1c6a9232e98d93002faf685aba65bda06dd15c3bb5d5730aae1b2905f4fd66da16b6e7b8e72e7165d64068dcab86f3d25128fac5b9d8e801d77fed408b58461455b5"}}, &(0x7f00000003c0)={0x0, 0x3, 0x78, @string={0x78, 0x3, "4be9054766a8b11615a0c39d2b889d838d74786c334833137692264485556ae477280126631f770c2c6d37e730007ea1d43607978e12706f001e7b696a4a83dc2706bf8853b7b92d089d4724e52beb89d6d88ded75cb1c098518f2756fe2fa744d7b46c83fe27664126de080fedd0680d68b93834e1f"}}, &(0x7f0000000480)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x0, "fb86913c"}, @global=@item_012={0x2, 0x1, 0xa, "5f90"}, @local=@item_4={0x3, 0x2, 0x9, "cd98f9b3"}, @local=@item_4={0x3, 0x2, 0x2, "10069ddc"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x236}}}}, &(0x7f0000000700)={0x18, &(0x7f0000000540)={0x20, 0x8, 0x4b, "335ed3f6ac3c8cc91a475de7e3c1242088adf2c5da026f3ec94e48edb4a8b29746ab48c939846daa013123861946657488e89a415e1ecdade39351b1a383bf5fb3edd8b421c27acbe087a6"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000680)={0x20, 0x1, 0x32, "e3d7ccfcc9245562309a5cfe173b64a203ef9cb27feee0c7ee55d6f4e5ffd9adcc9f1250706351b65ada7428090371ab5e1b"}, 0x0}) r8 = epoll_create1(0x0) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) poll(&(0x7f0000000540)=[{r9, 0x2020}], 0x1, 0x5) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r9, &(0x7f0000004440)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000140)={0x80002016}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.961992194s ago: executing program 2 (id=4965): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="4015040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0x4, "598623e5"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="600e05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000540)={0x40, 0x3, 0x4, "0d5e8a0c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000ac0)={0x20, 0xb, 0x4, "3ce9323b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x20, 0x3, 0x4, "76b63e43"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.82888161s ago: executing program 0 (id=4967): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8b", 0x5b}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.266127034s ago: executing program 4 (id=4973): openat$kvm(0xffffffffffffff9c, 0x0, 0x80400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x36}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 5.387735738s ago: executing program 0 (id=4980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) listen(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xd, 0x0, 0xfeff, 0x4}}, @void, @val={0x5, 0x60, {0x1, 0x13, 0x1, "1245d9acebbe8d031c67fe81db0fe12aa749fe742a7c425c382977d890eab115538a700e903dd8a06af074a06eb680633c13852d9918a46783b0ba8fdcbc41b7458d29f70502dbebefcf51c630f927f90e25e6bd28f639a307c7eba799"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x9}}, @void}, 0xa8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 5.126075442s ago: executing program 4 (id=4983): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b936, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0xa, 0x0, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000800)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.426606122s ago: executing program 4 (id=4990): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) semget$private(0x0, 0x7, 0x191) socket$inet6(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) close(r0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002600)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x3, 0xeb4, 0x0, &(0x7f0000001600)=@buf_max_buf="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"}}, 0x0) 2.153122258s ago: executing program 0 (id=5010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d00", @ANYRES8=r1, @ANYBLOB="7ba9"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x1c6c, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x20000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.103372936s ago: executing program 2 (id=5012): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000007, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x5c, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000200)=""/229) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x16, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x4e21, 0x0, 0xf7fb, 0x2002, 0xa, 0x80, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {0x0, 0x401, 0x6, 0x9, 0x8, 0x0, 0x1, 0x20000000000000}, {0x1081, 0x9, 0x83}, 0x3ff, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x5, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x9c7629b7, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x1000009, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000005, 0x8, 0x3, 0x1000, 0x2, 0xc, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d80, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x3, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x3, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb1000000001"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040010) close(r5) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000180)="d5b2ab2ae900a67c67636823a5ee9e80e9e145048880e66b8e", 0x19}], 0x2) io_destroy(0x0) 1.283881704s ago: executing program 1 (id=5018): chdir(&(0x7f0000000480)='./cgroup\x00') rt_sigqueueinfo(0x0, 0x9, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6c0a, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0xd8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x40000c16) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x0) 1.162121439s ago: executing program 3 (id=5019): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x2, 0x1, 0x100) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.160773956s ago: executing program 4 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) listen(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) syz_usb_control_io$hid(r2, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) openat$vimc2(0xffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0xd, 0x0, 0xfeff, 0x4}}, @void, @val={0x5, 0x60, {0x1, 0x13, 0x1, "1245d9acebbe8d031c67fe81db0fe12aa749fe742a7c425c382977d890eab115538a700e903dd8a06af074a06eb680633c13852d9918a46783b0ba8fdcbc41b7458d29f70502dbebefcf51c630f927f90e25e6bd28f639a307c7eba799"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x9}}, @void}, 0xa8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20000000) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 1.019521956s ago: executing program 1 (id=5021): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x10) 958.078795ms ago: executing program 3 (id=5022): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fc00000000000000a251a4f45205f1af060004400e1f00000500070088000000060005404e1f00006cb713d5806515768d181c6e217d9fed191ae91c589a5a24029ac8433338c3d055c2603644d38bc8c0f211bc4107e79cae4baa4f36d00c7b746904ea56356934954fcb082273d4236e550a72ad5ce17c9ae84705a7ae0e3f682aeee0f64fe2a2bc4ebdf6a5fe7198982a4b1bd583cc2dfbae5d1627d09ab021c8e0c5d866c81e58fbd9ec5d2115e857ee8ae958421652946be7fb9ad571517995217b7973cd1ce171a4c85087b375ea78c020c99bfd92454ca896adc163586e410c75f5a5c7e797755330000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000043}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0xc}, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd0500", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [@fragment={0x3c, 0x0, 0xa, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 837.454146ms ago: executing program 1 (id=5023): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 675.177347ms ago: executing program 0 (id=5024): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x4, 0x1000, 0x1, &(0x7f0000000000)='/', 0x0, 0x0, 0x0}) 674.575298ms ago: executing program 3 (id=5025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0xfebf}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 596.082889ms ago: executing program 1 (id=5026): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 524.346337ms ago: executing program 2 (id=5027): rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="6e8229922d0a89221e0dba4a2b8b35cfd65154d5b183b1b6a23dd9ae6aeb9fec8396a797e85a9afbda82f7b82f0c0b38c24e5aefdbac921aba42e580c8c52606b293641777b440c355f37b47303a13d65d35b465db5fb7e117a980f090cd8066a75928c0d8897f5c23d219cdc2cadebe750fe5e124a38e77490ec2a523d0881509fe1d638fa2b3360ed332e5998c6d337f4698de6ceee56d314435384c1839d45c6aa591dc7b3b874307c3195966665e59dc4e5a4b92d11a400bee74abedb71a9a2e56cbbe14b53e11035e474ba653749bbfc3a8060f67b9d4a38c1ff2d7f030a41c460413d6b5304f60dc2a0bb6d7e732265c81bb1254f9ca463ed63d9015291390f0780a1b1e6f6fbb0286e88a9c9bdee21f9239e2f3861d25247c67d2c36751bb056c4d26899ddfdcf62773e3b9cb5fde12f60ccededf95cd8225386975042025ce3fa2f014b3265f7175ebdd858862cbc99efabe556f913004756b4ced67e40830e35219f60fc69472f5559b35d27059e9e103241c847f08fa0fe2676392b1531f6d290cc3038d05b406be152e19abc188c6eeff750a28dcd9cc4c5936d3f47651792bdd6befa45569dbda6a48b545e20cfcca1b7f0ee20fd4801076bf95cfee56f99e06cefddce40c84d0043396c73f21c88ee37b6a807b47c155b2458faed6f68ff72677b9060e08a6aa3440b3e3cfb87b3173c1d3b7ca0a9228be5b51ca8104e05b90a238ca587664c41dd175fddbcc0a7f528456ad25bd5b8084db528a7470a5ef89a78498558755aca1f6252a77cab91eb7ecbebf63e88b4acfdad9fb6b711da3d3b5e20a1650070d86b87052f3c157ab9b9f823bc20783d568c6f40a8b5df6a984e0747c4c7a2f01a11cc4b838dde16604d0994d9f42dde0f588b86918f0d13b9e20f60777c12a1ceda026e00c43fa1abb277d4672857ccce51be1ac0fd9007b2fc3cbfea4230a075f2f9309a8dc2dd9e3bf82982446f9a95ad1f00f6da3e5864a77a3e1fcdd974aef3534a5b4cf7a9c2d7e180c9e892f55581a3d95e5a2b16b41198a3db361e14dc2e6c4d546b5627edc94a9fe3c4655bee4099d1d886094f76dfb05db7ae363f98e1cb52e18db4f732cabe244b8cd22517c376ca354a68a1f3490955a0c6d0902d3f877114d1d76b457437b282474792c9dd29a42717bdd8fd3e83b1e9c8df34221b60dff57ec2c2ff7cd7f2949ed8e9722afcc00436bcc72c90b0e3e3d48f00e7203a5d6291e96d99c0afd9aa1c8e202c4086e7fbea52a08f0a2b07643c7b6c199c0e7977b0efd9f197db5c4899cf99391f1c04bae4be5ea2e6e4eddb7e87159516d7ead76aed3bed19e55fb021a8f57f4c7149c398b2e46d0f385170b199c95de2d424af84ea609a2cef6abdb0bc0ffae81e787c422f88760310b1dc0a548448471c6fe1eab91b1e04c41661780ad3a8496da3a26c0e13fe9cb38ff681720bf07994e7f29852baf767cdd14affbf4dab823eca385127a56422a87c7503c9d278512ffabc51c356e9a9e1111a1cdc3bb4763a74e08dc149d2c10498a31ca1fae6d50b56afaedad5151a69f05292fb6b19e73808e033847bdd12f97d7a0adb1ac6998aca7cd4eeb1ef620b934fb99c874e9c58d1a46cf0d208021a25221f67584f8ea33e54a77c3e1f4ae61135ecf11859c73bb520899b1d154fc88cc1490a97f4c0144b40d06f6818ab1a910e53bbed9204578090a6c57579e451ba176321b3073b97f4d791bf232166a402559e9fa911e97965a3ac989442998d66d6c0527ad9fd462f3cbbe3cb4aede777ea23c712d60651ed5d81e27c074ab4ae58a22870d6a189f8317549ac5fe6c645d4662c17b90f7a8bb220f0b76261a5ddaf24646e310ecc9a17300afa7d45a3626507f91f541c2a8e54e7787768724dcc472831b85a20c39ee036a5af032d60f85d0868903b80a6e3ecb8ee41b4c56811ae98d2844ce53a2996a53ac7469b4734fa5c2ff2de4d53c004e586d1faf8c7ac5a2049b9c6d61d6db37bd836564fc49c7c79b231257932ca461280797ca2fcdfda15111333baa73133f35c8a89ed326d1b9a328cc2e18028820d978c08d99efe759d64a30ddc51ca128a146f3629ce0bc695935e039e1383df2a423e2d4c7e084ec0fab9451062e12683868a3c2df5c5f0a6599b89f6020113fb1a96b23fcbb2f661396c39ade129483abdcf85fc9a74dff19797cd47eb4d80f459a6ab884836f77e2f8a0a8d341a10ac918ad451dc538e6b245f565f7748dc36b870fd8e078f6cb99c4166707c1c691e02868c2c98af44420bea01c7d475faee5aa44bc6ad5779df045909d078998c3f73d5b972a6a3115de67e168baf627ace4a9ef9ef07bc48c42e98540e381011d83c608bec09d1c9365c0e30014afdeb84b5bb075ad877a91e64991620dfd27920f79583e6935f72c5803afa6bc39774c87f29ad835abc67f6b4f9264dbc0cfd60bf86fe146cdeb80224b33f56bdf627136c2c71404ef01b3dfdd2ecb6cc783b5b586179136da3e54fe9447070d5837ab1a09bd9f4aac71f0b4e4e6bae4142d173633331ccd0da06b25edb60912e81d01db037b3d7a6a1d801b4aed3554cb2ef40178b1d4f9aadc58717316373f2d7c6a940e42461b8b323e0d5fe4c9c8eb3f4c002036ed505f1a333dc6257c85dd99e4b8a09c140daf1416cc2e28b8bb005eb448aaa8b020c81bd95e6cd68846c2aca7cf6d6475f4055c785cc278cd315c69275b8b7e4ad517cc431e382b48e8c9d078a5fa4e2d9a84109faeea62f03902b349123c8d86843357011bea029bd04bc9b5762ac5afc0831f84559cd1024856a3caf9fc5c4e4c8450897f983368a0dc0f27442ba7fb5b0c6ff01cbfb895cc46161ff59b26c45ecbb79dd7f135c1f81129abbd4d50475f347c906631d0f17a21986c74c3a790c61b6514188013ffbc6c340790f6c0cc0cb46777b555ca7b25b410be47cf65181e37d476b5fc83cf6e91bed217e44d78b57e96ec0305c51c655195b5d337d022a37b9597d8c6ff45ead92bf1f56b4332a87fc62ec90061048f196145c0b0ff65bb5aaf2e904802a76d940fa44eb3632d33903ffed1fe14a9cae7cd75bf7cb3813a2deb0fbd51276f42bf20d5ae6a635fc2cce26508349f3309ae5ab0a10ebd18b88ec9315e4e07df3799b198f357f9f85cfcd14846ac880925680fc0f3d1c2f01af199fdec36058cf96f028774e89b4cca1010927304d917e9a2f993ee4de96799789fd4b000bfcc44abfe627aa511d44bd95d9ee7685442bf1fa33824168bb97d5661d49315d78d2bf16d1f5f0e9bdc3b8c9bd164abe5efc08c433fffffd8069af73589c2e94b365b872546810fe46a071febb354e3c8f097f14774582f768453f4d394814b0dd2759dfdb0be90d71ace156b4a7cbe81e35917f161242988104049ebeb1b800974ecac1a3c483cee79cfd9dacb797d7d56739b89111d00885dd710e9b171e83653d64651618402c3ce0c6c6cf96ea21aef5b820b20f5e458b4bedcff202c2db02411a39213503d22cbc7cda5955f8707c3e0964dfa439c071ac078d530b41d34ceccd10fde2e5746b7f57669f5bf640437e862975d13f232706496542eca9f4cc1e0b91b9f8d3c7a83eba9184dbf13f0f8cef8f5119f072c9508a2da7888e903258e88d41963eac54b3d9cdbb671651820e4cebb661bbb5de8618b161a69971385cbcfb4886aa6fb34130ae752497a7f177d72a71ae2a7d34236bebcc2a489a5c001c09c05c1a877d5b8d08439c6523d87f30d09717366209d36342a83cb90be3e508d1f8258e4f694c4a8c0a140e6fc2f29fd6b620cad540cb1a44f90c8fd4dece8316ea0f66a783ddc6efcecb636049ca56cfb249854246649a20444bf6ee705c98673008c38170133840ac9208d323f3e72e853c350a2de2577fb35de612e7457ef3a9bada7c93aaaff76a72fc9c7feb59947cf5be1d881e5e0852746e7d446f6083846c87751f43c47fb5c626ad3566f3b6abcad4b543212b5da769cc6f228927f90e86899008891d9eb212410f2298d9e49c8ea26dadf3dd69ac7ed77f11290e656304fb60827f8721e8a1e42aefc27c562a2d5540d94acb2df98520846c3c37cd522c0f37c1e1c935da42bf8cb65dfa4f9c01b4c62f42c1aa4174f9de06878612d69800f435c2ad1058e2fb07f7eca93cd1e8230eb908cfa32838b8c1c57b74f44ec71f0175c2c9c57a37390ede4dd30a6c6d06cefcc32af037e38c3097a39a31dbab5706ff37bb4ec81034052411dbbe7972a1449584b1f6f264a2a021eeb59af308fb2ca72b7004275b35cb8a210e001579c3604a14a93b0e78f651d9e4507faccd11eafe5ee51d9f4ca61d72fc802292d2b202b10d13c67278a138ee4f9024ebbf9d0161cffb74a39fda389d2bedf79d38570b3c001670a9f3f59dfbefb9d7c771f31ddd056a7cc5a2cf1aeda742744692381276cbd4ca0e9296b048fb64264f0de4fd8f93ec4009eab430115bcb88e742aec8984c1f60ce58d2f1d59eeb4bd5dabe198a09107d1167c68bdc43734c84924ddf7a4e841ec6f2542354a4d7f1b38c57d64fe9b734c7bfd0aa399c95e6a269445324e1be95ffb2d1950eea47a35676f4842a79cb6e8c9d1754bfd8843149020d50da627a538b812c17fa2ce3c3d407c20a90e000cc1b00c46592b1c57bcbbdee4bf7b1607900a720048a0d47e81f7c21574e00f4780671e9401c20b412c9320f685f987f2969963b166a1b63c02b56643215f94dc0688b5bd52cd57e256110b9cae3c93fbed299b2c18e1c2f97b277b4eaa5ec0770e396906589558426dd858f8b2c3b1dcce12410038a5e2ac6d0ce1757663b4b9a90353fdc173ca20ff113c3382ebae193a9c659d6b93954ca1f60e2a751b5eac1731f67f58abf7377ca88385c0d5762ccebe8d6e7a4dab8d6417002d05ef1606cb0ab2d43e5d0fb021f18cd21210b17a0c9e8444ce67159f802a1a10634ee1788d8bf4f87e30939e3b50b4d23c6ec241ce3767b1dec35eb5ac959f633238782d346768913f49369c5ac07068b13508328f4c3c299e107a60", 0xe00}], 0x1}], 0x1, 0x20000800) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20004080) mount$cgroup(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240), 0x8010, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="3021830b", @ANYRES16=0x0, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900010000005100000008009f000600"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000000000000001000"]}) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffff9d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 435.382236ms ago: executing program 3 (id=5028): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$pppoe(0x18, 