last executing test programs: 5.528390254s ago: executing program 3 (id=1395): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000540), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@subsystem='blkio'}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000880)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x31000000, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000006c0), 0x11e4813, &(0x7f0000000700)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}], [{@seclabel}, {@permit_directio}]}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x60, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x3}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x20000ca}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}, 0x1000}]}) 4.550735948s ago: executing program 3 (id=1403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x480, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x20000000, 0x9, 0x3, 0x5, {0x7, 0x2, 0x3, 0x6, 0x4824, 0x94}, {0x4, 0x1, 0x5, 0xfffa, 0x1}, 0x6, 0xa1aa, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x8, 0x4d2a, 0x1, 0x5, 0x9, 0x0, 0x3, 0x8000, 0xffffba77, 0x9, 0x5, 0x4, 0x7, 0x3, 0xf, 0x4f0c, 0x4, 0x8000, 0x5, 0x10001, 0x1000, 0x0, 0x2, 0x3, 0x2, 0x4cc, 0xec, 0x800, 0x7f, 0x7, 0x1, 0x8, 0x0, 0xebe, 0x4, 0x5, 0x8e0, 0xfffffff9, 0x402a, 0x5, 0x1, 0x80000000, 0xcfc, 0x8, 0xffffff01, 0x9, 0x6, 0x1, 0x8001, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x7, 0xb90f, 0x7ff, 0x20, 0x0, 0x1, 0x5, 0x4, 0x2, 0xb1, 0x11d, 0x7e, 0x3, 0x800, 0x1, 0x2, 0x3, 0xccb, 0x7, 0x2, 0x9, 0xfffffff7, 0x6, 0x7b, 0x80, 0x304, 0x3, 0xc7, 0x8, 0x5, 0x1, 0x9, 0xff, 0x5, 0x0, 0x7, 0xfffffffa, 0x2, 0xa2, 0x8001, 0x3, 0xa, 0xd563, 0x7fff, 0x1, 0x53e468b3, 0x5, 0x8, 0x314, 0x400, 0x4, 0xffff, 0x800, 0xb, 0x5, 0x1, 0x7d, 0x0, 0xea34, 0x0, 0x7, 0x68d, 0x2, 0x6, 0x200, 0x10000, 0x793d, 0x7, 0x876d, 0xfffff800, 0x5, 0xfff, 0x6, 0x5, 0x0, 0xfffffff9, 0x1, 0x5, 0x5c88, 0x6, 0x80, 0x75e, 0x9, 0x8, 0x1ff, 0x7fffffff, 0x7, 0x81, 0xffffffff, 0x35, 0x0, 0x81, 0x101, 0x100, 0x52, 0x0, 0x9, 0x0, 0xfffffc00, 0xfffffffc, 0x6, 0x7fffffff, 0x9, 0x5, 0x6, 0x400, 0x6, 0x8001, 0x7, 0xfffff144, 0x5, 0x6, 0x1fd, 0x5, 0x4, 0x9, 0x5, 0x1, 0x9, 0xfff, 0xe, 0x7, 0x4, 0x3, 0x601f, 0x800, 0x6, 0x9, 0x7, 0x3, 0x7, 0x3fd, 0x9, 0x3, 0x8, 0x9, 0xc, 0x9, 0x3, 0x0, 0x3ee, 0x9, 0x62cb, 0x3ff, 0x2, 0x52, 0xfffffff9, 0xffffffff, 0xb62, 0x1, 0x10000, 0x9c8, 0x1, 0x80000001, 0x6eb, 0x4cc7, 0x2, 0x4, 0xbd9e, 0xfff, 0x7, 0x8, 0x2, 0x4, 0x1, 0x400, 0x3, 0xbf, 0x5, 0x5, 0x80000000, 0x2, 0x8, 0xfffffb1a, 0x81, 0x3, 0x7, 0x9e80, 0x100, 0x10, 0xc, 0x0, 0x2, 0x1, 0x5000000, 0x80000001, 0x8, 0x8d80, 0x4609, 0x3, 0x46b, 0x9, 0x4, 0x7, 0x6, 0x2, 0x200, 0x8, 0x8, 0x0, 0x1ff]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x480}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 4.400779742s ago: executing program 1 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) r7 = openat(0xffffffffffffffff, &(0x7f0000000440)='./proc\x00', 0x101042, 0x0) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r7, 0x8000000) munmap$IORING_OFF_SQ_RING(r8, 0x1) sendfile(r0, r0, 0x0, 0x1) 4.288161854s ago: executing program 3 (id=1409): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getpid() sendmsg$unix(r0, 0x0, 0x8841) 3.605882951s ago: executing program 3 (id=1411): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x6, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="18020000070000000000000000000000850000003600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000c00850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000f40)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 3.550415973s ago: executing program 4 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "2a9dcd50f215da9fa6f695a27e646f5398713dd1839061ca0dec35d32201d159b780b0"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x1b4, 0x16, 0xa, 0x900, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x141912cc47b4c042, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xfffffffffffffe83, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x388}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x89901) set_mempolicy(0x8006, &(0x7f0000000380)=0xfff, 0xc0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=""/86}, 0x20) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x100) mount(&(0x7f0000000680)=@sr0, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)='pipefs\x00', 0x88020, 0x0) move_mount(r1, 0x0, r2, 0x0, 0x46) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000340)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x705840, 0x20}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100001f79a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000001a000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df719af36349f298129da4871307b534bf901115e17392ac66ad022186a8929d1c000006146001e04aeacea799a22a2fa030000c412f6cae80043eb27d53319d0ad229e5752548300000000dbc2777df150dd488318b5790bee7e6c8bd03acdd77b85b941092314fd085f028f4e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b217369ca8b6712f000000001b1df65b3e1b9bf115646914ce53d13d0ccacda1ef16fdcceaede3faedc51d29a47fc813ce3d32cfc7a53ac271d6d6f4ea6bf97f2f1be2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de7940b0000db8db03d4b7745fef1d04ec633dee254a6d491b8496da787e814c4fdf0b4a387b4c8149d18c1020029a18986252a70f8f92eb6f0e8c7db000068fbaa2e2a27efd9104297f2c58159f02d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa909ac06b57479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0ef94234db1f00000000000000c20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b35f421c3552772ca7f3e2c25a65f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41aad8bda74d66f47cc17d8ba3eec0fd80f82c5f573c6d294d366505000000da0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da323947004cacadcaff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f012b060e7d23fd39206000000000000eb55d001623258a141bd587cc9dad46de56ef907b059b99a79ae5498f6589880ed6eea7b9c670012f80cd6a1397953ba5870786554df26236ebced9390cb6941b8365d936a7d2120eca291963eb2d537d87cbb54e588ee5d6944ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a0aa9a104e16b3b8c6e64836ac3f32f53c9a2bae513464ca03aff14b9fd8cd9539f5096412b92012e095b84c202060098df3314f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c363000000000223201780200c6ed7966130b547dbf8b497af0a77f52f2cd39000000200000e81c23cf14156951210001c800000000001500000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921e0128dfd70b438af60b060000000000000056642b49b745f3bf2c01808b6d7d748308eea09f0161b4735efbf3411738d6ee7aebf9ef40662d7836d252c566e1ee938a9a6804ed3a1079b0282a12043408cd60b9e53978c81839be0000000000456f7d2a42cb13da2022f23eaec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea394cd8ffd3d628293e591dc6f71c2710a7ea8a4fdc214e1cc275b26adfa892e6de9200000000e50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e014df20fa209bcbb5c252b11a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447dc0fc9d5f99a145dfcedad69da9cd4b75c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d583f436137a3c5dc714c9402c21d181aae59efb28d4f91652f6750b9195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa80900000000b6638c420eb4304f66e3a37aaf000000c42a570f0e9d76fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284df80e4636c25b96174327d82761c26e329555f9290af40000000000000100000fd3763655500344bae34347f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419a5c16e2055b85058099448430587a49bed2ee9647c5d3bbb47bc00edf5e9020c09ab004321610b857e8717974b633b21cb32f0e03280e09758bd445ab91d201782d656ab09f508bbbaca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92b32af00f191b66b6a6f732a91f0a2e9120be61e58c79d497247d278888901d44bf77e8246605a644e9e3d769db497c3960df05caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f3101985602688888ccb85c87b4f8ffffff7f000000002c331fca0e541b7ca2119ff0d61c5224550346115b43f8b1894c8fa8a14dc4810f61ae01000000000000000000000102000000000000000000000027c9585c0cead5d619d18475ccde2857279a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77a23b0000e49666c464d35ca9b50f3ed3e535b3da8c17a23692759ccf5a205311b7d122532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952b3d42c68a3102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e8918a0d6e2949affcacb5ba0a56aa063b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9448a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4cfb0b9c8c80158b44ecae9420654f7016b0aac117087406d343e27b372d6027ab2aec2bcad7fe6bb932bc5751d2974e95455a277fa3b472bc7bbdd2ac5a1ea608e8137ace03361607cc1a84be659355629ab13ad49008c3fcfa2423439a3607961d5b59da48a0155e8e42cc13c702cc40c99cf86c2021d72f9f4ab1b00de555a5a39593c93871ff7eb5ecadb64837a2d88723ef65aa5152e3d5864e57581b61f2b0960600000000000000265f091e7bce17d20604c5ab751773a5cf8a719a7ada06ed03832bf274707c7c970edc20f4a1eaa3b610450d2025cae6d2cb639ecd58709b05a20097208d03f7a146a6901913618738679d4e0af53eae997eecfa0dc3dcec19d3d9205450765d659220c92701ee75c8710470d9eb6f62c5c721883f1544ba66271c8dab05a933746c16b6e93294b561c6715a32a394ed1e6c01670c931bfa52c58c6f34d64e758a7a7f7d33c49336d4cba2cbb170ad7539a45774dfcc55257215c8ae719dc1c232fc6699ef01005887d04a543030b4328ab48744ac23ff56fd2da52eb9fb2eefcdd2d92d73ac1b111ea8b5e1fec36a3579879acfe366d393f1fa9cbe08d9ba57a443643e9cd251dc88e91a5e458e66ea1e822d55d4dd919a95eb4c25a08cb6e1070000003a0fd07a4ad9df240e00006aaa2db0dfe416146840d88bd08365e547c970e2983200703864a3b9e1682cb479dad6d34d211b05267eb1355520e9ec0c5014b0832f7fb35782fdbfcbf5e23a7f5d51ea480371748d18d8e10608ab8261fe058d1732f28814a9981d84a04a2bb36c89bdd245e3293a14df1ac567301a79514f103abd387d6ef2d9d94508ac0f6135c8921279573eefd5d4e33b9ef585980789a94d9848906f545559d30000b5040f0776703363249ca984cbb09752f099efbb9e7362e4999594c1086d8958e9469db01d85fb0b9b3148663e9ea2e755d96c70e540b4200e4cf82986712dd733b26d00e947d03c42215118426d548cb2077b43b89e4163d260faea1db53e2cf3427c90aefa2662a1c2b28b0e020e872bda1d39da508de5dbc37d03ee056b2579a1d16799589a2600000000aa00006c94bcaf115fbbcb216e3cb7fd9afe16d1fff2d047e508aa5f6de0ea4e9ec1b3a4ab1f8b5f312fc50000000000000000000000000042709db6de7e969ac0ce18b47280fb1b1b1531648122fed3e25edecb5200f5000000000000166f7d36b2966c19af7ffa6afa69e50821c9aa3ae60fbc196cf8ad2f7f86d79db1bb0ecbf9c3d0d3d407574def838e4def26ed9c7e6c69858f7813be8ffc565583663bebfe7485660b67e1436cbc6d4d3c48ab7b033d7d1195173edb16643f69cb779802839d490a4df94e5ea89c192af2ae83876edd59c9a7140e12ba591f073ec604f7e8f1e100cd414e9237ecfc052d9a73a868cd0e4b06da0435af72fb0d25657e8f5464b19fa83f977e6900000000367871fa37420e7a232ef9b440bb0639994c655d144c5786939d6a187b8182ddd2bec36cd28371b1754cb6c53697fb23576ee0d3fd0a5803c9be9fe384f1a7a9a8eb64d17d238fa3238a001aa8ed040a69e9ec0a627e3b3ca64d4680d819c14c71684581000000000000000000000000000000000000c6a6587715865fe14558960bc936bc83abd1f2a00b17a407457681d0760000000000000040000000000000000000004faeabea6de40ae30291662594c993099ef041c264a64d77d69e0cdfa620a191704cef91e269044acf752b55690075fa844de65a099200265e13c2a8f9b717886dea8e79407e34bc268a17965033ca1d000000000000000046595642f9fc008875ddb7aebda7a16b1d20dd8b65bcdac8cdc75a173fd2e57a9c37bf5a52ea001ec981dd7ad4e5944575ced39233ada8f3c1b856644812828bb79536a5188d14fe537250dc107121534cbbc7598f48aa2335616ae8eb72acf6982048e568e37f1f58e9714343587734c7ec0fa5c44d13165d6384bf9500757b4b0275950d6e7c451eef3fd353d47c54c4c2cf7318e6c24583ba0966225284d1abac80786519c563ddf0e6c023d537ca6e0d6d4e072c98f45415d13f0dcea174f162ebd00b42264f6fa3dccd09f4101dd254e54423b30e06713eccfacb6ffb38afff920980af938a4d78f4b9a6b5c7424e91121cda789104ee490d25843f1622bba93257cc23e45cd7ed42abdb991d51804e674e507dfd53b5ab6944df33f4f494b9ae0d2de410539828e82a939ad82b385e66809d7d4d3630b6f22c2f41fdaa0fadeea09fa4f7005813643c2d6307d55689faf6f656327ac5872a3bd4c11363909a8b9f30e5401993a0f6e1a9b42287542647d1e86b02b7e36319414629ac1f35572a9cc1e98ce1457f922da0c2de76c9e97944efad0a3ad78cda81c5b82709d696e85bbf4595ef9664a6aff8cf96446cb6c26595f4eb659d26c846471f6551dbb24fc6c03a01e33efcd5939472b687d31be9bd9bd1bcda45bd2236f06c000000007d348ebcb9d810d4dc3c55bbe4055ce9c45267daeec7a7d8b498f56ee933cc02fb53c2c28fa09ce5ada5687889357599971a8c794f8ce23c1f7add4f65280ab446ea2d130000000000000000000000d1a0313ff63bc4e4463688db1d6ac7f4595a02c89349a973f118d936f33ea18e69d7739f4532e1b8580ef125b47cf5b402b6f2beffed6cc9afe2b548c4dbc78363118818d9473f29d52444685c41620eeaeb1f8786e87aeaf287fb9b63b30e6761507503dcd47b64f0b6157d970a989844f9b7dbe83211cd7999c82bd151bee0c67f3e6642ef1772d759df9ec9b4197383f9a66217e180e434e650dd560aa3ed42acddd44d6f45807a3c63e15929cfbebc7eef1a219d3147a6c06bd974168ac689392fa851ebdf524ca2331148ff7e855cccc106074ca92153734d5c5e3f9efc6592b08e0c07c7b5d42ec71484bb2a4c0f4293138369f39f9fa4a9cc607b42ba6102f918ce4e76d66fba450e94849962fae5059bda419fd2a170ea387c10a4ada5893f38486069ef1bfdbb432ab322ce87d7a94fa967135833157bafbed3b48bb267fc3aa56d1e5b66417a673b40884fc91ec9558eab6a08222dfe37767095b2d94cda881290d6017137595cdd53972353f485adfde8015cac0e1acd64ca97d67023f75a54b1ebe55053652ad16292a15e79dc58ba080f795f1a753d1c5c85475e286c548da6f669e5c34afc272e5a32f27264d9210acec3b65a264fd5e85d5f44979431eab3fcd8d33d5476e070d2e20e6156ad9c964ebbfe7d9096461b72530295b3603bf85b0c8f9921e9ca95d744bf5c03d60f7364f3fd9d98f7acc80cabd02d061818d028056c68805ee4783aa4b90d39e9b29085429de28c615668e4b4f4dd77b3a55a8058b99f3adff03294e01da549dd64cacd59382466e562a3f67ef5d042426659574ed041bc19ed625b7c0633154a290f69437f43065795d3ae5b11ee8e935b9969f5291a32ce3adca268162efcee3898e823affe0f50f7efe763d47288004a2b310e2a79115160b8e0e09067f26a7653a3a0886691fe44a307f8f344eb9512b632bc132c26220ec86dbf788f4fadd493c37e38f782fc1c0e64f7d3e6a04aa1918796fa53353ab58cfc4505147ed35624871b085e507c90b991a675bf2b6393a732f4a69c3859dbeca89140ba5b3f47d457877d327fa9b936"], &(0x7f0000002340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f00000023c0), 0xffffff1e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r4, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000002480)="5aee41de2be09eee28e622e563a36eedd35eda0d4a8be128f99f9ad6818019a86870075ab28fdce213d1e150769bcf2542dbaa2d2562b03bb085688e94dfc47301e7289d2e8a33da02d6f4b206d728bbb2e7a867b6", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) statx(r3, &(0x7f0000000400)='.