0x1, 0x0) io_setup(0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) syz_emit_ethernet(0x38a, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x354, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f0"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b83"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) socket(0x2, 0xa, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x293, 0x0, 0xfffffffffffffffb}]}) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r3, 0x0, 0x0, 0x4) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 361.784489ms ago: executing program 1 (id=5029): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) fsopen(0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) 229.048131ms ago: executing program 3 (id=5030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66c", 0x4}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) 111.403741ms ago: executing program 1 (id=5031): chdir(&(0x7f0000000480)='./cgroup\x00') rt_sigqueueinfo(0x0, 0x9, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6c0a, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0xd8000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) close(r0) inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0x40000c16) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 0s ago: executing program 3 (id=5032): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x2, 0x1, 0x100) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000400)=[r2], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) kernel console output (not intermixed with test programs): 550][ T5617] usb 5-1: Using ep0 maxpacket: 16 [ 914.521458][ T5617] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.521510][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.521537][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 914.521573][ T5617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 914.521596][ T5617] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.521634][ T5617] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 914.521656][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.612446][ T5617] usb 5-1: config 0 descriptor?? [ 914.709260][ T5617] rc_core: IR keymap rc-hauppauge not found [ 914.709279][ T5617] Registered IR keymap rc-empty [ 914.709721][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.736208][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.749363][ T5617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 914.753927][ T5617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input151 [ 914.784008][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.808870][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.838633][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.858689][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.878585][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.898715][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.928828][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.984209][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 914.998672][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 915.018656][ T5617] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 915.041365][ T5617] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 915.041389][ T5617] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 915.047220][ T5617] usb 5-1: USB disconnect, device number 110 [ 915.948338][ T5820] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 916.100764][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 916.100797][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 916.100840][ T5820] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 916.100862][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.105059][ T5820] usb 4-1: config 0 descriptor?? [ 916.523603][ T5820] usbhid 4-1:0.0: can't add hid device: -71 [ 916.523721][ T5820] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 916.532872][ T5820] usb 4-1: USB disconnect, device number 24 [ 916.704516][T16862] binder: 16861:16862 ioctl c0306201 0 returned -14 [ 916.705328][T16862] binder: 16861:16862 ioctl c0306201 0 returned -14 [ 916.758379][T16865] binder: 16861:16865 ioctl 80105873 0 returned -22 [ 917.608354][ T5617] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 917.749246][ T5617] usb 5-1: device descriptor read/64, error -71 [ 917.828359][ T5820] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 917.979799][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 917.983847][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.983878][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 917.983893][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 917.983906][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 917.983919][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.983942][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 917.983953][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.998043][ T5820] usb 4-1: config 0 descriptor?? [ 918.059767][ T5617] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 918.129551][ T5820] rc_core: IR keymap rc-hauppauge not found [ 918.129565][ T5820] Registered IR keymap rc-empty [ 918.130437][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.150606][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.169284][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 918.173678][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input152 [ 918.188611][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.208853][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.218362][ T5617] usb 5-1: device descriptor read/64, error -71 [ 918.229026][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.250334][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.269221][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.313033][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.334424][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.341652][ T5617] usb usb5-port1: attempt power cycle [ 918.348699][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.368719][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.388730][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 918.412751][ T5820] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 918.412775][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 918.427681][ T5820] usb 4-1: USB disconnect, device number 25 [ 918.708556][ T5617] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 918.730217][ T5617] usb 5-1: device descriptor read/8, error -71 [ 919.008661][ T5617] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 919.029421][ T5617] usb 5-1: device descriptor read/8, error -71 [ 919.138604][ T5617] usb usb5-port1: unable to enumerate USB device [ 919.538127][T16919] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4073'. [ 920.218389][ T5820] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 920.368289][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 920.371445][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.371558][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.371584][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 920.371609][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 920.371633][ T5820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.371671][ T5820] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 920.371692][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.381470][ T5820] usb 4-1: config 0 descriptor?? [ 920.530275][ T5820] rc_core: IR keymap rc-hauppauge not found [ 920.530295][ T5820] Registered IR keymap rc-empty [ 920.531128][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.549530][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.569526][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 920.576937][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input153 [ 920.612331][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.630216][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.650574][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.668722][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.690411][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.708678][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.728657][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.750674][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.768654][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.788896][ T5820] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 920.817484][ T5820] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 920.817521][ T5820] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 920.837624][ T5820] usb 4-1: USB disconnect, device number 26 [ 920.841391][T16953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4087'. [ 920.849262][T16953] tipc: Started in network mode [ 920.849287][T16953] tipc: Node identity ac14140f, cluster identity 4711 [ 920.989150][T16953] tipc: Enabled bearer , priority 10 [ 921.286175][T16963] binder_alloc: 16962: binder_alloc_buf, no vma [ 921.624168][T16974] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 921.624190][T16974] netlink: 732 bytes leftover after parsing attributes in process `syz.4.4097'. [ 921.624206][T16974] netlink: 'syz.4.4097': attribute type 1 has an invalid length. [ 922.042378][ T9] tipc: Node number set to 2886997007 [ 922.388342][ T821] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 922.551434][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.551466][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.551483][ T821] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.551506][ T821] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.551518][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.555958][ T821] usb 5-1: config 0 descriptor?? [ 923.170014][ T821] usbhid 5-1:0.0: can't add hid device: -71 [ 923.170126][ T821] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 923.178933][ T821] usb 5-1: USB disconnect, device number 115 [ 923.343124][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 923.394715][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 923.396092][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 923.424979][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 923.442961][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 924.918388][ T5820] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 924.955528][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.957228][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.957453][T17012] bridge_slave_0: entered allmulticast mode [ 924.961892][T17012] bridge_slave_0: entered promiscuous mode [ 924.964969][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.965150][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.965328][T17012] bridge_slave_1: entered allmulticast mode [ 924.967700][T17012] bridge_slave_1: entered promiscuous mode [ 925.048279][ T5820] usb 5-1: device descriptor read/64, error -71 [ 925.083884][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.086807][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.122426][T17012] team0: Port device team_slave_0 added [ 925.124477][T17012] team0: Port device team_slave_1 added [ 925.153466][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.153478][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.153493][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.154775][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.154785][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.154799][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.226156][T17012] hsr_slave_0: entered promiscuous mode [ 925.227439][T17012] hsr_slave_1: entered promiscuous mode [ 925.228620][T17012] debugfs: 'hsr0' already exists in 'hsr' [ 925.228645][T17012] Cannot create hsr debugfs directory [ 925.298345][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 925.308378][ T5820] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 925.441894][ T5820] usb 5-1: device descriptor read/64, error -71 [ 925.464052][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.464084][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.464104][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.464143][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.464165][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.508494][ T5616] Bluetooth: hci3: command tx timeout [ 925.543653][ T9] usb 3-1: config 0 descriptor?? [ 925.553664][ T5820] usb usb5-port1: attempt power cycle [ 925.758016][T17012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 925.888318][ T5820] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 925.917849][ T5820] usb 5-1: device descriptor read/8, error -71 [ 926.148361][ T5820] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 926.171813][ T5820] usb 5-1: device descriptor read/8, error -71 [ 926.176494][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 926.176611][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 926.186764][ T9] usb 3-1: USB disconnect, device number 101 [ 926.280127][ T5820] usb usb5-port1: unable to enumerate USB device [ 926.300288][T17012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.607305][T17012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 926.847087][T17012] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 927.423932][T17012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 927.462824][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 927.464226][T17012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 927.508131][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.526954][T17012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 927.552806][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.553860][T17012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 927.588364][ T5616] Bluetooth: hci3: command tx timeout [ 927.607324][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 927.756387][T17012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.779091][T17012] 8021q: adding VLAN 0 to HW filter on device team0 [ 927.831339][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.831538][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.862283][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.862372][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 927.964840][T17105] binder_alloc: 17104: binder_alloc_buf, no vma [ 928.530708][T17012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.592458][T17012] veth0_vlan: entered promiscuous mode [ 928.602753][T17012] veth1_vlan: entered promiscuous mode [ 928.633689][T17012] veth0_macvtap: entered promiscuous mode [ 928.644758][T17012] veth1_macvtap: entered promiscuous mode [ 928.661884][T17012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.706795][T17012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.765244][ T124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.765732][ T124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.765770][ T124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.765804][ T124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.446402][ T124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.446422][ T124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.673165][ T5616] Bluetooth: hci3: command tx timeout [ 929.710944][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.710964][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.828795][T17140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 929.863802][T17140] netlink: 'syz.2.4161': attribute type 12 has an invalid length. [ 930.226236][T17149] binder_alloc: 17143: binder_alloc_buf, no vma [ 931.430791][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.748433][ T5616] Bluetooth: hci3: command tx timeout [ 931.958466][T12600] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 932.125920][T12600] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 932.125952][T12600] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 932.125978][T12600] usb 4-1: config 0 interface 0 has no altsetting 0 [ 932.159588][T12600] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 932.159614][T12600] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 932.159633][T12600] usb 4-1: Product: syz [ 932.159645][T12600] usb 4-1: Manufacturer: syz [ 932.159658][T12600] usb 4-1: SerialNumber: syz [ 932.202352][T12600] usb 4-1: config 0 descriptor?? [ 932.203080][T17171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 932.224315][T12600] usb 4-1: selecting invalid altsetting 0 [ 932.462526][T12600] usb 4-1: USB disconnect, device number 27 [ 933.628346][ T5820] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 933.668940][T12600] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 933.780126][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.780154][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.780165][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.780188][ T5820] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.780200][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.784439][ T5820] usb 5-1: config 0 descriptor?? [ 933.838259][T12600] usb 3-1: Using ep0 maxpacket: 16 [ 933.851680][T12600] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.851731][T12600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 933.851757][T12600] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 933.851777][T12600] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 933.851797][T12600] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.852953][T12600] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 933.852979][T12600] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 933.852997][T12600] usb 3-1: Manufacturer: syz [ 933.868497][T12600] usb 3-1: config 0 descriptor?? [ 934.148399][T12600] rc_core: IR keymap rc-hauppauge not found [ 934.148418][T12600] Registered IR keymap rc-empty [ 934.148575][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.178541][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.199737][T12600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 934.205803][T12600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input154 [ 934.235131][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.248614][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.268374][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.288419][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.308452][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.328392][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.348513][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.378624][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.408402][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.428394][T12600] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 934.434743][ T5820] usbhid 5-1:0.0: can't add hid device: -71 [ 934.434864][ T5820] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 934.439865][ T821] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 934.441162][ T5820] usb 5-1: USB disconnect, device number 120 [ 934.484279][T12600] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 934.484310][T12600] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 934.527563][ T1008] usb 3-1: USB disconnect, device number 102 [ 934.631762][ T821] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 934.631794][ T821] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 934.631819][ T821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 934.634375][ T821] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 934.634391][ T821] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 934.634402][ T821] usb 4-1: Product: syz [ 934.634409][ T821] usb 4-1: Manufacturer: syz [ 934.634416][ T821] usb 4-1: SerialNumber: syz [ 934.705133][ T821] usb 4-1: config 0 descriptor?? [ 934.708977][T17220] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 934.729431][ T821] usb 4-1: selecting invalid altsetting 0 [ 934.961279][ T1008] usb 4-1: USB disconnect, device number 28 [ 936.596809][T17258] netlink: 'syz.3.4211': attribute type 4 has an invalid length. [ 936.968378][ T1008] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 937.126888][ T1008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 937.126922][ T1008] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 937.126961][ T1008] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 937.126982][ T1008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.135650][ T1008] usb 3-1: config 0 descriptor?? [ 937.468891][T17280] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4219'. [ 938.135807][ T1008] usbhid 3-1:0.0: can't add hid device: -71 [ 938.135898][ T1008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 938.146501][ T1008] usb 3-1: USB disconnect, device number 103 [ 938.598386][ T5617] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 938.758501][ T5617] usb 4-1: Using ep0 maxpacket: 16 [ 938.767082][ T5617] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 938.767133][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.767158][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 938.767182][ T5617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 938.767205][ T5617] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.767243][ T5617] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 938.767258][ T5617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.851252][ T5617] usb 4-1: config 0 descriptor?? [ 938.990845][ T5617] rc_core: IR keymap rc-hauppauge not found [ 938.990872][ T5617] Registered IR keymap rc-empty [ 938.991289][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.015977][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.031832][ T5617] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 939.034847][ T5617] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input155 [ 939.076580][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.092543][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.109110][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.128529][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.148640][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.178704][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.199131][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.218612][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.238684][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.258621][ T5617] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 939.286959][ T5617] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 939.286982][ T5617] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 939.291668][T17299] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4229'. [ 939.331331][ T5617] usb 4-1: USB disconnect, device number 29 [ 939.977011][T17335] binder: 17334:17335 ioctl c0306201 0 returned -14 [ 940.016188][T17338] fuse: Unknown parameter 'fd0x0000000000000003' [ 940.268334][ T5820] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 940.433889][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.433920][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.433941][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.433980][ T5820] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.434002][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.444477][ T5820] usb 5-1: config 0 descriptor?? [ 940.718324][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 940.868566][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 940.872120][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.872167][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.872517][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 940.872529][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 940.872541][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.873991][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 940.874007][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 940.874017][ T9] usb 4-1: Manufacturer: syz [ 940.900404][ T9] usb 4-1: config 0 descriptor?? [ 941.053489][ T5820] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 941.140035][ T5820] usb 5-1: USB disconnect, device number 121 [ 941.218323][ T9] rc_core: IR keymap rc-hauppauge not found [ 941.218343][ T9] Registered IR keymap rc-empty [ 941.218500][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.238548][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.262926][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 941.265191][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input156 [ 941.309023][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.329757][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.352319][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.376356][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.392582][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.409018][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.428475][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.449721][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.458414][ T1008] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 941.468472][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.488426][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 941.514679][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 941.514704][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 941.636373][ T1008] usb 3-1: Using ep0 maxpacket: 32 [ 941.645149][ T9] usb 4-1: USB disconnect, device number 30 [ 941.654608][ T1008] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 941.654635][ T1008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.654653][ T1008] usb 3-1: config 0 has no interface number 0 [ 941.654693][ T1008] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.701285][ T1008] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 941.701313][ T1008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.701332][ T1008] usb 3-1: Product: syz [ 941.701345][ T1008] usb 3-1: Manufacturer: syz [ 941.701359][ T1008] usb 3-1: SerialNumber: syz [ 941.736027][ T1008] usb 3-1: config 0 descriptor?? [ 941.752272][ T1008] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 941.752516][ T1008] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 942.347224][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 943.158409][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 943.310262][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.310295][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.310316][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.310354][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.310367][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.315437][ T9] usb 4-1: config 0 descriptor?? [ 943.388357][ T1008] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 943.538344][ T1008] usb 5-1: Using ep0 maxpacket: 16 [ 943.553458][ T1008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.553511][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.553591][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 943.553610][ T1008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 943.553630][ T1008] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.557572][ T1008] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 943.557598][ T1008] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 943.557617][ T1008] usb 5-1: Manufacturer: syz [ 943.635012][ T1008] usb 5-1: config 0 descriptor?? [ 943.918554][ T1008] rc_core: IR keymap rc-hauppauge not found [ 943.918575][ T1008] Registered IR keymap rc-empty [ 943.918989][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 943.936836][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 943.936952][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 943.939182][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 943.954644][ T9] usb 4-1: USB disconnect, device number 31 [ 943.963862][ T1008] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 943.975356][ T1008] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input157 [ 943.991563][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.009216][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.028946][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.048598][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.070222][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.088453][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.109338][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.128813][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.150036][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.169160][ T1008] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 944.197474][ T1008] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 944.197544][ T1008] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.316040][T12600] usb 5-1: USB disconnect, device number 122 [ 944.346243][ T1008] usb 3-1: USB disconnect, device number 104 [ 944.853561][T17451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4291'. [ 944.859657][T17443] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4291'. [ 945.072896][T17457] fuse: Bad value for 'fd' [ 945.492581][ T5616] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 947.698588][ T821] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 947.871141][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.871173][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.871203][ T821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 947.871243][ T821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 947.871265][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.930685][ T821] usb 3-1: config 0 descriptor?? [ 948.368710][ T821] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 948.552077][ T821] usb 3-1: USB disconnect, device number 105 [ 949.324960][ T3752] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.325125][ T3752] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.327814][ T3752] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.327871][ T3752] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.177927][T17588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 950.738375][ T1008] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 950.893860][ T1008] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 950.893893][ T1008] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 950.893930][ T1008] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 950.893951][ T1008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.931699][T17602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 950.943715][ T1008] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 951.101833][T17612] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4364'. [ 951.327528][ T1008] usb 5-1: USB disconnect, device number 123 [ 952.202306][T17645] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4377'. [ 952.728392][ T821] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 952.888303][ T821] usb 5-1: Using ep0 maxpacket: 16 [ 952.892472][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 952.894515][ T821] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 952.894532][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.894542][ T821] usb 5-1: Product: syz [ 952.894549][ T821] usb 5-1: Manufacturer: syz [ 952.894556][ T821] usb 5-1: SerialNumber: syz [ 952.978440][ T821] usb 5-1: config 0 descriptor?? [ 953.001310][ T821] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 953.001340][ T821] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 953.620303][ T821] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 