\x00', 0x4000, 0x80, &(0x7f0000000440)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8600, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000540)) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000780)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_open_dev$evdev(0x0, 0x6, 0x2002) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000800)) fsopen(0x0, 0x0) 3.488387754s ago: executing program 3 (id=1413): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f90102430109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)={0x40, 0x16, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xc, 0xad, {0xad, 0xc, "ae68d12576b8295d7f1a90f2d99d67b2af620afbb44644799049ed0808fc89c6cd885e7246e5affde77293cbeb0557c131b796d5ab2aff4311c551996378d056ac1f59d707bb93fb48a96a4b9e27ff1fd69273549b7ceff8de26ed07f451fb08a417f75eb8337a55f3481d8c14714653f7f5759b52cdffc7686a766266ef33a2927274c58230c40bf52f3ffb12a782ebc947dac1ee0b3dc537ab706ad6f5893a00db3696dc44e799e678b9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xc72d86813b33287, 0xaf, "296035baca4f92f4a2867edeb9a68b3d73ac545fbccf291e40b9f0552378c425ebdfa999f1a6ffd955df7bbb466aeee7bf13a3ef0b0f1ce6f7f81dfdeeb75a31aa408fa781e7332c1151c68979a62eca4c3fee272bf6507d9fc2a18fdea76ff154a57f68477150b455c984156a8685a834702d237b5a57cfea17199f8862cbd455be97dbc164b3a318d6b4c1e5f8665c2c03343a282ecefe588e09e35434ec5931b372b19a4b6abdcd03c279ecea5a"}, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x81, 0x3, "410e8d"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "6ec06b"}, &(0x7f0000000380)={0x20, 0x83, 0x1, "17"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "1d94"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "a362f4"}}) 3.483987714s ago: executing program 1 (id=1414): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000500), 0x400000000000041, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@subsystem='blkio'}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000880)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x31000000, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000006c0), 0x11e4813, &(0x7f0000000700)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}], [{@seclabel}, {@permit_directio}]}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x60, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x3}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x20000ca}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}, 0x1000}]}) 2.635674705s ago: executing program 4 (id=1417): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.629054885s ago: executing program 0 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) 2.528106938s ago: executing program 1 (id=1419): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8005) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000880)={0x1, 0x0, @pic={0x2, 0xc, 0xd, 0xb, 0x7, 0x40, 0xb, 0x77, 0x9, 0x4e, 0x4, 0x5, 0x3, 0x9, 0x8a, 0x5}}) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 2.527871268s ago: executing program 4 (id=1420): socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) 1.573974411s ago: executing program 2 (id=1421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) bpf$ITER_CREATE(0xb, &(0x7f0000000140), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f0000000840)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 1.543010012s ago: executing program 0 (id=1422): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x1006, 0x96}, 0x20) 1.453321064s ago: executing program 4 (id=1423): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f40)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1.453164154s ago: executing program 0 (id=1424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) unshare(0x28000600) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) accept(r0, 0x0, 0x0) 1.419167675s ago: executing program 0 (id=1425): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000040)=0x80000004, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='@}\\\x00', 0x200, &(0x7f00000000c0)={@align=0x4a4, {0x2, 0x0, 0x8, 0x8000000000000001}}, 0x9, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x7ff}) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4000880) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x38, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x800}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x40004) 1.379983996s ago: executing program 1 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000003ece1e40ad88714", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 1.306659448s ago: executing program 2 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000abe000/0x7000)=nil, 0x7000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x1010c0, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f00000002c0)='\x00', 0x84200, &(0x7f0000000300)={@align=0x3, {0x0, 0x400, 0x9, 0x10}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x1}, {[0x7, 0x2, 0x3, 0x8001]}, 0x91, 0x11, &(0x7f00000003c0)=""/17}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0xfffffffc) syz_io_uring_setup(0x200025fb, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000740)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./trace/set_event\x00', 0x121302, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x23e) 1.253094439s ago: executing program 4 (id=1428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x27, 0x7, 0x1, 0x0, "2a9dcd50f215da9fa6f695a27e646f5398713dd1839061ca0dec35d32201d159b780b0"}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x1b4, 0x16, 0xa, 0x900, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x174, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x141912cc47b4c042, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xfffffffffffffe83, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x388}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x89901) set_mempolicy(0x8006, &(0x7f0000000380)=0xfff, 0xc0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f00000006c0)=""/86}, 0x20) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x100) mount(&(0x7f0000000680)=@sr0, &(0x7f0000000740)='./file0\x00', &(0x7f00000007c0)='pipefs\x00', 0x88020, 0x0) move_mount(r1, 0x0, r2, 0x0, 0x46) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000340)) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x705840, 0x20}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000002340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f00000023c0), 0xffffff1e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r4, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000002480)="5aee41de2be09eee28e622e563a36eedd35eda0d4a8be128f99f9ad6818019a86870075ab28fdce213d1e150769bcf2542dbaa2d2562b03bb085688e94dfc47301e7289d2e8a33da02d6f4b206d728bbb2e7a867b6", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) statx(r3, &(0x7f0000000400)='.\x00', 0x4000, 0x80, &(0x7f0000000440)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8600, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000540)) ioctl$SOUND_MIXER_READ_RECSRC(r5, 0x80044dff, &(0x7f0000000780)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_open_dev$evdev(0x0, 0x6, 0x2002) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000800)) fsopen(0x0, 0x0) 979.560236ms ago: executing program 0 (id=1429): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000500), 0x400000000000041, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000780)='.\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@subsystem='blkio'}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000880)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x31000000, &(0x7f0000000640)={&(0x7f0000000680)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f00000006c0), 0x11e4813, &(0x7f0000000700)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}], [{@seclabel}, {@permit_directio}]}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=[@acquire]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x60, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x3}, @ptr={0x70742a85, 0x80000, 0x0, 0x0, 0x1, 0x11}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x20000ca}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}, 0x1000}]}) 461.686299ms ago: executing program 1 (id=1430): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x82c03, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x4d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) 419.12575ms ago: executing program 2 (id=1431): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b000000000000000095c7831800002100010008081c000ada9c0a"], 0x70}}, 0x0) 363.986141ms ago: executing program 3 (id=1432): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) 262.110104ms ago: executing program 4 (id=1433): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="500404"], 0x7) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xfffffff9}]}, 0x24}}, 0x0) write$nci(r0, &(0x7f0000000400)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2, {0xfc}}, 0x5) 197.257345ms ago: executing program 2 (id=1434): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000980)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad84, &(0x7f00000009c0)={0xa, 0x4e20, 0x5b3, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) 143.381867ms ago: executing program 2 (id=1435): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x1006, 0x96}, 0x20) 33.86234ms ago: executing program 2 (id=1436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x3c, r1, 0xe215691cdce0287b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 15.64728ms ago: executing program 0 (id=1437): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8005) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000880)={0x1, 0x0, @pic={0x2, 0xc, 0xd, 0xb, 0x7, 0x40, 0xb, 0x77, 0x9, 0x4e, 0x4, 0x5, 0x3, 0x9, 0x8a, 0x5}}) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 0s ago: executing program 1 (id=1438): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f0000000840)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) kernel console output (not intermixed with test programs): It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.068154][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.079139][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.095451][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.106364][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.117086][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125889][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.135553][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.162897][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.174454][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.187439][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.218451][ T4281] device veth0_macvtap entered promiscuous mode [ 70.245715][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.270515][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.280356][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.305406][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.319533][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.331970][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.344526][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.365732][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.380965][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.389986][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.399194][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.408289][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.458794][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.476786][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.487467][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.504293][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.517961][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.534335][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.558288][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.568562][ T4281] device veth1_macvtap entered promiscuous mode [ 70.592840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.605813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.617347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.658808][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.677514][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.687624][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.701178][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 70.707087][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.707205][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 70.716167][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 70.721908][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 70.755733][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.768743][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.778608][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.780683][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 