954.049627][ T821] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 954.049659][ T821] em28xx 5-1:0.0: board has no eeprom [ 954.424518][T16119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.427728][T16119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.429983][ T821] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 954.430008][ T821] em28xx 5-1:0.0: dvb set to bulk mode. [ 954.432583][ T5734] em28xx 5-1:0.0: Binding DVB extension [ 954.485826][T16119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.523009][T16119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.567023][T16119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 954.847034][T12600] usb 5-1: USB disconnect, device number 124 [ 954.849122][T12600] em28xx 5-1:0.0: Disconnecting em28xx [ 954.933061][ T5734] em28xx 5-1:0.0: Registering input extension [ 954.933299][T12600] em28xx 5-1:0.0: Closing input extension [ 955.212960][T12600] em28xx 5-1:0.0: Freeing device [ 956.328361][T17705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4401'. [ 956.807977][ T5616] Bluetooth: hci4: command tx timeout [ 957.347398][ T124] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.358309][ T124] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.361499][ T124] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.361542][ T124] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.033237][T17741] binder: 17740:17741 ioctl c0306201 0 returned -14 [ 958.094025][T17746] binder: 17740:17746 ioctl c0306201 0 returned -14 [ 958.159087][T17748] binder: 17740:17748 ioctl 80105873 0 returned -22 [ 958.187490][T17680] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.188135][T17680] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.204511][T17680] bridge_slave_0: entered allmulticast mode [ 958.207373][T17680] bridge_slave_0: entered promiscuous mode [ 958.227862][T17680] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.228083][T17680] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.243342][T17680] bridge_slave_1: entered allmulticast mode [ 958.246954][T17680] bridge_slave_1: entered promiscuous mode [ 958.287552][T17680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.302068][T17680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.352784][T17680] team0: Port device team_slave_0 added [ 958.356132][T17680] team0: Port device team_slave_1 added [ 958.404482][T17680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.404506][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.404520][T17680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.406039][T17680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.406053][T17680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.406075][T17680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.502881][T17680] hsr_slave_0: entered promiscuous mode [ 958.503881][T17680] hsr_slave_1: entered promiscuous mode [ 958.504437][T17680] debugfs: 'hsr0' already exists in 'hsr' [ 958.504454][T17680] Cannot create hsr debugfs directory [ 958.869521][ T5616] Bluetooth: hci4: command tx timeout [ 959.087676][T17764] netlink: 'syz.2.4419': attribute type 1 has an invalid length. [ 959.087690][T17764] netlink: 732 bytes leftover after parsing attributes in process `syz.2.4419'. [ 959.087699][T17764] netlink: 'syz.2.4419': attribute type 1 has an invalid length. [ 959.379892][T17680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.379923][T17680] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 959.748465][ T5734] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 959.939541][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 959.949295][ T5734] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 959.949430][ T5734] usb 4-1: config 0 has no interface number 0 [ 959.949474][ T5734] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.949494][ T5734] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.951801][ T5734] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 959.951828][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.951847][ T5734] usb 4-1: Product: syz [ 959.951860][ T5734] usb 4-1: Manufacturer: syz [ 959.951888][ T5734] usb 4-1: SerialNumber: syz [ 960.035778][ T5734] usb 4-1: config 0 descriptor?? [ 960.046126][ T5734] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 960.046511][ T5734] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 960.060321][T17680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.060356][T17680] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 960.357763][T17786] adf_ctl_ioctl: 15 callbacks suppressed [ 960.357781][T17786] QAT: Invalid ioctl 1075883590 [ 960.357878][T17786] QAT: Invalid ioctl 1075883590 [ 960.357962][T17786] QAT: Invalid ioctl 1075883590 [ 960.358042][T17786] QAT: Invalid ioctl 1075883590 [ 960.358127][T17786] QAT: Invalid ioctl 1075883590 [ 960.390792][T17786] QAT: Invalid ioctl 1075883590 [ 960.390900][T17786] QAT: Invalid ioctl 1075883590 [ 960.390978][T17786] QAT: Invalid ioctl 1075883590 [ 960.391079][T17786] QAT: Invalid ioctl 1075883590 [ 960.391159][T17786] QAT: Invalid ioctl 1075883590 [ 960.620127][T17680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.620162][T17680] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 960.738368][ T821] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 960.928399][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 960.930463][ T821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 960.933444][ T821] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 960.933472][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.933490][ T821] usb 3-1: Product: syz [ 960.933503][ T821] usb 3-1: Manufacturer: syz [ 960.933516][ T821] usb 3-1: SerialNumber: syz [ 960.948317][ T5616] Bluetooth: hci4: command tx timeout [ 960.953641][ T821] usb 3-1: config 0 descriptor?? [ 960.989844][ T821] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 960.989876][ T821] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 961.240865][T17680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.240904][T17680] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 961.593505][ T821] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 961.934640][T17680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 961.972236][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 961.977675][T17680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 962.007510][ T821] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 962.007530][ T821] em28xx 3-1:0.0: board has no eeprom [ 962.032842][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.034341][T17680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 962.076637][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.093310][T17680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 962.181931][T17680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.283824][T17807] netlink: 'syz.4.4436': attribute type 1 has an invalid length. [ 962.378339][ T821] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 962.378364][ T821] em28xx 3-1:0.0: dvb set to bulk mode. [ 962.406613][ T5734] em28xx 3-1:0.0: Binding DVB extension [ 962.463612][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.500380][ T9] usb 4-1: USB disconnect, device number 32 [ 962.601181][T17680] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.622711][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.622854][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.704960][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.705204][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.741294][T17820] binder: 17819:17820 ioctl c0306201 0 returned -14 [ 962.797740][T17823] binder: 17819:17823 ioctl c0306201 0 returned -14 [ 962.876558][T17826] binder: 17819:17826 ioctl 80105873 0 returned -22 [ 963.028911][ T5616] Bluetooth: hci4: command tx timeout [ 963.612757][T17790] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 963.615422][ T1008] usb 3-1: USB disconnect, device number 106 [ 963.639721][ T1008] em28xx 3-1:0.0: Disconnecting em28xx [ 963.727832][ T5734] em28xx 3-1:0.0: Registering input extension [ 963.732582][ T1008] em28xx 3-1:0.0: Closing input extension [ 963.788639][T17680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.895332][ T1008] em28xx 3-1:0.0: Freeing device [ 963.931290][T17680] veth0_vlan: entered promiscuous mode [ 963.964958][T17680] veth1_vlan: entered promiscuous mode [ 964.025283][T17680] veth0_macvtap: entered promiscuous mode [ 964.040417][T17680] veth1_macvtap: entered promiscuous mode [ 964.072309][T17680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.112592][T17680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.125980][ T212] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.126207][ T212] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.126240][ T212] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.126271][ T212] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.762927][ T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.762948][ T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.916830][ T212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.916849][ T212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.208446][ T5820] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 965.264910][T17864] netlink: 'syz.3.4449': attribute type 1 has an invalid length. [ 965.358392][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 965.360940][ T5820] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 965.360956][ T5820] usb 3-1: config 0 has no interface number 0 [ 965.360983][ T5820] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 965.361002][ T5820] usb 3-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 965.363259][ T5820] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 965.363275][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.363285][ T5820] usb 3-1: Product: syz [ 965.363292][ T5820] usb 3-1: Manufacturer: syz [ 965.363300][ T5820] usb 3-1: SerialNumber: syz [ 965.366619][ T5820] usb 3-1: config 0 descriptor?? [ 965.373570][ T5820] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 965.373909][ T5820] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 966.268387][ T5820] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 966.384438][T17893] netlink: 'syz.4.4461': attribute type 4 has an invalid length. [ 966.418529][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 966.421649][ T5820] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 966.421688][ T5820] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.421726][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.421743][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.421755][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 966.421767][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 966.421789][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 966.421803][ T5820] usb 4-1: config 168 interface 0 has no altsetting 0 [ 966.422861][ T5820] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 966.422895][ T5820] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.422923][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.422939][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.422952][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 966.422965][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 966.422980][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 966.422993][ T5820] usb 4-1: config 168 interface 0 has no altsetting 0 [ 966.424070][ T5820] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 966.424104][ T5820] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 966.424149][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 966.424163][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.424176][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 966.424189][ T5820] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 966.424202][ T5820] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 966.424215][ T5820] usb 4-1: config 168 interface 0 has no altsetting 0 [ 966.427199][ T5820] usb 4-1: string descriptor 0 read error: -22 [ 966.427328][ T5820] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 966.427340][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.451271][ T5820] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 966.695323][ T9] usb 4-1: USB disconnect, device number 33 [ 967.860291][ T821] usb 3-1: USB disconnect, device number 107 [ 967.982305][T17923] netlink: 'syz.0.4472': attribute type 4 has an invalid length. [ 968.059284][T17925] netlink: 'syz.2.4473': attribute type 4 has an invalid length. [ 968.297271][T17933] binder: 17932:17933 ioctl c0306201 0 returned -14 [ 968.350664][T17936] binder: 17932:17936 ioctl c0306201 0 returned -14 [ 968.403492][T17940] binder: 17932:17940 ioctl 80105873 0 returned -22 [ 969.098463][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 969.198417][ T821] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 969.248439][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 969.250250][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 969.250289][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 969.250318][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 969.250332][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 969.250345][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 969.250358][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 969.250371][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 969.250384][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 969.251365][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 969.251399][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 969.251438][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 969.251452][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 969.251464][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 969.251477][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 969.251490][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 969.251504][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 969.252492][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 969.252525][ T9] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 969.252557][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 969.252571][ T9] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 969.252584][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 969.252597][ T9] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 969.252610][ T9] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 969.252629][ T9] usb 4-1: config 168 interface 0 has no altsetting 0 [ 969.256381][ T9] usb 4-1: string descriptor 0 read error: -22 [ 969.256520][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 969.256532][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.337879][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 969.394269][ T821] usb 5-1: device descriptor read/64, error -71 [ 969.540321][T17960] trusted_key: encrypted_key: insufficient parameters specified [ 969.561324][ T9969] usb 4-1: USB disconnect, device number 34 [ 969.708365][ T821] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 969.838390][ T821] usb 5-1: device descriptor read/64, error -71 [ 969.949826][ T821] usb usb5-port1: attempt power cycle [ 969.962066][T17962] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4488'. [ 970.108421][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 970.258368][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 970.260888][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 970.260941][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 970.260967][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 970.260987][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 