70.810481][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.820341][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.850493][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.860334][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.895428][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.907455][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.917973][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.952915][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.971269][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.990220][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.018204][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.145271][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.161227][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.177217][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.192218][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.198895][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.263572][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.323575][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.392238][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.444648][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.500369][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.626342][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.755474][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.764312][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.780134][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.786977][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.797884][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.808530][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.813264][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.817299][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.926897][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.969893][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.989678][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.131703][ T66] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.997883][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.024579][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.044185][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.063437][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.094463][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.112231][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.141316][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.143549][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.157808][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.165827][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.332743][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.547830][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.774590][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.932255][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.970757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.210470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #308!!! [ 75.400472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.420469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.510471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.530473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.560469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.640492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #21a!!! [ 75.660473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #29a!!! [ 75.680476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 75.700479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #39a!!! [ 76.961288][ T4484] ======================================================= [ 76.961288][ T4484] WARNING: The mand mount option has been deprecated and [ 76.961288][ T4484] and is ignored by this kernel. Remove the mand [ 76.961288][ T4484] option from the mount to silence this warning. [ 76.961288][ T4484] ======================================================= [ 77.000729][ T4484] jffs2: notice: (4484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 79.045140][ T4498] sched: RT throttling activated [ 80.342996][ T4530] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.366191][ T4368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.457778][ T4535] jffs2: notice: (4535) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 80.660671][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 80.681006][ T4368] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.726355][ T4368] usb 1-1: config 0 has no interface number 0 [ 80.866164][ T4368] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.908772][ T4368] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.976269][ T4368] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.017242][ T4368] usb 1-1: config 0 interface 1 has no altsetting 0 [ 81.035634][ T4368] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 81.752570][ T7] cfg80211: failed to load regulatory.db [ 82.080931][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.117408][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.172765][ T4368] usb 1-1: config 0 descriptor?? [ 82.187557][ T4559] jffs2: notice: (4559) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.236722][ T4368] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 82.317473][ T7] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 82.696422][ T4368] usbhid 1-1:0.1: can't add hid device: -71 [ 82.706506][ T4368] usbhid: probe of 1-1:0.1 failed with error -71 [ 82.717193][ T4368] usb 1-1: USB disconnect, device number 2 [ 82.749373][ T7] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 82.768625][ T7] usb 3-1: Product: syz [ 82.801065][ T7] usb 3-1: config 0 descriptor?? [ 82.811626][ T7] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 82.891276][ T7] usb 3-1: Detected FT232H [ 83.713450][ T4547] Zero length message leads to an empty skb [ 83.888349][ T7] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 83.907693][ T7] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 84.034314][ T7] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.131000][ T7] usb 3-1: USB disconnect, device number 2 [ 84.209334][ T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.569197][ T4593] binder: BINDER_SET_CONTEXT_MGR already set [ 84.576571][ T4593] binder: 4587:4593 ioctl 4018620d 200000000200 returned -16 [ 84.802905][ T7] ftdi_sio 3-1:0.0: device disconnected [ 85.611397][ T4368] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.430517][ T4562] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.740926][ T4562] usb 5-1: Using ep0 maxpacket: 16 [ 87.751777][ T4562] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.770020][ T4562] usb 5-1: config 0 has no interface number 0 [ 87.780161][ T4562] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.848718][ T4562] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.891436][ T4562] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.934223][ T4562] usb 5-1: config 0 interface 1 has no altsetting 0 [ 87.992073][ T4562] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 88.052304][ T4562] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.117382][ T4562] usb 5-1: config 0 descriptor?? [ 88.480045][ T4651] fuse: Unknown parameter 'group_id00000000000000000000' [ 89.081497][ T4562] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 89.382782][ T4562] usbhid 5-1:0.1: can't add hid device: -71 [ 89.389377][ T4562] usbhid: probe of 5-1:0.1 failed with error -71 [ 89.404533][ T4562] usb 5-1: USB disconnect, device number 2 [ 91.505456][ T4692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 91.679292][ T4692] device veth0_to_bond entered promiscuous mode [ 92.843683][ T4708] jffs2: notice: (4708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.056113][ T4581] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.055398][ T4581] usb 1-1: Using ep0 maxpacket: 16 [ 95.110096][ T4581] usb 1-1: device descriptor read/all, error -71 [ 95.348992][ T4752] i2c i2c-0: new_device: Invalid device name [ 97.200084][ T4791] jffs2: notice: (4791) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.290636][ T4581] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.396063][ T4811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.96'. [ 98.496069][ T4581] usb 2-1: Using ep0 maxpacket: 16 [ 98.505002][ T4581] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.543757][ T4581] usb 2-1: config 0 has no interface number 0 [ 98.549922][ T4581] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.606714][ T4581] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.637083][ T4581] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.680589][ T4581] usb 2-1: config 0 interface 1 has no altsetting 0 [ 98.687993][ T4581] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 98.710514][ T4581] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.731109][ T4581] usb 2-1: config 0 descriptor?? [ 98.754100][ T4581] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 99.717286][ T4581] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 100.010652][ T4369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.126918][ T4581] elan 0003:04F3:074D.0001: Get report error for parm 6: -71 [ 100.134702][ T4396] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.021307][ T4369] usb 3-1: Using ep0 maxpacket: 16 [ 102.052626][ T4369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.070357][ T4581] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 102.086239][ T4369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.114011][ T4581] elan 0003:04F3:074D.0001: Input device is not registered [ 102.131298][ T4369] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.169091][ T4369] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.213927][ T4581] elan: probe of 0003:04F3:074D.0001 failed with error -119 [ 102.250159][ T4369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.270782][ T4396] usb 4-1: Using ep0 maxpacket: 16 [ 102.285098][ T4396] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 102.299280][ T4581] usb 2-1: USB disconnect, device number 2 [ 102.343561][ T4369] usb 3-1: config 0 descriptor?? [ 102.380565][ T4396] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 102.460790][ T4396] usb 4-1: config 8 has no interface number 0 [ 102.487591][ T4396] usb 4-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 102.590410][ T4396] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.925014][ T4859] fido_id[4859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 104.035084][ T4369] HID 045e:07da: Invalid code 65791 type 1 [ 105.058326][ T4369] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input7 [ 105.270746][ T4367] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.470602][ T4367] usb 2-1: Using ep0 maxpacket: 8 [ 105.486506][ T4367] usb 2-1: config 0 has no interfaces? [ 105.513350][ T4367] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 105.566061][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.594978][ T4367] usb 2-1: Product: syz [ 105.599215][ T4367] usb 2-1: Manufacturer: syz [ 105.636266][ T4367] usb 2-1: SerialNumber: syz [ 105.721591][ T4367] usb 2-1: config 0 descriptor?? [ 105.781883][ T4396] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 105.802746][ T4396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.811200][ T4369] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 105.868663][ T4396] usb 4-1: can't set config #8, error -71 [ 105.911680][ T4369] usb 3-1: USB disconnect, device number 3 [ 106.232246][ T4367] usb 2-1: USB disconnect, device number 3 [ 106.663494][ T4396] usb 4-1: USB disconnect, device number 2 [ 107.018963][ T4913] fido_id[4913]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.476846][ T4952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 112.043777][ T4998] kvm [4996]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800100000080 [ 113.710934][ T4368] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.720967][ T5026] FAULT_INJECTION: forcing a failure. [ 113.720967][ T5026] name failslab, interval 1, probability 0, space 0, times 1 [ 113.735106][ T5026] CPU: 1 PID: 5026 Comm: syz.1.148 Not tainted syzkaller #0 [ 113.742406][ T5026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.752473][ T5026] Call Trace: [ 113.755753][ T5026] [ 113.758689][ T5026] dump_stack_lvl+0x188/0x24e [ 113.763381][ T5026] ? show_regs_print_info+0x12/0x12 [ 113.768576][ T5026] ? load_image+0x410/0x410 [ 113.773074][ T5026] ? __lock_acquire+0x7ea0/0x7ea0 [ 113.778095][ T5026] should_fail_ex+0x390/0x4c0 [ 113.782774][ T5026] should_failslab+0x5/0x20 [ 113.787270][ T5026] slab_pre_alloc_hook+0x59/0x300 [ 113.792287][ T5026] ? lockdep_softirqs_off+0x430/0x430 [ 113.797653][ T5026] ? init_pseudo+0x52/0x140 [ 113.802146][ T5026] __kmem_cache_alloc_node+0x4f/0x270 [ 113.807512][ T5026] ? init_pseudo+0x52/0x140 [ 113.812004][ T5026] kmalloc_trace+0x26/0xe0 [ 113.816434][ T5026] init_pseudo+0x52/0x140 [ 113.820758][ T5026] pipefs_init_fs_context+0x18/0x80 [ 113.825944][ T5026] alloc_fs_context+0x628/0x7d0 [ 113.830794][ T5026] __se_sys_fsopen+0xa0/0x2c0 [ 113.835464][ T5026] do_syscall_64+0x4c/0xa0 [ 113.839873][ T5026] ? clear_bhb_loop+0x60/0xb0 [ 113.844544][ T5026] ? clear_bhb_loop+0x60/0xb0 [ 113.849212][ T5026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.855097][ T5026] RIP: 0033:0x7f04e6f9e559 [ 113.859503][ T5026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.879099][ T5026] RSP: 002b:00007f04e7dce028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 113.887514][ T5026] RAX: ffffffffffffffda RBX: 00007f04e7225fa0 RCX: 00007f04e6f9e559 [ 113.895475][ T5026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 113.903452][ T5026] RBP: 00007f04e7035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 113.911413][ T5026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.919371][ T5026] R13: 00007f04e7226038 R14: 00007f04e7225fa0 R15: 00007ffffc7bc438 [ 113.927342][ T5026] [ 114.040691][ T4368] usb 1-1: Using ep0 maxpacket: 8 [ 114.047902][ T4368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.077680][ T4368] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 50814, setting to 1024 [ 114.130228][ T4368] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 114.148793][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.166358][ T4368] usb 1-1: Product: syz [ 114.180591][ T4368] usb 1-1: Manufacturer: syz [ 114.185224][ T4368] usb 1-1: SerialNumber: syz [ 114.448691][ T4368] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 114.481650][ T4368] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 114.525053][ T4368] usb 1-1: unit 6 not found! [ 114.706095][ T4368] usb 1-1: USB disconnect, device number 5 [ 115.014692][ T4564] udevd[4564]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.103111][ T5077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 116.227301][ T5085] FAULT_INJECTION: forcing a failure. [ 116.227301][ T5085] name failslab, interval 1, probability 0, space 0, times 0 [ 116.240256][ T5085] CPU: 0 PID: 5085 Comm: syz.1.167 Not tainted syzkaller #0 [ 116.247543][ T5085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.257612][ T5085] Call Trace: [ 116.260897][ T5085] [ 116.263813][ T5085] dump_stack_lvl+0x188/0x24e [ 116.268482][ T5085] ? show_regs_print_info+0x12/0x12 [ 116.273681][ T5085] ? load_image+0x410/0x410 [ 116.278199][ T5085] ? __might_sleep+0xd0/0xd0 [ 116.282796][ T5085] ? __lock_acquire+0x7ea0/0x7ea0 [ 116.287816][ T5085] should_fail_ex+0x390/0x4c0 [ 116.292506][ T5085] should_failslab+0x5/0x20 [ 116.297016][ T5085] slab_pre_alloc_hook+0x59/0x300 [ 116.302044][ T5085] kmem_cache_alloc+0x56/0x2f0 [ 116.306826][ T5085] ? security_file_alloc+0x30/0x110 [ 116.312013][ T5085] security_file_alloc+0x30/0x110 [ 116.317031][ T5085] __alloc_file+0xc2/0x230 [ 116.321452][ T5085] alloc_empty_file+0x90/0x180 [ 116.326226][ T5085] alloc_file+0x5b/0x5f0 [ 116.330467][ T5085] alloc_file_pseudo+0x180/0x200 [ 116.335425][ T5085] ? alloc_empty_file_noaccount+0x80/0x80 [ 116.341163][ T5085] ? _raw_spin_unlock+0x24/0x40 [ 116.346028][ T5085] anon_inode_getfd+0xc6/0x1b0 [ 116.350797][ T5085] map_create+0xbce/0xff0 [ 116.355129][ T5085] ? security_bpf+0x7a/0xa0 [ 116.359637][ T5085] __sys_bpf+0x38b/0x780 [ 116.363878][ T5085] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.369253][ T5085] ? lock_chain_count+0x20/0x20 [ 116.374107][ T5085] __x64_sys_bpf+0x78/0x90 [ 116.378535][ T5085] do_syscall_64+0x4c/0xa0 [ 116.382963][ T5085] ? clear_bhb_loop+0x60/0xb0 [ 116.387647][ T5085] ? clear_bhb_loop+0x60/0xb0 [ 116.392329][ T5085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.398220][ T5085] RIP: 0033:0x7f04e6f9e559 [ 116.402647][ T5085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.422257][ T5085] RSP: 002b:00007f04e7dce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.430667][ T5085] RAX: ffffffffffffffda RBX: 00007f04e7225fa0 RCX: 00007f04e6f9e559 [ 116.438630][ T5085] RDX: 0000000000000048 RSI: 000020000001a9c0 RDI: 0000000000000000 [ 116.446589][ T5085] RBP: 00007f04e7035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 116.454549][ T5085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.462513][ T5085] R13: 00007f04e7226038 R14: 00007f04e7225fa0 R15: 00007ffffc7bc438 [ 116.470492][ T5085] [ 116.474529][ T4562] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.680703][ T4562] usb 4-1: Using ep0 maxpacket: 16 [ 116.688392][ T4562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.699280][ T4562] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.709211][ T4562] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 116.737531][ T4562] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 116.746772][ T4562] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 116.754954][ T4562] usb 4-1: Manufacturer: syz [ 116.800887][ T4562] usb 4-1: config 0 descriptor?? [ 117.059061][ T4370] usb 4-1: USB disconnect, device number 3 [ 120.431713][ T5144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.182'. [ 122.921110][ T5173] fuse: Bad value for 'fd' [ 128.471311][ T27] audit: type=1326 audit(1792453053.524:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.557986][ T27] audit: type=1326 audit(1792453053.574:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.618670][ T27] audit: type=1326 audit(1792453053.574:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.762440][ T27] audit: type=1326 audit(1792453053.574:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.908963][ T27] audit: type=1326 audit(1792453053.574:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.958582][ T27] audit: type=1326 audit(1792453053.574:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 128.995460][ T27] audit: type=1326 audit(1792453053.574:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 129.021316][ T27] audit: type=1326 audit(1792453053.574:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 129.049903][ T27] audit: type=1326 audit(1792453053.574:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 129.550661][ T27] audit: type=1326 audit(1792453053.594:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5238 comm="syz.0.205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 129.750769][ T5262] fuse: Bad value for 'fd' [ 130.041622][ T5269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 130.104375][ T5273] fuse: Invalid rootmode [ 130.992705][ T5283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 131.059191][ T5287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 131.064441][ T5281] infiniband syz0: set active [ 131.073947][ T5281] infiniband syz0: added bond0 [ 131.124766][ T5281] RDS/IB: syz0: added [ 131.132450][ T5281] smc: adding ib device syz0 with port count 1 [ 131.138666][ T5281] smc: ib device syz0 port 1 has pnetid [ 131.255855][ T4368] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.440550][ T4368] usb 4-1: Using ep0 maxpacket: 16 [ 131.448445][ T4368] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.468640][ T4368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.489114][ T4368] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.517711][ T4368] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.536910][ T4368] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.554035][ T4368] usb 4-1: Manufacturer: syz [ 131.567198][ T4368] usb 4-1: config 0 descriptor?? [ 131.802038][ T4370] usb 4-1: USB disconnect, device number 4 [ 131.922388][ T5301] fuse: Bad value for 'fd' [ 132.662128][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.673181][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.563599][ T5327] fuse: Invalid rootmode [ 134.302716][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 134.970579][ T4370] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.165140][ T4370] usb 2-1: Using ep0 maxpacket: 8 [ 135.512325][ T4370] usb 2-1: config 0 has no interfaces? [ 135.578551][ T4370] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 135.868212][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.952174][ T4370] usb 2-1: Product: syz [ 136.007458][ T4370] usb 2-1: Manufacturer: syz [ 136.115163][ T4370] usb 2-1: SerialNumber: syz [ 136.271415][ T4370] usb 2-1: config 0 descriptor?? [ 136.479715][ T4396] usb 2-1: USB disconnect, device number 4 [ 136.560609][ T4365] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.752291][ T4365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.763378][ T4365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.805690][ T4365] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 136.815137][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 136.823467][ T4365] usb 5-1: Product: syz [ 136.827729][ T4365] usb 5-1: Manufacturer: syz [ 136.842416][ T4365] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 137.722106][ T4365] mos7840: probe of ttyUSB0 failed with error -71 [ 137.733027][ T4365] usb 5-1: USB disconnect, device number 3 [ 137.742949][ T4365] mos7840 5-1:1.0: device disconnected [ 138.934338][ T5392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.252'. [ 140.826231][ T4365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.080614][ T4365] usb 4-1: Using ep0 maxpacket: 8 [ 141.087674][ T4365] usb 4-1: config 0 has no interfaces? [ 141.107874][ T4365] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 141.140003][ T4365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.165425][ T4365] usb 4-1: Product: syz [ 141.173764][ T4365] usb 4-1: Manufacturer: syz [ 141.184046][ T4365] usb 4-1: SerialNumber: syz [ 141.208163][ T4365] usb 4-1: config 0 descriptor?? [ 141.427290][ T4367] usb 4-1: USB disconnect, device number 5 [ 141.530600][ T4365] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.810694][ T4365] usb 1-1: Using ep0 maxpacket: 16 [ 141.827271][ T4365] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.980672][ T4365] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.042240][ T4365] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.048901][ T4365] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.078702][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.136575][ T4365] usb 1-1: config 0 descriptor?? [ 142.168291][ T5445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'. [ 142.692686][ T4365] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 142.700843][ T4365] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 142.708522][ T4365] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 142.720052][ T4365] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 142.730202][ T4365] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 142.747294][ T4365] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 142.888532][ T5455] jffs2: notice: (5455) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.907298][ T4365] usb 1-1: USB disconnect, device number 6 [ 145.230719][ T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 145.469736][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.538598][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.621807][ T7] usb 3-1: Product: syz [ 145.635676][ T7] usb 3-1: Manufacturer: syz [ 145.648662][ T7] usb 3-1: SerialNumber: syz [ 145.677477][ T7] usb 3-1: config 0 descriptor?? [ 145.730140][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.283'. [ 145.992981][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 146.012305][ T5499] jffs2: notice: (5499) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.950569][ T4364] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.153647][ T4364] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.195188][ T4364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 147.231591][ T4364] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.284496][ T4364] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 147.323258][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.461345][ T4364] usb 5-1: config 0 descriptor?? [ 147.690830][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 147.700763][ T7] usb 3-1: USB disconnect, device number 4 [ 147.745149][ T4364] usb 5-1: USB disconnect, device number 4 [ 149.485735][ T5548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.300'. [ 150.101359][ T5573] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 150.152979][ T5573] netlink: 'syz.2.307': attribute type 4 has an invalid length. [ 152.298657][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.321'. [ 152.310848][ T4364] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.860912][ T4364] usb 3-1: Using ep0 maxpacket: 16 [ 152.875604][ T4364] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.904861][ T4364] usb 3-1: config 0 has no interface number 0 [ 152.911046][ T4364] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.928523][ T4364] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.938462][ T4364] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.060355][ T4364] usb 3-1: config 0 interface 1 has no altsetting 0 [ 153.239869][ T4364] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 153.289621][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.341379][ T4364] usb 3-1: config 0 descriptor?? [ 153.383310][ T4364] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 154.136938][ T4364] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 154.618531][ T4364] elan 0003:04F3:074D.0004: Set report error for parm 6: -71 [ 154.627719][ T4364] elan 0003:04F3:074D.0004: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 154.654099][ T4364] elan 0003:04F3:074D.0004: Input device is not registered [ 154.670065][ T4364] elan: probe of 0003:04F3:074D.0004 failed with error -119 [ 154.689696][ T4364] usb 3-1: USB disconnect, device number 5 [ 154.801045][ T5646] fido_id[5646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 160.540635][ T4364] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.717763][ T5718] fuse: Unknown parameter 'use00000000000000000000' [ 160.762342][ T4364] usb 1-1: Using ep0 maxpacket: 16 [ 160.776928][ T4364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.822060][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.942693][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 161.056403][ T4364] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 161.105388][ T4364] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.274876][ T4364] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.345843][ T4364] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.412790][ T4364] usb 1-1: Manufacturer: syz [ 161.487522][ T4364] usb 1-1: config 0 