970.261008][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 970.263069][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 970.263097][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 970.263115][ T9] usb 1-1: Manufacturer: syz [ 970.270574][ T9] usb 1-1: config 0 descriptor?? [ 970.342350][T17973] binder: 17972:17973 ioctl c0306201 0 returned -14 [ 970.353164][ T821] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 970.368970][ T821] usb 5-1: device descriptor read/8, error -71 [ 970.400448][T17974] binder: 17972:17974 ioctl c0306201 0 returned -14 [ 970.457827][T17977] binder: 17972:17977 ioctl 80105873 0 returned -22 [ 970.568456][ T9] rc_core: IR keymap rc-hauppauge not found [ 970.568476][ T9] Registered IR keymap rc-empty [ 970.568618][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.588387][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.615516][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 970.620443][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input160 [ 970.624970][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.638875][ T821] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 970.640192][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.659120][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.674173][ T821] usb 5-1: device descriptor read/8, error -71 [ 970.678908][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.698509][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.725927][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.738680][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.758797][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.778699][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.778794][ T821] usb usb5-port1: unable to enumerate USB device [ 970.798541][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 970.825458][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 970.825485][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 971.007686][ T9969] usb 1-1: USB disconnect, device number 67 [ 971.368472][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 971.518609][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 971.520277][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.520305][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.520325][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.520370][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 971.520390][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.534748][ T9] usb 3-1: config 0 descriptor?? [ 973.265689][ T9] hid_parser_main: 186 callbacks suppressed [ 973.265765][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.265837][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.265941][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266058][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266178][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266310][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266437][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266536][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266667][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.266790][ T9] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 973.544758][ T9] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 973.544789][ T9] microsoft 0003:045E:07DA.001F: no inputs found [ 973.544802][ T9] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 974.036416][ T9] usb 3-1: USB disconnect, device number 108 [ 974.111724][T18014] fido_id[18014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 974.255247][ T5616] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 974.862428][T18036] sg_write: data in/out 163806/24 bytes for SCSI command 0x0-- guessing data in; [ 974.862428][T18036] program syz.0.4513 not setting count and/or reply_len properly [ 975.010664][T18040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 975.096346][T18043] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 975.490069][T18056] trusted_key: encrypted_key: master key parameter 'tr' is invalid [ 975.893158][T18065] netlink: 'syz.4.4528': attribute type 4 has an invalid length. [ 976.418357][ T9969] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 976.550631][ T9969] usb 5-1: device descriptor read/64, error -71 [ 976.717487][T18087] trusted_key: encrypted_key: master key parameter 'tr' is invalid [ 976.788979][ T9969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 976.920800][ T9969] usb 5-1: device descriptor read/64, error -71 [ 977.028707][ T9969] usb usb5-port1: attempt power cycle [ 977.368375][ T9969] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 977.390178][ T9969] usb 5-1: device descriptor read/8, error -71 [ 977.628438][ T9969] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 977.651253][ T9969] usb 5-1: device descriptor read/8, error -71 [ 977.758650][ T9969] usb usb5-port1: unable to enumerate USB device [ 978.296950][T18134] netlink: 'syz.2.4555': attribute type 4 has an invalid length. [ 978.306164][T18134] netlink: 'syz.2.4555': attribute type 4 has an invalid length. [ 979.426105][T18164] netlink: 'syz.4.4569': attribute type 4 has an invalid length. [ 979.444313][T18164] netlink: 'syz.4.4569': attribute type 4 has an invalid length. [ 980.008354][T12600] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 980.158262][T12600] usb 5-1: Using ep0 maxpacket: 16 [ 980.160033][T12600] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.160084][T12600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.160111][T12600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 980.160134][T12600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59136, setting to 1024 [ 980.160158][T12600] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.160196][T12600] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 980.160217][T12600] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.251530][T12600] usb 5-1: config 0 descriptor?? [ 980.358421][T12600] rc_core: IR keymap rc-hauppauge not found [ 980.358442][T12600] Registered IR keymap rc-empty [ 980.358872][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.389011][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.410674][T12600] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 980.413827][T12600] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input161 [ 980.417409][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.451070][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.468681][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.498664][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.528663][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.548666][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.568710][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.598789][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.618867][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.648706][T12600] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 980.671983][T12600] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 980.672007][T12600] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 980.676553][T12600] usb 5-1: USB disconnect, device number 7 [ 980.927031][T18208] binder: 18207:18208 ioctl c0306201 0 returned -14 [ 980.981424][T18209] binder: 18207:18209 ioctl c0306201 0 returned -14 [ 981.037185][T18213] binder: 18207:18213 ioctl 80105873 0 returned -22 [ 984.009676][ T5734] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 984.163332][ T5734] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 984.163379][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.163403][ T5734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.163486][ T5734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 984.166021][ T5734] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 984.166046][ T5734] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 984.166064][ T5734] usb 3-1: Manufacturer: syz [ 984.304877][ T5734] usb 3-1: config 0 descriptor?? [ 985.146844][ T5734] hid_parser_main: 10 callbacks suppressed [ 985.146870][ T5734] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 985.179206][ T5734] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 985.687381][T18276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.730764][T18276] netlink: 'syz.2.4617': attribute type 12 has an invalid length. [ 985.872315][ T5734] usb 3-1: USB disconnect, device number 109 [ 986.388498][ T5820] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 987.348492][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 987.350331][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.350383][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 987.350408][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 987.350428][ T5820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 987.350449][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.351644][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 987.351669][ T5820] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 987.351687][ T5820] usb 1-1: Manufacturer: syz [ 987.355991][ T5820] usb 1-1: config 0 descriptor?? [ 987.608428][ T5820] rc_core: IR keymap rc-hauppauge not found [ 987.608448][ T5820] Registered IR keymap rc-empty [ 987.612624][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.628382][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.653130][ T5820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 987.672117][ T5820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input162 [ 987.681361][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.698752][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.727063][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.739859][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.766567][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.781209][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.798627][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.818636][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.839221][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.858549][ T5820] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 987.926364][ T5820] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 987.926388][ T5820] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 988.033967][ T5617] usb 1-1: USB disconnect, device number 68 [ 988.908351][ T5734] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 989.070521][ T5734] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 989.070575][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.070600][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.070615][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 989.072039][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 989.072065][ T5734] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 989.072084][ T5734] usb 5-1: Manufacturer: syz [ 989.075185][ T5734] usb 5-1: config 0 descriptor?? [ 989.482965][ T5734] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 989.487506][ T5734] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 990.018406][T18352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 990.082975][T18352] netlink: 'syz.4.4650': attribute type 12 has an invalid length. [ 990.108321][ T5820] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 990.181410][ T5734] usb 5-1: USB disconnect, device number 8 [ 990.274283][ T5820] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.274331][ T5820] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 990.274369][ T5820] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 990.274390][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.310672][T18380] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 990.327180][ T5820] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 990.667391][ T5734] usb 3-1: USB disconnect, device number 110 [ 990.999268][T18410] netlink: 'syz.0.4675': attribute type 1 has an invalid length. [ 990.999289][T18410] netlink: 760 bytes leftover after parsing attributes in process `syz.0.4675'. [ 990.999304][T18410] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4675'. [ 991.818335][ T5820] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 991.908400][ T9969] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 991.971064][ T5820] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 991.971109][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.971129][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.971141][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 991.972341][ T5820] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 991.972367][ T5820] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 991.972385][ T5820] usb 1-1: Manufacturer: syz [ 991.981101][ T5820] usb 1-1: config 0 descriptor?? [ 992.058781][ T9969] usb 3-1: Using ep0 maxpacket: 16 [ 992.061552][ T9969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.061585][ T9969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.061599][ T9969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 992.061610][ T9969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 992.061621][ T9969] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.063328][ T9969] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 992.063353][ T9969] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 992.063568][ T9969] usb 3-1: Manufacturer: syz [ 992.156049][ T9969] usb 3-1: config 0 descriptor?? [ 992.405718][ T5820] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 992.427182][ T5820] appleir 0003:05AC:8243.0022: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 992.438509][ T9969] rc_core: IR keymap rc-hauppauge not found [ 992.438529][ T9969] Registered IR keymap rc-empty [ 992.438671][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.458381][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.486399][ T9969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 992.500909][ T9969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input163 [ 992.538470][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.558388][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.578442][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.598438][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.621203][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.641247][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.656556][T18454] binder: 18450:18454 ioctl c0306201 0 returned -14 [ 992.658452][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.683113][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.706222][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.718392][ T9969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 992.744813][T18457] binder: 18450:18457 ioctl c0306201 0 returned -14 [ 992.751535][ T9969] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 992.751558][ T9969] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 992.809393][T18460] binder: 18450:18460 ioctl 80105873 0 returned -22 [ 992.815822][ T9969] usb 3-1: USB disconnect, device number 111 [ 992.871616][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.202708][T18432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 993.249762][T18432] netlink: 'syz.0.4685': attribute type 12 has an invalid length. [ 993.648327][ T5820] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 993.801263][ T5820] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 993.801296][ T5820] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 993.801358][ T5820] usb 5-1: config 0 interface 0 has no altsetting 0 [ 993.804160][ T5820] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 993.804187][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 993.804212][ T5820] usb 5-1: Product: syz [ 993.804225][ T5820] usb 5-1: Manufacturer: syz [ 993.804238][ T5820] usb 5-1: SerialNumber: syz [ 993.807930][ T5820] usb 5-1: config 0 descriptor?? [ 993.830225][ T5820] usb 5-1: selecting invalid altsetting 0 [ 994.876479][T18472] snd-usb-audio 5-1:0.0: Runtime PM usage count underflow! [ 994.908367][ T9] usb 5-1: USB disconnect, device number 9 [ 995.008484][T17859] usb 1-1: reset high-speed USB device number 69 using dummy_hcd [ 995.763186][T18506] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 996.079445][T17859] usb 1-1: device descriptor read/64, error -71 [ 996.318475][T17859] usb 1-1: reset high-speed USB device number 69 using dummy_hcd [ 996.319399][T17859] usb 1-1: device reset changed ep0 maxpacket size! [ 996.402222][ T9969] usb 1-1: USB disconnect, device number 69 [ 996.422476][T18522] adf_ctl_ioctl: 15 callbacks suppressed [ 996.422494][T18522] QAT: Invalid ioctl 1075883590 [ 996.422645][T18522] QAT: Invalid ioctl 1075883590 [ 996.422726][T18522] QAT: Invalid ioctl 1075883590 [ 996.422809][T18522] QAT: Invalid ioctl 1075883590 [ 996.422883][T18522] QAT: Invalid ioctl 1075883590 [ 996.422957][T18522] QAT: Invalid ioctl 1075883590 [ 996.423033][T18522] QAT: Invalid ioctl 1075883590 [ 996.423116][T18522] QAT: Invalid ioctl 1075883590 [ 996.423255][T18522] QAT: Invalid ioctl 1075883590 [ 996.423333][T18522] QAT: Invalid ioctl 1075883590 [ 996.709623][ T9969] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 996.858326][ T9969] usb 1-1: Using ep0 maxpacket: 16 [ 996.861781][ T9969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.861842][ T9969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 996.861878][ T9969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.861897][ T9969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 996.861917][ T9969] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.870364][ T9969] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 996.870392][ T9969] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 996.870410][ T9969] usb 1-1: Manufacturer: syz [ 996.886780][ T9969] usb 1-1: config 0 descriptor?? [ 997.210206][ T9969] rc_core: IR keymap rc-hauppauge not found [ 997.210226][ T9969] Registered IR keymap rc-empty [ 997.210369][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.228683][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.250481][ T9969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 997.253518][ T9969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input164 [ 997.256129][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.268483][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.288560][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.309209][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.328642][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.352805][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.369770][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.388777][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.408444][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.428575][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 997.474721][ T9969] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 997.475126][ T9969] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 997.596437][ T9969] usb 1-1: USB disconnect, device number 70 [ 998.928316][ T5734] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 999.080349][ T5734] usb 5-1: Using ep0 maxpacket: 16 [ 999.084019][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.084070][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.084086][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 999.084096][ T5734] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 999.084107][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.085250][ T5734] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 999.085281][ T5734] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 999.085294][ T5734] usb 5-1: Manufacturer: syz [ 999.094938][ T5734] usb 5-1: config 0 descriptor?? [ 999.408733][ T5734] rc_core: IR keymap rc-hauppauge not found [ 999.408753][ T5734] Registered IR keymap rc-empty [ 999.408901][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.410629][T18576] netlink: 'syz.0.4744': attribute type 1 has an invalid length. [ 999.410642][T18576] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4744'. [ 999.410650][T18576] netlink: 'syz.0.4744': attribute type 1 has an invalid length. [ 999.428651][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.450837][ T5734] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 999.454310][ T5734] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input165 [ 999.458749][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.478582][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.499027][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.529993][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.548562][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.568394][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.588335][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.608411][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.629361][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.655721][ T5734] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 999.702284][ T5734] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 999.702299][ T5734] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 999.853287][ T5734] usb 5-1: USB disconnect, device number 10 [ 1000.108359][ T9969] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1000.258422][ T9969] usb 1-1: Using ep0 maxpacket: 16 [ 1000.261378][ T9969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.261441][ T9969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.261466][ T9969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1000.261485][ T9969] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1000.261505][ T9969] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.263308][ T9969] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.263334][ T9969] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.263344][ T9969] usb 1-1: Manufacturer: syz [ 1000.351550][ T9969] usb 1-1: config 0 descriptor?? [ 1000.468314][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.628328][ T9969] rc_core: IR keymap rc-hauppauge not found [ 1000.628348][ T9969] Registered IR keymap rc-empty [ 1000.628516][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.656463][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.669304][ T9969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1000.675919][ T9969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input166 [ 1000.705943][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.718363][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.740076][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.758376][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.778458][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.798423][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.819421][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.838364][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.858550][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.878418][ T9969] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1000.903867][ T9969] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1000.903891][ T9969] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1001.018467][ T5734] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1001.038042][ T821] usb 1-1: USB disconnect, device number 71 [ 1001.181241][ T5734] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1001.181288][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.181307][ T5734] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.181319][ T5734] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1001.182389][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1001.182413][ T5734] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1001.182432][ T5734] usb 5-1: Manufacturer: syz [ 1001.186279][ T5734] usb 5-1: config 0 descriptor?? [ 1001.528347][ T5820] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1001.599773][ T5734] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 1001.649987][ T5734] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1001.691970][ T5820] usb 3-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 1001.692020][ T5820] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.692047][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1001.694396][ T5820] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1001.694422][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1001.694441][ T5820] usb 3-1: Product: syz [ 1001.694453][ T5820] usb 3-1: Manufacturer: syz [ 1001.694467][ T5820] usb 3-1: SerialNumber: syz [ 1001.764290][ T5820] usb 3-1: config 0 descriptor?? [ 1002.107681][T18601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1002.147947][ T5820] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1002.164027][ T5820] usb 3-1: USB disconnect, device number 112 [ 1002.173068][T18627] netlink: 'syz.4.4755': attribute type 12 has an invalid length. [ 1002.217524][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1002.390228][ T5820] usb 5-1: USB disconnect, device number 11 [ 1002.836325][T18648] binder: 18645:18648 ioctl c0306201 0 returned -14 [ 1002.889618][T18649] binder: 18645:18649 ioctl c0306201 0 returned -14 [ 1002.942271][T18652] binder: 18645:18652 ioctl 80105873 0 returned -22 [ 1003.757145][T18672] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1004.878407][ T5734] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1005.030485][ T5734] usb 3-1: config 0 has an invalid descriptor of length 169, skipping remainder of the config [ 1005.030536][ T5734] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.030561][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1005.035470][ T5734] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1005.035498][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1005.035517][ T5734] usb 3-1: Product: syz [ 1005.035530][ T5734] usb 3-1: Manufacturer: syz [ 1005.035543][ T5734] usb 3-1: SerialNumber: syz [ 1005.048342][ T5820] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1005.113229][ T5734] usb 3-1: config 0 descriptor?? [ 1005.203933][ T5820] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1005.203978][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.204009][ T5820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.204029][ T5820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1005.205640][ T5820] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1005.205666][ T5820] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1005.205685][ T5820] usb 5-1: Manufacturer: syz [ 1005.229354][ T5820] usb 5-1: config 0 descriptor?? [ 1005.513705][ T5734] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1005.536217][ T5734] usb 3-1: USB disconnect, device number 113 [ 1005.563680][ T7093] udevd[7093]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1005.692215][ T5820] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 1005.743315][ T5820] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1005.868360][ T821] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1006.020433][ T821] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 1006.020466][ T821] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1006.020478][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1006.023339][ T821] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1006.023367][ T821] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1006.023387][ T821] usb 1-1: Product: syz [ 1006.023399][ T821] usb 1-1: Manufacturer: syz [ 1006.023408][ T821] usb 1-1: SerialNumber: syz [ 1006.084805][ T821] usb 1-1: config 0 descriptor?? [ 1006.087655][ T821] hub 1-1:0.0: bad descriptor, ignoring hub [ 1006.087690][ T821] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1006.109427][ T821] usb 1-1: selecting invalid altsetting 0 [ 1006.231267][T18684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.281977][T18684] netlink: 'syz.4.4789': attribute type 12 has an invalid length. [ 1006.443118][ T5820] usb 1-1: USB disconnect, device number 72 [ 1006.484338][T17859] usb 5-1: USB disconnect, device number 12 [ 1006.708398][ T9969] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1006.863639][ T9969] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1006.863689][ T9969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1006.863703][ T9969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1006.863725][ T9969] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1006.863737][ T9969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.871921][ T9969] usb 3-1: config 0 descriptor?? [ 1006.899975][T18720] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1007.127308][T18720] netlink: 'syz.2.4804': attribute type 4 has an invalid length. [ 1007.145497][ T9969] usbhid 3-1:0.0: can't add hid device: -71 [ 1007.145581][ T9969] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1007.155257][ T9969] usb 3-1: USB disconnect, device number 114 [ 1007.998372][ T5734] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1008.162044][ T5734] usb 1-1: Using ep0 maxpacket: 32 [ 1008.168105][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1008.168125][ T5734] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1008.206850][ T5734] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1008.206869][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1008.206880][ T5734] usb 1-1: Product: syz [ 1008.206887][ T5734] usb 1-1: Manufacturer: syz [ 1008.206894][ T5734] usb 1-1: SerialNumber: syz [ 1008.256257][ T5734] usb 1-1: config 0 descriptor?? [ 1008.262515][T18742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1008.497754][T12600] usb 1-1: USB disconnect, device number 73 [ 1008.668414][ T5734] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1008.818399][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 1008.820818][ T5734] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1008.820844][ T5734] usb 3-1: config 0 has no interface number 0 [ 1008.824026][ T5734] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1008.824053][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.824072][ T5734] usb 3-1: Product: syz [ 1008.824085][ T5734] usb 3-1: Manufacturer: syz [ 1008.824099][ T5734] usb 3-1: SerialNumber: syz [ 1008.885644][ T5734] usb 3-1: config 0 descriptor?? [ 1009.321725][ T5734] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1009.321744][ T5734] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1010.132245][ T5734] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1010.132531][ T5734] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1010.319196][T18790] adf_ctl_ioctl: 15 callbacks suppressed [ 1010.319207][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319256][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319299][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319342][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319389][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319431][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319485][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319532][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319578][T18790] QAT: Invalid ioctl 1075883590 [ 1010.319621][T18790] QAT: Invalid ioctl 1075883590 [ 1010.652997][T18803] loop4: detected capacity change from 0 to 7 [ 1010.668099][T18803] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1010.668138][T18803] loop4: partition table partially beyond EOD, truncated [ 1010.671072][T18803] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1010.939544][ T5734] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1011.088298][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 