descriptor?? [ 162.180516][ T4364] rc_core: IR keymap rc-hauppauge not found [ 162.186468][ T4364] Registered IR keymap rc-empty [ 162.211786][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.260801][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.459224][ T4364] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 162.483001][ T4364] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 162.486534][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 162.747646][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.799256][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.847026][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.852485][ T7] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 162.879509][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 162.880614][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.890383][ T7] usb 2-1: Product: syz [ 162.899472][ T7] usb 2-1: Manufacturer: syz [ 162.938461][ T7] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 162.940628][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 162.990646][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.030657][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.060574][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.090628][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.150590][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.190577][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.250555][ T4364] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 163.329559][ T4364] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 163.358623][ T5746] jffs2: notice: (5746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.380619][ T4364] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 163.457844][ T4364] usb 1-1: USB disconnect, device number 7 [ 163.614845][ T7] mos7840: probe of ttyUSB0 failed with error -71 [ 163.731732][ T7] usb 2-1: USB disconnect, device number 5 [ 163.779971][ T7] mos7840 2-1:1.0: device disconnected [ 164.830772][ T5763] fuse: Unknown parameter 'use00000000000000000000' [ 167.721200][ T5792] jffs2: notice: (5792) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.507274][ T5810] fuse: Unknown parameter 'use00000000000000000000' [ 172.662443][ T5859] fuse: Unknown parameter 'user_i00000000000000000000' [ 175.261034][ T5887] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 175.706114][ T5908] fuse: Unknown parameter 'user_i00000000000000000000' [ 177.660822][ T5922] jffs2: notice: (5922) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.550643][ T5966] fuse: Unknown parameter 'user_i00000000000000000000' [ 183.538817][ T5986] jffs2: notice: (5986) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.698248][ T6008] process 'syz.2.423' launched '/dev/fd/11' with NULL argv: empty string added [ 185.901524][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 185.901566][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 185.914025][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 186.060798][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 186.068759][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 188.368827][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.434'. [ 188.670572][ T4370] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.833778][ T4370] usb 5-1: device descriptor read/64, error -71 [ 189.710594][ T4370] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.450642][ T4370] usb 5-1: device descriptor read/64, error -71 [ 190.590861][ T4370] usb usb5-port1: attempt power cycle [ 191.043662][ T4370] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.173470][ T4370] usb 5-1: device descriptor read/8, error -71 [ 192.570586][ T4370] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.846592][ T4370] usb 5-1: device not accepting address 8, error -71 [ 192.855969][ T4370] usb usb5-port1: unable to enumerate USB device [ 192.864495][ T6121] netlink: 20 bytes leftover after parsing attributes in process `syz.4.448'. [ 192.955543][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 193.447255][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 194.073326][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.082432][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.898120][ T6143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.454'. [ 196.790511][ T5927] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 197.796844][ T5927] usb 2-1: device descriptor read/64, error -71 [ 198.120667][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.320760][ T5927] usb 2-1: device descriptor read/64, error -71 [ 198.465728][ T5927] usb usb2-port1: attempt power cycle [ 199.050893][ T5927] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.122370][ T5927] usb 2-1: device descriptor read/8, error -71 [ 200.154345][ T5927] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.191641][ T5927] usb 2-1: device descriptor read/8, error -71 [ 200.288035][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.468'. [ 200.310763][ T5927] usb usb2-port1: unable to enumerate USB device [ 203.550655][ T4413] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 203.571582][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 203.730828][ T4413] usb 3-1: device descriptor read/64, error -71 [ 204.000595][ T4413] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 204.160567][ T4413] usb 3-1: device descriptor read/64, error -71 [ 204.283132][ T4413] usb usb3-port1: attempt power cycle [ 204.558597][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.485'. [ 204.700595][ T4413] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 204.741212][ T4413] usb 3-1: device descriptor read/8, error -71 [ 205.010546][ T4413] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.052534][ T4413] usb 3-1: device descriptor read/8, error -71 [ 205.186859][ T4413] usb usb3-port1: unable to enumerate USB device [ 208.339509][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'. [ 209.890529][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 210.173125][ T5927] usb 4-1: device descriptor read/64, error -71 [ 211.200887][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.130661][ T5927] usb 4-1: device descriptor read/64, error -71 [ 212.697687][ T5927] usb usb4-port1: attempt power cycle [ 213.224624][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 214.840793][ T4371] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.040727][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 215.070183][ T4371] usb 1-1: config 0 has no interfaces? [ 215.168632][ T4371] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 215.217172][ T4581] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 215.228614][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.360572][ T4371] usb 1-1: Product: syz [ 215.401501][ T4371] usb 1-1: Manufacturer: syz [ 215.425671][ T4371] usb 1-1: SerialNumber: syz [ 215.496081][ T4371] usb 1-1: config 0 descriptor?? [ 215.594011][ T4581] usb 4-1: config 32 has an invalid interface number: 255 but max is 0 [ 215.610581][ T4581] usb 4-1: config 32 has no interface number 0 [ 215.630637][ T4581] usb 4-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 215.651191][ T4581] usb 4-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 215.680535][ T4581] usb 4-1: config 32 interface 255 has no altsetting 0 [ 215.694028][ T4581] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 215.714233][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.727742][ T4581] usb-storage 4-1:32.255: USB Mass Storage device detected [ 215.779298][ T4581] usb-storage 4-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 215.918175][ T4396] usb 1-1: USB disconnect, device number 8 [ 216.153785][ T4581] usb 4-1: USB disconnect, device number 9 [ 216.763330][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 217.365112][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.550739][ T4396] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 217.740969][ T4396] usb 1-1: Using ep0 maxpacket: 16 [ 217.847481][ T4396] usb 1-1: config 0 has no interfaces? [ 217.854150][ T4396] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 217.873480][ T4396] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 217.881802][ T4396] usb 1-1: Manufacturer: syz [ 218.527555][ T4396] usb 1-1: config 0 descriptor?? [ 218.727221][ T6441] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.535'. [ 218.745194][ T4396] usb 1-1: USB disconnect, device number 9 [ 220.776688][ T4396] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.980657][ T4396] usb 1-1: Using ep0 maxpacket: 8 [ 220.993939][ T4396] usb 1-1: config 0 has no interfaces? [ 221.012707][ T4396] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 221.044783][ T4396] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.059337][ T4396] usb 1-1: Product: syz [ 221.064228][ T4396] usb 1-1: Manufacturer: syz [ 221.081211][ T4396] usb 1-1: SerialNumber: syz [ 221.130162][ T6457] fuse: Bad value for 'user_id' [ 221.157659][ T4396] usb 1-1: config 0 descriptor?? [ 221.390783][ T4396] usb 1-1: USB disconnect, device number 10 [ 222.511303][ T4396] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 223.540580][ T4396] usb 5-1: Using ep0 maxpacket: 16 [ 223.547629][ T4396] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 223.574730][ T4396] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 223.605985][ T4396] usb 5-1: config 8 has no interface number 0 [ 223.624767][ T4396] usb 5-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 223.647905][ T4396] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 223.728505][ T4396] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 223.757964][ T4396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.790514][ T4396] usb 5-1: Product: syz [ 223.801388][ T4396] usb 5-1: Manufacturer: syz [ 223.816251][ T4396] usb 5-1: SerialNumber: syz [ 223.841384][ T6464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.767676][ T4396] usb 5-1: USB disconnect, device number 9 [ 226.350553][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.556'. [ 227.670691][ T4396] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 228.460521][ T4396] usb 5-1: Using ep0 maxpacket: 8 [ 229.490539][ T4396] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 229.547683][ T4396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 229.660801][ T4396] usb 5-1: Product: syz [ 229.681581][ T4396] usb 5-1: Manufacturer: syz [ 229.706544][ T4396] usb 5-1: SerialNumber: syz [ 229.739727][ T4396] usb 5-1: config 0 descriptor?? [ 229.767280][ T4396] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 230.732534][ T4396] gspca_sn9c2028: read1 error -71 [ 231.139614][ T4396] gspca_sn9c2028: read1 error -71 [ 231.144107][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 231.145074][ T4396] sn9c2028: probe of 5-1:0.0 failed with error -71 [ 231.169421][ T4396] usb 5-1: USB disconnect, device number 10 [ 232.416941][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.577'. [ 233.662905][ T4396] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 234.000783][ T5927] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 234.200609][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 234.227368][ T5927] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 234.321792][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 234.407184][ T5927] usb 1-1: Product: syz [ 234.447901][ T5927] usb 1-1: Manufacturer: syz [ 234.453167][ T5927] usb 1-1: SerialNumber: syz [ 234.468942][ T5927] usb 1-1: config 0 descriptor?? [ 234.480627][ T4396] usb 5-1: Using ep0 maxpacket: 16 [ 234.488813][ T4396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.491650][ T5927] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 234.520504][ T4396] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.529512][ T4396] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 234.586270][ T4396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.804988][ T4396] usb 5-1: config 0 descriptor?? [ 234.960141][ T5927] gspca_sn9c2028: read1 error -71 [ 234.966119][ T5927] gspca_sn9c2028: read1 error -71 [ 234.986450][ T5927] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 235.052682][ T5927] usb 1-1: USB disconnect, device number 11 [ 235.163426][ T6635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 236.077619][ T6650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 236.360859][ T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 236.560707][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 236.576284][ T22] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 236.627768][ T22] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 236.735575][ T22] usb 2-1: config 8 has no interface number 0 [ 236.801942][ T22] usb 2-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 236.838552][ T955] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.861411][ T22] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 236.874870][ T4581] usb 5-1: USB disconnect, device number 11 [ 236.877191][ T22] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 236.894411][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.903477][ T22] usb 2-1: Product: syz [ 236.907918][ T22] usb 2-1: Manufacturer: syz [ 236.927470][ T22] usb 2-1: SerialNumber: syz [ 236.958891][ T6652] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 237.028596][ T955] usb 3-1: Using ep0 maxpacket: 16 [ 237.036240][ T955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.049409][ T955] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.063329][ T955] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.074731][ T955] usb 3-1: Manufacturer: syz [ 237.119878][ T955] usb 3-1: config 0 descriptor?? [ 237.515424][ T955] usb 3-1: USB disconnect, device number 10 [ 237.902225][ T22] usb 2-1: USB disconnect, device number 10 [ 241.030605][ T4365] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 241.304869][ T6722] binder: BINDER_SET_CONTEXT_MGR already set [ 241.311020][ T6722] binder: 6713:6722 ioctl 4018620d 200000000200 returned -16 [ 242.077027][ T4365] usb 4-1: Using ep0 maxpacket: 8 [ 242.099740][ T4365] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.112030][ T4365] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 242.123403][ T4365] usb 4-1: can't read configurations, error -71 [ 242.290335][ T6730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.615'. [ 244.101862][ T955] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.411396][ T955] usb 1-1: Using ep0 maxpacket: 8 [ 244.440247][ T955] usb 1-1: config 0 has no interfaces? [ 244.652163][ T955] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 244.670528][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.678555][ T955] usb 1-1: Product: syz [ 244.683147][ T955] usb 1-1: Manufacturer: syz [ 244.687762][ T955] usb 1-1: SerialNumber: syz [ 244.721499][ T955] usb 1-1: config 0 descriptor?? [ 245.495083][ T4371] usb 1-1: USB disconnect, device number 12 [ 245.764547][ T6767] binder: BINDER_SET_CONTEXT_MGR already set [ 245.770719][ T6767] binder: 6763:6767 ioctl 4018620d 200000000200 returned -16 [ 247.380568][ T4371] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 247.581943][ T4371] usb 3-1: Using ep0 maxpacket: 16 [ 247.679169][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 247.685314][ T6787] binder: 6780:6787 ioctl 4018620d 200000000200 returned -16 [ 247.860793][ T955] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 248.090660][ T955] usb 5-1: Using ep0 maxpacket: 8 [ 248.174487][ T955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.275946][ T4371] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 248.293070][ T4371] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 248.321613][ T4371] usb 3-1: config 8 has no interface number 0 [ 248.327756][ T4371] usb 3-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 248.370598][ T955] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 248.372343][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.631'. [ 248.378198][ T955] usb 5-1: can't read configurations, error -71 [ 248.394746][ T4371] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 248.419878][ T4371] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 248.429342][ T4371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.437774][ T4371] usb 3-1: Product: syz [ 248.442278][ T4371] usb 3-1: Manufacturer: syz [ 248.448114][ T4371] usb 3-1: SerialNumber: syz [ 248.471115][ T6775] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 248.699536][ T4371] usb 3-1: USB disconnect, device number 11 [ 248.939923][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.633'. [ 249.241258][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 251.948020][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.641'. [ 252.117162][ T6788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 252.269430][ T6837] binder: BINDER_SET_CONTEXT_MGR already set [ 252.275567][ T6837] binder: 6827:6837 ioctl 4018620d 200000000200 returned -16 [ 252.310587][ T6788] usb 2-1: Using ep0 maxpacket: 8 [ 252.351980][ T6788] usb 2-1: config 0 has no interfaces? [ 252.393796][ T6788] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 252.501258][ T6788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.585190][ T6788] usb 2-1: Product: syz [ 252.628491][ T6788] usb 2-1: Manufacturer: syz [ 252.675592][ T6788] usb 2-1: SerialNumber: syz [ 252.930675][ T6788] usb 2-1: config 0 descriptor?? [ 253.008164][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 253.034135][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.647'. [ 253.141874][ T4371] usb 2-1: USB disconnect, device number 11 [ 253.452437][ T6788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 253.460886][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'. [ 254.230556][ T6788] usb 3-1: Using ep0 maxpacket: 16 [ 254.237504][ T6788] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 254.264995][ T6788] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 254.279232][ T6788] usb 3-1: config 8 has no interface number 0 [ 254.288294][ T6788] usb 3-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 254.314415][ T6788] usb 3-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 254.358073][ T6788] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 254.381610][ T6788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.389881][ T6788] usb 3-1: Product: syz [ 254.399710][ T6788] usb 3-1: Manufacturer: syz [ 254.404812][ T6788] usb 3-1: SerialNumber: syz [ 254.449908][ T6839] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.827126][ T6788] usb 3-1: USB disconnect, device number 12 [ 255.571216][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.577768][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.470741][ T6872] fuse: Unknown parameter 'fd0x0000000000000006' [ 258.720019][ T6885] binder: BINDER_SET_CONTEXT_MGR already set [ 258.726105][ T6885] binder: 6882:6885 ioctl 4018620d 200000000200 returned -16 [ 259.018318][ T6892] netlink: 20 bytes leftover after parsing attributes in process `syz.1.661'. [ 259.319187][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 260.546150][ T6909] binder: BINDER_SET_CONTEXT_MGR already set [ 260.552238][ T6909] binder: 6906:6909 ioctl 4018620d 200000000200 returned -16 [ 262.487873][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 266.462340][ T6962] fuse: Unknown parameter 'fd0x0000000000000006' [ 270.590772][ T4368] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 270.810697][ T4368] usb 2-1: Using ep0 maxpacket: 16 [ 270.822736][ T4368] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.987129][ T4368] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.039156][ T4368] usb 2-1: config 0 has no interface number 0 [ 271.060651][ T4368] usb 2-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.096510][ T4368] usb 2-1: config 0 interface 1 has no altsetting 0 [ 271.124390][ T4368] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 271.154672][ T4368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.197938][ T4368] usb 2-1: config 0 descriptor?? [ 271.234299][ T4368] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 273.450080][ T955] usb 2-1: USB disconnect, device number 12 [ 274.003829][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.695'. [ 274.260531][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 284.529275][ T7126] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.716'. [ 284.706259][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.718'. [ 285.019849][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 289.183111][ T7180] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.729'. [ 290.053340][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'. [ 290.363510][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 291.372691][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 296.103709][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.749'. [ 296.109302][ T7255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.750'. [ 296.412665][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.750'. [ 300.500618][ T4371] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 300.702585][ T4371] usb 3-1: Using ep0 maxpacket: 8 [ 300.710884][ T4371] usb 3-1: config 0 has no interfaces? [ 300.728028][ T4371] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 300.745626][ T4371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.761966][ T4371] usb 3-1: Product: syz [ 300.766226][ T4371] usb 3-1: Manufacturer: syz [ 300.771138][ T4371] usb 3-1: SerialNumber: syz [ 300.786637][ T4371] usb 3-1: config 0 descriptor?? [ 300.996485][ T4368] usb 3-1: USB disconnect, device number 13 [ 301.659756][ T7314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 301.690138][ T7316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 301.819857][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.760'. [ 301.979432][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 303.971605][ T4364] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 304.653952][ T4364] usb 5-1: device descriptor read/64, error -71 [ 305.330623][ T4364] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 305.499556][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.777'. [ 305.515879][ T4364] usb 5-1: device descriptor read/64, error -71 [ 305.640711][ T4364] usb usb5-port1: attempt power cycle [ 305.799577][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 306.070807][ T4364] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 306.092834][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 306.154132][ T4364] usb 5-1: device descriptor read/8, error -71 [ 306.480667][ T4364] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 306.538686][ T4364] usb 5-1: device descriptor read/8, error -71 [ 306.664883][ T4364] usb usb5-port1: unable to enumerate USB device [ 307.868889][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.783'. [ 309.700027][ T7407] blktrace: Concurrent blktraces are not allowed on loop4 [ 313.802461][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.798'. [ 314.805553][ T7460] blktrace: Concurrent blktraces are not allowed on loop8 [ 317.129034][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135557][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.640595][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.806'. [ 319.479491][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 319.488028][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 320.189511][ T7515] blktrace: Concurrent blktraces are not allowed on loop6 [ 321.243135][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 326.160699][ T7567] blktrace: Concurrent blktraces are not allowed on loop2 [ 328.651413][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 329.323529][ T4289] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 329.333341][ T4289] Bluetooth: hci3: Injecting HCI hardware error event [ 329.344218][ T4289] Bluetooth: hci3: hardware error 0x00 [ 329.960627][ T7] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 330.860859][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 330.878304][ T7] usb 2-1: config 0 has no interfaces? [ 330.891580][ T7] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 331.035505][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.043962][ T7] usb 2-1: Product: syz [ 331.048137][ T7] usb 2-1: Manufacturer: syz [ 331.053459][ T7] usb 2-1: SerialNumber: syz [ 331.067783][ T7] usb 2-1: config 0 descriptor?? [ 332.232674][ T4289] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 332.291658][ T7] usb 2-1: USB disconnect, device number 13 [ 332.680295][ T7637] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.845'. [ 332.896910][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 336.090332][ T7670] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.856'. [ 336.124684][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.852'. [ 336.978138][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'. [ 337.979405][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.867'. [ 338.005784][ T4364] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 338.217619][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 338.255774][ T4364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.338122][ T4364] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.348328][ T4364] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 338.358502][ T4364] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 338.381135][ T4364] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 338.400396][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 338.408700][ T4364] usb 1-1: Product: syz [ 338.420860][ T4364] usb 1-1: Manufacturer: syz [ 338.431977][ T4364] mos7840 1-1:1.0: required endpoints missing [ 338.528224][ T7716] netlink: 'syz.1.868': attribute type 72 has an invalid length. [ 339.206505][ T7726] blktrace: Concurrent blktraces are not allowed on loop2 [ 340.565812][ T7] usb 1-1: USB disconnect, device number 13 [ 340.736328][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 340.958194][ T7737] binder: 7736:7737 ioctl 4018620d 0 returned -22 [ 341.980617][ T4289] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 341.989183][ T4289] Bluetooth: hci1: Injecting HCI hardware error event [ 341.998588][ T4290] Bluetooth: hci1: hardware error 0x00 [ 343.796827][ T4289] Bluetooth: hci1: unexpected event for opcode 0x0007 [ 344.060589][ T4290] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 345.748307][ T7771] blktrace: Concurrent blktraces are not allowed on loop4 [ 346.770797][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 348.215563][ T7804] netlink: 20 bytes leftover after parsing attributes in process `syz.1.881'. [ 348.513208][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 351.957910][ T7839] blktrace: Concurrent blktraces are not allowed on loop8 [ 353.157122][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.900'. [ 353.283361][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.898'. [ 353.941463][ T127] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 354.201864][ T127] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.291410][ T127] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.367010][ T127] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 