1011.093963][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1011.094000][ T5734] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1011.094039][ T5734] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1011.094064][ T5734] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1011.094088][ T5734] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1011.096141][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1011.096177][ T5734] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1011.096210][ T5734] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1011.096234][ T5734] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1011.096264][ T5734] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1011.232408][ T5734] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1011.232448][ T5734] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1011.232497][ T5734] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1011.232522][ T5734] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1011.232547][ T5734] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1011.291879][ T5734] usb 5-1: string descriptor 0 read error: -22 [ 1011.292022][ T5734] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1011.292045][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.353658][ T5734] adutux 5-1:168.0: interrupt endpoints not found [ 1011.970487][ T9969] usb 3-1: USB disconnect, device number 115 [ 1012.152440][ T5734] usb 5-1: USB disconnect, device number 13 [ 1012.323761][T18831] loop4: detected capacity change from 0 to 7 [ 1012.341687][T18831] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1012.341724][T18831] loop4: partition table partially beyond EOD, truncated [ 1012.342003][T18831] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1012.680630][ T9969] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1012.828403][ T9969] usb 3-1: Using ep0 maxpacket: 8 [ 1012.830536][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1012.830570][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1012.830606][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1012.830629][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1012.830651][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1012.830673][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1012.830696][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1012.830720][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1012.831939][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1012.831974][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1012.832021][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1012.832047][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1012.832071][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1012.832092][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1012.832116][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1012.832149][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1012.833295][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1012.833328][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1012.833365][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1012.833391][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1012.833413][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1012.833436][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1012.833459][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1012.833484][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1012.837444][ T9969] usb 3-1: string descriptor 0 read error: -22 [ 1012.837551][ T9969] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1012.837565][ T9969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.967168][ T9969] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1013.196243][ T5734] usb 3-1: USB disconnect, device number 116 [ 1013.304833][ T4971] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1013.304870][ T4971] loop4: partition table partially beyond EOD, truncated [ 1013.305077][ T4971] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1013.353528][T16119] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 1013.640644][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1014.639541][ T5617] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1014.808270][ T5617] usb 1-1: Using ep0 maxpacket: 32 [ 1014.814080][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1014.814111][ T5617] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1014.817225][ T5617] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1014.855672][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1014.855698][ T5617] usb 1-1: Product: syz [ 1014.855712][ T5617] usb 1-1: Manufacturer: syz [ 1014.855725][ T5617] usb 1-1: SerialNumber: syz [ 1014.885732][ T5617] usb 1-1: config 0 descriptor?? [ 1014.886755][T18870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1015.098049][T18893] loop4: detected capacity change from 0 to 7 [ 1015.105147][ T5617] usb 1-1: USB disconnect, device number 74 [ 1015.175579][T18893] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1015.175615][T18893] loop4: partition table partially beyond EOD, truncated [ 1015.212900][T18893] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1015.488321][ T9969] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1015.639250][ T9969] usb 3-1: Using ep0 maxpacket: 8 [ 1015.643155][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1015.643193][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1015.643279][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1015.643305][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1015.643327][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.643350][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1015.643374][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1015.643397][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1015.644782][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1015.644817][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1015.644855][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1015.644881][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1015.644903][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.644926][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1015.644949][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1015.644982][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1015.646002][ T9969] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1015.646036][ T9969] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1015.646073][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1015.646095][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1015.646116][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1015.646140][ T9969] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1015.646164][ T9969] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1015.646188][ T9969] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1015.671596][ T9969] usb 3-1: string descriptor 0 read error: -22 [ 1015.671737][ T9969] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1015.671758][ T9969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.780009][ T9969] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1016.011198][ T5734] usb 3-1: USB disconnect, device number 117 [ 1016.239921][ T4971] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1016.239963][ T4971] loop4: partition table partially beyond EOD, truncated [ 1016.240207][ T4971] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1016.547620][ T5802] udevd[5802]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1017.348511][ T5820] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1017.499648][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 1017.503485][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.503524][ T5820] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1017.503562][ T5820] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1017.503587][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1017.503606][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1017.503630][ T5820] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1017.509193][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.509233][ T5820] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1017.509271][ T5820] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1017.509296][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1017.509314][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1017.510467][ T5820] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1017.513155][ T5820] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.513190][ T5820] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1017.513269][ T5820] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1017.513294][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 1017.513313][ T5820] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1017.513337][ T5820] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1017.549207][ T5820] usb 3-1: string descriptor 0 read error: -22 [ 1017.549337][ T5820] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1017.549358][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.724904][ T5820] adutux 3-1:168.0: interrupt endpoints not found [ 1017.923014][ T5820] usb 3-1: USB disconnect, device number 118 [ 1018.015599][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 1018.015614][ T36] audit: type=1326 audit(1780212850.468:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18935 comm="syz.0.4896" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337874ce59 code=0x0 [ 1018.308457][ T9969] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1018.461918][ T9969] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1018.461951][ T9969] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 1018.461976][ T9969] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1018.464308][ T9969] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1018.464334][ T9969] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1018.464352][ T9969] usb 5-1: Product: syz [ 1018.464365][ T9969] usb 5-1: Manufacturer: syz [ 1018.464379][ T9969] usb 5-1: SerialNumber: syz [ 1018.477176][ T9969] usb 5-1: config 0 descriptor?? [ 1018.519019][T18948] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.525444][ T9969] usb 5-1: selecting invalid altsetting 0 [ 1018.773442][T12600] usb 5-1: USB disconnect, device number 14 [ 1019.946060][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1020.501154][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.501205][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1020.501226][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1020.501266][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1020.501288][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.676230][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1020.902330][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1020.904346][ T9] usb 5-1: USB disconnect, device number 15 [ 1021.672465][T19013] loop4: detected capacity change from 0 to 7 [ 1021.704775][T19013] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1021.704814][T19013] loop4: partition table partially beyond EOD, truncated [ 1021.705141][T19013] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1021.998409][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1022.148585][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1022.150709][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.150744][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.150766][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.150780][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.150792][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.150805][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.150818][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.150831][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1022.151815][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.151870][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.151904][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.151918][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.151942][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.151955][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.151968][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.151982][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1022.153002][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.153035][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1022.153068][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.153092][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.153114][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.153137][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.153155][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1022.153168][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1022.156136][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1022.156248][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1022.156260][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.189263][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1022.696170][ T5617] usb 5-1: USB disconnect, device number 16 [ 1025.631841][T19049] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1029.117045][T19068] loop4: detected capacity change from 0 to 7 [ 1029.146058][T19068] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 1029.146097][T19068] loop4: partition table partially beyond EOD, truncated [ 1029.163262][T19068] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 1029.438455][ T5617] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1029.590221][ T5617] usb 3-1: Using ep0 maxpacket: 8 [ 1029.595166][ T5617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1029.595191][ T5617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1029.595213][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1029.595226][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1029.595239][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1029.595252][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1029.595265][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1029.595279][ T5617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1029.596931][ T5617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1029.596954][ T5617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1029.596975][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1029.596989][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1029.597002][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1029.597015][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1029.597028][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1029.597041][ T5617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1029.648300][T17859] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1029.648532][ T5617] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1029.648566][ T5617] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1029.648611][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1029.648637][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1029.648661][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1029.648685][ T5617] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1029.648709][ T5617] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1029.648734][ T5617] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1029.773742][ T5617] usb 3-1: string descriptor 0 read error: -22 [ 1029.773875][ T5617] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1029.773897][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.825880][ T5617] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1029.936475][T17859] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.936527][T17859] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1029.936553][T17859] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.936591][T17859] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1029.936612][T17859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.003617][T17859] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.004579][T17859] usb 1-1: invalid MIDI out EP 0 [ 1030.033738][ T5617] usb 3-1: USB disconnect, device number 119 [ 1030.510966][T17859] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1030.527677][T17859] usb 1-1: USB disconnect, device number 75 [ 1031.158391][ T5617] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1031.319167][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 1031.322087][ T5617] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1031.322112][ T5617] usb 3-1: config 0 has no interface number 0 [ 1031.326137][ T5617] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1031.326164][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.326183][ T5617] usb 3-1: Product: syz [ 1031.326196][ T5617] usb 3-1: Manufacturer: syz [ 1031.326210][ T5617] usb 3-1: SerialNumber: syz [ 1031.346650][ T5617] usb 3-1: config 0 descriptor?? [ 1031.802658][ T5617] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1031.802686][ T5617] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1032.748366][ T9969] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1032.878847][ T9969] usb 1-1: device descriptor read/64, error -71 [ 1033.118583][ T9969] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1033.248387][ T9969] usb 1-1: device descriptor read/64, error -71 [ 1033.358763][ T9969] usb usb1-port1: attempt power cycle [ 1033.698384][ T9969] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1033.718331][T17859] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1033.720202][ T9969] usb 1-1: device descriptor read/8, error -71 [ 1033.870488][T17859] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.873366][T17859] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1033.873393][T17859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1033.873411][T17859] usb 5-1: Product: syz [ 1033.873424][T17859] usb 5-1: Manufacturer: syz [ 1033.873437][T17859] usb 5-1: SerialNumber: syz [ 1033.978369][ T9969] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1034.000120][ T9969] usb 1-1: device descriptor read/8, error -71 [ 1034.109087][ T9969] usb usb1-port1: unable to enumerate USB device [ 1034.158078][T17859] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1035.033818][ T5617] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71 [ 1035.034114][ T5617] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1035.059394][ T5617] usb 3-1: USB disconnect, device number 120 [ 1035.948370][ T5617] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1036.018409][ T9969] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1036.111113][ T5617] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.111163][ T5617] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1036.111186][ T5617] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1036.113749][ T5617] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1036.113775][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1036.113794][ T5617] usb 1-1: Product: syz [ 1036.113807][ T5617] usb 1-1: Manufacturer: syz [ 1036.113820][ T5617] usb 1-1: SerialNumber: syz [ 1036.121015][ T5617] usb 1-1: config 0 descriptor?? [ 1036.184655][ T9969] usb 3-1: Using ep0 maxpacket: 16 [ 1036.193584][ T9969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.193636][ T9969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.193660][ T9969] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1036.193698][ T9969] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1036.193719][ T9969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.267278][ T9969] usb 3-1: config 0 descriptor?? [ 1036.305977][ T5617] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1036.354933][ T7093] udevd[7093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.406775][ T5617] usb 1-1: USB disconnect, device number 80 [ 1036.466687][ T5734] usb 5-1: USB disconnect, device number 17 [ 1036.559759][ T5734] usblp0: removed [ 1036.567564][ T821] usb 3-1: USB disconnect, device number 121 [ 1037.108446][ T5734] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1037.259981][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.260008][ T5734] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1037.261042][ T5734] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1037.261068][ T5734] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1037.261081][ T5734] usb 5-1: Manufacturer: syz [ 1037.266687][ T5734] usb 5-1: config 0 descriptor?? [ 1037.638313][ T5734] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1037.668439][ T37] INFO: task kworker/u8:4:67 blocked for more than 143 seconds. [ 1037.668463][ T37] Tainted: G L syzkaller #0 [ 1037.668474][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1037.668483][ T37] task:kworker/u8:4 state:D stack:20928 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1037.668528][ T37] Workqueue: netns cleanup_net [ 1037.668585][ T37] Call Trace: [ 1037.668592][ T37] [ 1037.668604][ T37] __schedule+0x16ec/0x5620 [ 1037.668652][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1037.668683][ T37] ? rt_spin_lock+0x1e0/0x400 [ 1037.668707][ T37] ? __pfx___schedule+0x10/0x10 [ 1037.668741][ T37] ? schedule+0x90/0x360 [ 1037.668767][ T37] schedule+0x164/0x360 [ 1037.668793][ T37] rxrpc_destroy_all_calls+0x44e/0x570 [ 1037.668825][ T37] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1037.668852][ T37] ? __pfx_var_wake_function+0x10/0x10 [ 1037.668877][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1037.668902][ T37] ? __timer_delete_sync+0x53e/0x610 [ 1037.668928][ T37] rxrpc_exit_net+0x6f/0xc0 [ 1037.668954][ T37] ops_undo_list+0x49f/0x940 [ 1037.668981][ T37] ? rt_spin_unlock+0x200/0x200 [ 1037.669002][ T37] ? __pfx_ops_undo_list+0x10/0x10 [ 1037.669021][ T37] ? rt_spin_unlock+0x14f/0x200 [ 1037.669044][ T37] ? idr_destroy+0x21b/0x2a0 [ 1037.669066][ T37] ? rt_spin_unlock+0x160/0x200 [ 1037.669088][ T37] cleanup_net+0x56e/0x800 [ 1037.669113][ T37] ? __pfx_cleanup_net+0x10/0x10 [ 1037.669144][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1037.669163][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1037.669184][ T37] process_scheduled_works+0xb5d/0x1860 [ 1037.669233][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.669259][ T37] ? assign_work+0x3d5/0x5e0 [ 1037.669283][ T37] worker_thread+0xa53/0xfc0 [ 1037.669329][ T37] kthread+0x388/0x470 [ 1037.669353][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1037.669371][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.669395][ T37] ret_from_fork+0x514/0xb70 [ 1037.669436][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.669456][ T37] ? __switch_to+0xc79/0x1410 [ 1037.669483][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.669507][ T37] ret_from_fork_asm+0x1a/0x30 [ 1037.669545][ T37] [ 1037.669720][ T37] [ 1037.669720][ T37] Showing all locks held in the system: [ 1037.669731][ T37] 1 lock held by khungtaskd/37: [ 1037.669743][ T37] #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1037.669798][ T37] 2 locks held by kworker/u8:3/56: [ 1037.669808][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1037.669877][ T37] #1: ffffc9000122fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1037.669919][ T37] 3 locks held by kworker/u8:4/67: [ 1037.669930][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1037.669971][ T37] #1: ffffc9000152fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1037.670009][ T37] #2: ffffffff8f340ce0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1037.670052][ T37] 2 locks held by kworker/u8:5/124: [ 1037.670062][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1037.670099][ T37] #1: ffffc900030d7c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1037.670141][ T37] 10 locks held by kworker/1:2/821: [ 1037.670166][ T37] 4 locks held by kworker/u8:13/3756: [ 1037.670179][ T37] 2 locks held by getty/5358: [ 1037.670188][ T37] #0: ffff888030e360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1037.670228][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1037.670273][ T37] 6 locks held by kworker/1:6/5734: [ 1037.670283][ T37] #0: ffff88802268a938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1037.670321][ T37] #1: ffffc90005ac7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1037.670367][ T37] #2: ffff88802a840210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1037.670422][ T37] #3: ffff88802a8d3658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 1037.670466][ T37] #4: ffff888027b3a958 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 1037.670512][ T37] #5: ffffffff8ec06880 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 1037.670560][ T37] 1 lock held by udevd/5802: [ 1037.670570][ T37] #0: ffff888036db8480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1037.670623][ T37] 2 locks held by syz-executor/16117: [ 1037.670634][ T37] #0: ffff888060d04480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1037.670679][ T37] #1: ffff8880611746c0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520 [ 1037.670731][ T37] 1 lock held by syz-executor/17012: [ 1037.670741][ T37] #0: ffff888025720480 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1037.670789][ T37] [ 1037.670794][ T37] ============================================= [ 1037.670794][ T37] [ 1037.670810][ T37] NMI backtrace for cpu 0 [ 1037.670835][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.670858][ T37] Tainted: [L]=SOFTLOCKUP [ 1037.670863][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.670873][ T37] Call Trace: [ 1037.670881][ T37] [ 1037.670889][ T37] dump_stack_lvl+0xe8/0x150 [ 1037.670910][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1037.670930][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1037.670960][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1037.670981][ T37] sys_info+0x135/0x170 [ 1037.670997][ T37] watchdog+0xfd3/0x1030 [ 1037.671023][ T37] ? watchdog+0x1c9/0x1030 [ 1037.671048][ T37] kthread+0x388/0x470 [ 1037.671070][ T37] ? __pfx_watchdog+0x10/0x10 [ 1037.671087][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.671111][ T37] ret_from_fork+0x514/0xb70 [ 1037.671133][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.671152][ T37] ? __switch_to+0xc79/0x1410 [ 1037.671179][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.671202][ T37] ret_from_fork_asm+0x1a/0x30 [ 1037.671237][ T37] [ 1037.671244][ T37] Sending NMI from CPU 0 to CPUs 1: [ 1037.671274][ C1] NMI backtrace for cpu 1 [ 1037.671290][ C1] CPU: 1 UID: 0 PID: 3756 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.671312][ C1] Tainted: [L]=SOFTLOCKUP [ 1037.671318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.671328][ C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1037.671354][ C1] RIP: 0010:unwind_next_frame+0x19f8/0x2550 [ 1037.671375][ C1] Code: 89 e6 e8 1b 0e 00 00 84 c0 0f 84 46 01 00 00 48 bd 00 00 00 00 00 fc ff df 48 8b 44 24 20 0f b6 04 28 84 c0 0f 85 6a 08 00 00 01 8b 84 24 8c 00 00 00 41 39 06 4c 8b 7c 24 50 48 8b 7c 24 78 [ 1037.671389][ C1] RSP: 0018:ffffc9000f627238 EFLAGS: 00000246 [ 1037.671402][ C1] RAX: 0000000000000000 RBX: ffffffff9092831c RCX: 0000000000000001 [ 1037.671414][ C1] RDX: ffffc9000f627348 RSI: dffffc0000000000 RDI: ffffc9000f627788 [ 1037.671426][ C1] RBP: dffffc0000000000 R08: ffffc9000f627788 R09: 0000000000000000 [ 1037.671437][ C1] R10: ffffc9000f627358 R11: fffff52001ec4e6d R12: ffffc9000f627788 [ 1037.671449][ C1] R13: 1ffff92001ec4e63 R14: ffffc9000f627308 R15: 1ffffffff2125063 [ 1037.671461][ C1] FS: 0000000000000000(0000) GS:ffff888126285000(0000) knlGS:0000000000000000 [ 1037.671477][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.671488][ C1] CR2: 00007ffdd0f6cf10 CR3: 000000006fc3e000 CR4: 00000000003526f0 [ 1037.671502][ C1] Call Trace: [ 1037.671508][ C1] [ 1037.671518][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1037.671537][ C1] ? skb_release_data+0x828/0xa60 [ 1037.671560][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1037.671578][ C1] arch_stack_walk+0x11b/0x150 [ 1037.671600][ C1] ? __kfree_skb+0x5d/0x210 [ 1037.671622][ C1] stack_trace_save+0xa9/0x100 [ 1037.671638][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1037.671654][ C1] ? fib_rules_lookup+0xc45/0xea0 [ 1037.671680][ C1] kasan_save_track+0x3e/0x80 [ 1037.671696][ C1] ? kasan_save_track+0x3e/0x80 [ 1037.671710][ C1] ? kasan_save_free_info+0x46/0x50 [ 1037.671730][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1037.671745][ C1] ? kfree+0x1c5/0x6c0 [ 1037.671759][ C1] ? skb_release_data+0x828/0xa60 [ 1037.671800][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1037.671821][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1037.671842][ C1] kasan_save_free_info+0x46/0x50 [ 1037.671862][ C1] __kasan_slab_free+0x5c/0x80 [ 1037.671878][ C1] kfree+0x1c5/0x6c0 [ 1037.671892][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1037.671918][ C1] ? skb_release_data+0x828/0xa60 [ 1037.671942][ C1] skb_release_data+0x828/0xa60 [ 1037.671967][ C1] __kfree_skb+0x5d/0x210 [ 1037.671987][ C1] send4+0x559/0xed0 [ 1037.672006][ C1] ? send4+0x220/0xed0 [ 1037.672023][ C1] ? __pfx_send4+0x10/0x10 [ 1037.672037][ C1] ? rt_read_lock+0x2a5/0x4b0 [ 1037.672058][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1037.672075][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1037.672093][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 1037.672109][ C1] wg_socket_send_skb_to_peer+0xe8/0x200 [ 1037.672129][ C1] wg_packet_handshake_send_worker+0x203/0x350 [ 1037.672148][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1037.672176][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1037.672192][ C1] ? process_scheduled_works+0xa70/0x1860 [ 1037.672209][ C1] process_scheduled_works+0xb5d/0x1860 [ 1037.672239][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.672258][ C1] ? assign_work+0x3d5/0x5e0 [ 1037.672276][ C1] worker_thread+0xa53/0xfc0 [ 1037.672305][ C1] kthread+0x388/0x470 [ 1037.672324][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1037.672339][ C1] ? __pfx_kthread+0x10/0x10 [ 1037.672359][ C1] ret_from_fork+0x514/0xb70 [ 1037.672376][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.672392][ C1] ? __switch_to+0xc79/0x1410 [ 1037.672415][ C1] ? __pfx_kthread+0x10/0x10 [ 1037.672434][ C1] ret_from_fork_asm+0x1a/0x30 [ 1037.672459][ C1] [ 1037.673282][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1037.673298][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1037.673323][ T37] Tainted: [L]=SOFTLOCKUP [ 1037.673329][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1037.673340][ T37] Call Trace: [ 1037.673348][ T37] [ 1037.673356][ T37] vpanic+0x56c/0xa60 [ 1037.673383][ T37] ? __pfx_vpanic+0x10/0x10 [ 1037.673418][ T37] panic+0xc5/0xd0 [ 1037.673439][ T37] ? __pfx_panic+0x10/0x10 [ 1037.673469][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1037.673494][ T37] watchdog+0x102c/0x1030 [ 1037.673521][ T37] ? watchdog+0x1c9/0x1030 [ 1037.673547][ T37] kthread+0x388/0x470 [ 1037.673570][ T37] ? __pfx_watchdog+0x10/0x10 [ 1037.673588][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.673611][ T37] ret_from_fork+0x514/0xb70 [ 1037.673634][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.673654][ T37] ? __switch_to+0xc79/0x1410 [ 1037.673681][ T37] ? __pfx_kthread+0x10/0x10 [ 1037.673704][ T37] ret_from_fork_asm+0x1a/0x30 [ 1037.673739][ T37] [ 1037.673995][ T37] Kernel Offset: disabled