354.398492][ T127] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.450541][ T127] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 354.462056][ T7862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.903'. [ 354.484368][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 354.667133][ T127] usb 1-1: Product: syz [ 354.694975][ T127] usb 1-1: Manufacturer: syz [ 354.758499][ T127] mos7840 1-1:1.0: required endpoints missing [ 354.848503][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 356.588850][ T4370] usb 1-1: USB disconnect, device number 14 [ 357.110563][ T4370] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 357.681652][ T7901] binder: BINDER_SET_CONTEXT_MGR already set [ 357.687744][ T7901] binder: 7896:7901 ioctl 4018620d 200000000200 returned -16 [ 358.080846][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 358.103066][ T4370] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.140716][ T4370] usb 1-1: config 0 has no interface number 0 [ 358.177380][ T4370] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.207910][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 358.262634][ T7907] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.915'. [ 358.362648][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'. [ 358.378346][ T4370] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.388431][ T4370] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.402597][ T4370] usb 1-1: config 0 interface 1 has no altsetting 0 [ 358.414354][ T4370] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 358.423718][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.461318][ T4370] usb 1-1: config 0 descriptor?? [ 358.476515][ T4370] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 358.675949][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 358.902545][ T4370] usbhid 1-1:0.1: can't add hid device: -71 [ 358.918283][ T4370] usbhid: probe of 1-1:0.1 failed with error -71 [ 358.975140][ T4370] usb 1-1: USB disconnect, device number 15 [ 359.440587][ T4581] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 359.640674][ T4581] usb 2-1: Using ep0 maxpacket: 16 [ 359.662517][ T4581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.678080][ T4581] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 359.692030][ T4581] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.718178][ T4581] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 359.729283][ T4581] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 359.737592][ T4370] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 359.745526][ T4581] usb 2-1: Manufacturer: syz [ 359.764129][ T4581] usb 2-1: config 0 descriptor?? [ 359.934318][ T4370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.956400][ T4370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 359.966886][ T4370] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 359.977317][ T4370] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.986566][ T4364] usb 2-1: USB disconnect, device number 14 [ 359.992532][ T4370] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 360.006355][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 360.014699][ T4370] usb 4-1: Product: syz [ 360.019155][ T4370] usb 4-1: Manufacturer: syz [ 360.034362][ T4370] mos7840 4-1:1.0: required endpoints missing [ 361.682048][ T7955] binder: BINDER_SET_CONTEXT_MGR already set [ 361.694311][ T7955] binder: 7948:7955 ioctl 4018620d 200000000200 returned -16 [ 362.737495][ T4370] usb 4-1: USB disconnect, device number 12 [ 364.021555][ T7969] blktrace: Concurrent blktraces are not allowed on loop2 [ 367.158152][ T8009] binder: BINDER_SET_CONTEXT_MGR already set [ 367.164262][ T8009] binder: 8002:8009 ioctl 4018620d 200000000200 returned -16 [ 369.903738][ T8027] blktrace: Concurrent blktraces are not allowed on loop6 [ 373.614099][ T4581] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 373.840568][ T4581] usb 1-1: device descriptor read/64, error -71 [ 374.110669][ T4581] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 374.167044][ T8068] binder: 8067:8068 ioctl c0306201 0 returned -14 [ 374.411016][ T4581] usb 1-1: device descriptor read/64, error -71 [ 375.061178][ T4581] usb usb1-port1: attempt power cycle [ 375.807634][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.1.961'. [ 375.890616][ T4581] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 375.921389][ T4581] usb 1-1: Using ep0 maxpacket: 16 [ 375.928135][ T4581] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 375.973122][ T4581] usb 1-1: config 0 has no interface number 0 [ 376.013319][ T4581] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.063894][ T4581] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.236388][ T4581] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.277268][ T4581] usb 1-1: config 0 interface 1 has no altsetting 0 [ 376.297368][ T4581] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 376.316839][ T4581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.334998][ T4581] usb 1-1: config 0 descriptor?? [ 376.362261][ T4581] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 376.765148][ T4581] usbhid 1-1:0.1: can't add hid device: -71 [ 376.944563][ T4581] usbhid: probe of 1-1:0.1 failed with error -71 [ 377.592825][ T4581] usb 1-1: USB disconnect, device number 18 [ 377.849350][ T8119] binder: 8118:8119 ioctl c0306201 0 returned -14 [ 378.040718][ T8122] binder: BINDER_SET_CONTEXT_MGR already set [ 378.046785][ T8122] binder: 8115:8122 ioctl 4018620d 200000000200 returned -16 [ 378.383916][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.394099][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.210629][ T4581] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 379.782987][ T4581] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.941613][ T4581] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 379.989009][ T4581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 380.025791][ T4581] usb 1-1: Product: syz [ 380.032860][ T4581] usb 1-1: Manufacturer: syz [ 380.055416][ T4581] mos7840 1-1:1.0: required endpoints missing [ 380.343827][ T22] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 381.250603][ T22] usb 2-1: device descriptor read/64, error -71 [ 381.431297][ T14] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 381.520540][ T22] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 381.620531][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 381.627039][ T14] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.643788][ T14] usb 3-1: config 0 has no interface number 0 [ 381.670577][ T22] usb 2-1: device descriptor read/64, error -71 [ 381.681909][ T14] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.710498][ T14] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.734748][ T14] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.760499][ T14] usb 3-1: config 0 interface 1 has no altsetting 0 [ 381.767162][ T14] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 381.790847][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.848206][ T14] usb 3-1: config 0 descriptor?? [ 381.878747][ T22] usb usb2-port1: attempt power cycle [ 381.897714][ T14] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 381.937108][ T4581] usb 1-1: USB disconnect, device number 19 [ 382.346188][ T14] usbhid 3-1:0.1: can't add hid device: -71 [ 382.403951][ T14] usbhid: probe of 3-1:0.1 failed with error -71 [ 382.541280][ T14] usb 3-1: USB disconnect, device number 14 [ 382.840529][ T22] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 382.870814][ T4370] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 383.120733][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 383.133053][ T4370] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.337073][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.379273][ T22] usb 2-1: device descriptor read/8, error -71 [ 383.494784][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.613370][ T4370] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 383.652611][ T4370] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.678458][ T4370] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.701658][ T4370] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.710867][ T4370] usb 1-1: Manufacturer: syz [ 383.726031][ T4370] usb 1-1: config 0 descriptor?? [ 383.772883][ T8189] binder: 8188:8189 ioctl c0306201 0 returned -14 [ 385.262225][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 385.262238][ T27] audit: type=1326 audit(1792453327.325:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.386004][ T27] audit: type=1326 audit(1792453327.355:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.467084][ T27] audit: type=1326 audit(1792453327.355:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.500639][ T4370] rc_core: IR keymap rc-hauppauge not found [ 385.506663][ T4370] Registered IR keymap rc-empty [ 385.507989][ T27] audit: type=1326 audit(1792453327.355:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.519227][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.545971][ T27] audit: type=1326 audit(1792453327.355:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.573751][ T27] audit: type=1326 audit(1792453327.355:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.598421][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.600020][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.993'. [ 385.607180][ T27] audit: type=1326 audit(1792453327.355:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.640821][ T4370] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 385.656214][ T4370] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input21 [ 385.673315][ T27] audit: type=1326 audit(1792453327.355:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.698482][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.712411][ T27] audit: type=1326 audit(1792453327.355:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.736976][ T27] audit: type=1326 audit(1792453327.355:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.983" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d959e559 code=0x7ffc0000 [ 385.770951][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.812074][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.851299][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.880677][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.920810][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.965880][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.010823][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.040858][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.080793][ T4370] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.122402][ T4370] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 386.142026][ T4370] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 386.206619][ T4370] usb 1-1: USB disconnect, device number 20 [ 386.770580][ T4370] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 387.441747][ T8232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.189721][ T8232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.200545][ T4370] usb 1-1: Using ep0 maxpacket: 16 [ 388.207910][ T4370] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.251225][ T4370] usb 1-1: config 0 has no interface number 0 [ 388.257374][ T4370] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.311335][ T4370] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.503414][ T4370] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.516568][ T4370] usb 1-1: config 0 interface 1 has no altsetting 0 [ 388.523516][ T4370] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 388.532862][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.118350][ T4370] usb 1-1: config 0 descriptor?? [ 389.263310][ T4370] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 389.488103][ T4370] usbhid 1-1:0.1: can't add hid device: -71 [ 389.500777][ T4370] usbhid: probe of 1-1:0.1 failed with error -71 [ 389.584926][ T4370] usb 1-1: USB disconnect, device number 21 [ 389.785724][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 389.892467][ T8263] blktrace: Concurrent blktraces are not allowed on loop2 [ 391.399241][ T4370] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 392.967136][ T4370] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 392.980068][ T4370] usb 1-1: can't read configurations, error -71 [ 393.270515][ T4581] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 393.600519][ T4581] usb 4-1: Using ep0 maxpacket: 16 [ 393.844103][ T4581] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.020745][ T4581] usb 4-1: config 0 has no interface number 0 [ 394.028011][ T4581] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.042705][ T4581] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.054367][ T4581] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.069068][ T4581] usb 4-1: config 0 interface 1 has no altsetting 0 [ 394.148186][ T4581] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 394.158253][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.183921][ T4581] usb 4-1: config 0 descriptor?? [ 394.216799][ T4581] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 395.787481][ T8309] blktrace: Concurrent blktraces are not allowed on loop8 [ 396.962388][ T4581] usbhid 4-1:0.1: can't add hid device: -71 [ 396.968529][ T4581] usbhid: probe of 4-1:0.1 failed with error -71 [ 396.992838][ T4581] usb 4-1: USB disconnect, device number 13 [ 399.247909][ T8346] FAULT_INJECTION: forcing a failure. [ 399.247909][ T8346] name failslab, interval 1, probability 0, space 0, times 0 [ 399.261547][ T8346] CPU: 1 PID: 8346 Comm: syz.2.1033 Not tainted syzkaller #0 [ 399.268955][ T8346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 399.279034][ T8346] Call Trace: [ 399.282320][ T8346] [ 399.285254][ T8346] dump_stack_lvl+0x188/0x24e [ 399.289937][ T8346] ? show_regs_print_info+0x12/0x12 [ 399.295172][ T8346] ? load_image+0x410/0x410 [ 399.299672][ T8346] ? __might_sleep+0xd0/0xd0 [ 399.304257][ T8346] ? __lock_acquire+0x7ea0/0x7ea0 [ 399.309282][ T8346] should_fail_ex+0x390/0x4c0 [ 399.313997][ T8346] should_failslab+0x5/0x20 [ 399.318495][ T8346] slab_pre_alloc_hook+0x59/0x300 [ 399.323512][ T8346] ? mas_next_entry+0xde9/0xe90 [ 399.328358][ T8346] kmem_cache_alloc+0x56/0x2f0 [ 399.333114][ T8346] ? vm_area_dup+0x23/0x1a0 [ 399.337611][ T8346] vm_area_dup+0x23/0x1a0 [ 399.341932][ T8346] copy_mm+0xb13/0x1680 [ 399.346093][ T8346] ? copy_signal+0x640/0x640 [ 399.350700][ T8346] ? __init_rwsem+0x11e/0x160 [ 399.355384][ T8346] ? copy_signal+0x51f/0x640 [ 399.359987][ T8346] copy_process+0x1952/0x4070 [ 399.364672][ T8346] ? plist_add+0x3d7/0x490 [ 399.369101][ T8346] ? copy_process+0x974/0x4070 [ 399.373870][ T8346] ? futex_wait+0x4a3/0x5c0 [ 399.378383][ T8346] ? idle_dummy+0x10/0x10 [ 399.382723][ T8346] kernel_clone+0x24b/0x900 [ 399.387230][ T8346] ? create_io_thread+0x170/0x170 [ 399.392259][ T8346] ? do_futex+0x310/0x320 [ 399.396584][ T8346] __x64_sys_clone+0x1a7/0x220 [ 399.401345][ T8346] ? __ia32_sys_vfork+0x140/0x140 [ 399.406373][ T8346] ? lock_chain_count+0x20/0x20 [ 399.411227][ T8346] ? lockdep_hardirqs_on+0x94/0x140 [ 399.416430][ T8346] do_syscall_64+0x4c/0xa0 [ 399.420846][ T8346] ? clear_bhb_loop+0x60/0xb0 [ 399.425517][ T8346] ? clear_bhb_loop+0x60/0xb0 [ 399.430190][ T8346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.436090][ T8346] RIP: 0033:0x7f32ae99e559 [ 399.440504][ T8346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.460110][ T8346] RSP: 002b:00007f32af8f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 399.468517][ T8346] RAX: ffffffffffffffda RBX: 00007f32aec25fa0 RCX: 00007f32ae99e559 [ 399.476481][ T8346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080881000 [ 399.484447][ T8346] RBP: 00007f32aea35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 399.492413][ T8346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 399.500376][ T8346] R13: 00007f32aec26038 R14: 00007f32aec25fa0 R15: 00007ffd63fe1fa8 [ 399.508361][ T8346] [ 400.212753][ T8358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 401.905326][ T8381] jffs2: notice: (8381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 405.005718][ T4370] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 405.931226][ T4370] usb 1-1: Using ep0 maxpacket: 8 [ 405.941845][ T4370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 405.956413][ T4370] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 405.967074][ T4370] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 406.136133][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.149927][ T4370] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected [ 406.160775][ T4370] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 407.139065][ T7] usb 1-1: USB disconnect, device number 24 [ 407.170018][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 407.210978][ T7] kobil_sct 1-1:1.0: device disconnected [ 408.890799][ T8468] IPv6: Can't replace route, no match found [ 412.254408][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 412.283402][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1079'. [ 413.122801][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'. [ 413.448647][ T8536] ip_tables: iptables: counters copy to user failed while replacing table [ 413.640237][ T8539] device syzkaller0 entered promiscuous mode [ 414.144116][ T8559] syz.1.1096 uses obsolete (PF_INET,SOCK_PACKET) [ 416.908959][ T8592] FAULT_INJECTION: forcing a failure. [ 416.908959][ T8592] name failslab, interval 1, probability 0, space 0, times 0 [ 417.967308][ T8592] CPU: 0 PID: 8592 Comm: syz.4.1111 Not tainted syzkaller #0 [ 417.974760][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.984815][ T8592] Call Trace: [ 417.988121][ T8592] [ 417.991054][ T8592] dump_stack_lvl+0x188/0x24e [ 417.995733][ T8592] ? show_regs_print_info+0x12/0x12 [ 418.000955][ T8592] ? load_image+0x410/0x410 [ 418.005453][ T8592] ? __lock_acquire+0x7ea0/0x7ea0 [ 418.010478][ T8592] ? rwsem_write_trylock+0x135/0x1c0 [ 418.015770][ T8592] should_fail_ex+0x390/0x4c0 [ 418.020455][ T8592] should_failslab+0x5/0x20 [ 418.024952][ T8592] slab_pre_alloc_hook+0x59/0x300 [ 418.029972][ T8592] kmem_cache_alloc+0x56/0x2f0 [ 418.034725][ T8592] ? anon_vma_fork+0xe1/0x520 [ 418.039396][ T8592] anon_vma_fork+0xe1/0x520 [ 418.043914][ T8592] ? dup_userfaultfd+0x131/0x630 [ 418.048846][ T8592] ? vm_area_dup+0x11f/0x1a0 [ 418.053434][ T8592] copy_mm+0xc1d/0x1680 [ 418.057595][ T8592] ? copy_signal+0x640/0x640 [ 418.062194][ T8592] ? __init_rwsem+0x11e/0x160 [ 418.066871][ T8592] ? copy_signal+0x51f/0x640 [ 418.071462][ T8592] copy_process+0x1952/0x4070 [ 418.076136][ T8592] ? plist_add+0x3d7/0x490 [ 418.080557][ T8592] ? copy_process+0x974/0x4070 [ 418.085316][ T8592] ? futex_wait+0x4a3/0x5c0 [ 418.089834][ T8592] ? idle_dummy+0x10/0x10 [ 418.094192][ T8592] kernel_clone+0x24b/0x900 [ 418.098741][ T8592] ? create_io_thread+0x170/0x170 [ 418.103776][ T8592] ? do_futex+0x310/0x320 [ 418.108111][ T8592] __x64_sys_clone+0x1a7/0x220 [ 418.112875][ T8592] ? __ia32_sys_vfork+0x140/0x140 [ 418.117909][ T8592] ? lock_chain_count+0x20/0x20 [ 418.122766][ T8592] ? lockdep_hardirqs_on+0x94/0x140 [ 418.127965][ T8592] do_syscall_64+0x4c/0xa0 [ 418.132383][ T8592] ? clear_bhb_loop+0x60/0xb0 [ 418.137074][ T8592] ? clear_bhb_loop+0x60/0xb0 [ 418.141748][ T8592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.147639][ T8592] RIP: 0033:0x7f7ac439e559 [ 418.152054][ T8592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.171666][ T8592] RSP: 002b:00007f7ac530dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 418.180080][ T8592] RAX: ffffffffffffffda RBX: 00007f7ac4625fa0 RCX: 00007f7ac439e559 [ 418.188050][ T8592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080881000 [ 418.196017][ T8592] RBP: 00007f7ac4435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 418.203983][ T8592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.211945][ T8592] R13: 00007f7ac4626038 R14: 00007f7ac4625fa0 R15: 00007ffe163cb3e8 [ 418.219924][ T8592] [ 418.299231][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1107'. [ 418.670576][ T14] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 419.674401][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 419.700550][ T14] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 419.708602][ T14] usb 4-1: config 0 has no interface number 0 [ 419.740648][ T14] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.760565][ T14] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.780696][ T14] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.840511][ T14] usb 4-1: config 0 interface 1 has no altsetting 0 [ 419.860538][ T14] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 419.884552][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.916009][ T14] usb 4-1: config 0 descriptor?? [ 419.951653][ T14] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 420.904947][ T14] usbhid 4-1:0.1: can't add hid device: -71 [ 420.925153][ T14] usbhid: probe of 4-1:0.1 failed with error -71 [ 420.937876][ T14] usb 4-1: USB disconnect, device number 14 [ 421.249203][ T8651] FAULT_INJECTION: forcing a failure. [ 421.249203][ T8651] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 421.263140][ T8651] CPU: 1 PID: 8651 Comm: syz.2.1129 Not tainted syzkaller #0 [ 421.270541][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.280620][ T8651] Call Trace: [ 421.283908][ T8651] [ 421.286845][ T8651] dump_stack_lvl+0x188/0x24e [ 421.291542][ T8651] ? show_regs_print_info+0x12/0x12 [ 421.296767][ T8651] ? load_image+0x410/0x410 [ 421.301285][ T8651] ? __lock_acquire+0x7ea0/0x7ea0 [ 421.306337][ T8651] should_fail_ex+0x390/0x4c0 [ 421.311045][ T8651] prepare_alloc_pages+0x1e1/0x5b0 [ 421.316183][ T8651] __alloc_pages+0x130/0x4f0 [ 421.320799][ T8651] ? zone_statistics+0x170/0x170 [ 421.325762][ T8651] ? alloc_pages+0x4dd/0x740 [ 421.330375][ T8651] get_zeroed_page+0x13/0x30 [ 421.334985][ T8651] __pud_alloc+0x31/0x150 [ 421.339333][ T8651] ? copy_page_range+0x706/0x3a60 [ 421.344403][ T8651] copy_page_range+0x3643/0x3a60 [ 421.349362][ T8651] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 421.355375][ T8651] ? mas_wr_walk+0x6da/0x730 [ 421.360007][ T8651] ? mas_store+0x566/0x680 [ 421.364441][ T8651] ? pfn_valid+0x450/0x450 [ 421.368900][ T8651] ? anon_vma_fork+0x4bc/0x520 [ 421.373698][ T8651] copy_mm+0xeb0/0x1680 [ 421.377889][ T8651] ? copy_signal+0x640/0x640 [ 421.382526][ T8651] ? __init_rwsem+0x11e/0x160 [ 421.387225][ T8651] ? copy_signal+0x51f/0x640 [ 421.391837][ T8651] copy_process+0x1952/0x4070 [ 421.396543][ T8651] ? copy_process+0x974/0x4070 [ 421.401324][ T8651] ? preempt_schedule_thunk+0x16/0x18 [ 421.406726][ T8651] ? idle_dummy+0x10/0x10 [ 421.411070][ T8651] ? wake_up_q+0x8c/0xc0 [ 421.415343][ T8651] kernel_clone+0x24b/0x900 [ 421.419860][ T8651] ? futex_wake_mark+0x150/0x150 [ 421.424811][ T8651] ? __might_fault+0xc2/0x120 [ 421.429510][ T8651] ? create_io_thread+0x170/0x170 [ 421.434555][ T8651] ? bpf_obj_get_next_id+0x147/0x1c0 [ 421.439872][ T8651] ? do_futex+0x2e2/0x320 [ 421.444222][ T8651] __x64_sys_clone+0x1a7/0x220 [ 421.449005][ T8651] ? __ia32_sys_vfork+0x140/0x140 [ 421.454058][ T8651] ? lock_chain_count+0x20/0x20 [ 421.458948][ T8651] ? lockdep_hardirqs_on+0x94/0x140 [ 421.464169][ T8651] do_syscall_64+0x4c/0xa0 [ 421.468601][ T8651] ? clear_bhb_loop+0x60/0xb0 [ 421.473299][ T8651] ? clear_bhb_loop+0x60/0xb0 [ 421.477995][ T8651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.483905][ T8651] RIP: 0033:0x7f32ae99e559 [ 421.488329][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.507950][ T8651] RSP: 002b:00007f32af8f5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 421.516384][ T8651] RAX: ffffffffffffffda RBX: 00007f32aec25fa0 RCX: 00007f32ae99e559 [ 421.524372][ T8651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080881000 [ 421.532355][ T8651] RBP: 00007f32aea35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 421.540338][ T8651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.548326][ T8651] R13: 00007f32aec26038 R14: 00007f32aec25fa0 R15: 00007ffd63fe1fa8 [ 421.556330][ T8651] [ 425.429860][ T8721] FAULT_INJECTION: forcing a failure. [ 425.429860][ T8721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.448854][ T8721] CPU: 0 PID: 8721 Comm: syz.4.1142 Not tainted syzkaller #0 [ 425.456263][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 425.466316][ T8721] Call Trace: [ 425.469580][ T8721] [ 425.472500][ T8721] dump_stack_lvl+0x188/0x24e [ 425.477171][ T8721] ? show_regs_print_info+0x12/0x12 [ 425.482382][ T8721] ? load_image+0x410/0x410 [ 425.486893][ T8721] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.491912][ T8721] should_fail_ex+0x390/0x4c0 [ 425.496582][ T8721] prepare_alloc_pages+0x1e1/0x5b0 [ 425.501703][ T8721] __alloc_pages+0x130/0x4f0 [ 425.506320][ T8721] ? zone_statistics+0x170/0x170 [ 425.511297][ T8721] __pmd_alloc+0xa6/0x760 [ 425.515645][ T8721] ? __lock_acquire+0x7ea0/0x7ea0 [ 425.520686][ T8721] ? do_raw_spin_lock+0x128/0x2f0 [ 425.525711][ T8721] ? __pud_alloc+0x150/0x150 [ 425.530287][ T8721] ? __rwlock_init+0x140/0x140 [ 425.535036][ T8721] ? do_raw_spin_unlock+0x11d/0x230 [ 425.540218][ T8721] ? _raw_spin_unlock+0x24/0x40 [ 425.545053][ T8721] ? __pud_alloc+0x12b/0x150 [ 425.549634][ T8721] copy_page_range+0x35a6/0x3a60 [ 425.554559][ T8721] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 425.560585][ T8721] ? mas_store+0x566/0x680 [ 425.565023][ T8721] ? pfn_valid+0x450/0x450 [ 425.569475][ T8721] ? anon_vma_fork+0x4bc/0x520 [ 425.574266][ T8721] copy_mm+0xeb0/0x1680 [ 425.578460][ T8721] ? copy_signal+0x640/0x640 [ 425.583085][ T8721] ? __init_rwsem+0x11e/0x160 [ 425.587779][ T8721] ? copy_signal+0x51f/0x640 [ 425.592384][ T8721] copy_process+0x1952/0x4070 [ 425.597089][ T8721] ? copy_process+0x974/0x4070 [ 425.601865][ T8721] ? preempt_schedule_thunk+0x16/0x18 [ 425.607267][ T8721] ? idle_dummy+0x10/0x10 [ 425.611617][ T8721] ? wake_up_q+0x8c/0xc0 [ 425.615895][ T8721] kernel_clone+0x24b/0x900 [ 425.620409][ T8721] ? futex_wake_mark+0x150/0x150 [ 425.625357][ T8721] ? create_io_thread+0x170/0x170 [ 425.630406][ T8721] ? do_futex+0x2e2/0x320 [ 425.634747][ T8721] __x64_sys_clone+0x1a7/0x220 [ 425.639521][ T8721] ? __ia32_sys_vfork+0x140/0x140 [ 425.644568][ T8721] ? lock_chain_count+0x20/0x20 [ 425.649442][ T8721] ? lockdep_hardirqs_on+0x94/0x140 [ 425.654667][ T8721] do_syscall_64+0x4c/0xa0 [ 425.659092][ T8721] ? clear_bhb_loop+0x60/0xb0 [ 425.663778][ T8721] ? clear_bhb_loop+0x60/0xb0 [ 425.668470][ T8721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.674377][ T8721] RIP: 0033:0x7f7ac439e559 [ 425.678804][ T8721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.698425][ T8721] RSP: 002b:00007f7ac530dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 425.706858][ T8721] RAX: ffffffffffffffda RBX: 00007f7ac4625fa0 RCX: 00007f7ac439e559 [ 425.714838][ T8721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080881000 [ 425.722819][ T8721] RBP: 00007f7ac4435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 425.730886][ T8721] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 425.738864][ T8721] R13: 00007f7ac4626038 R14: 00007f7ac4625fa0 R15: 00007ffe163cb3e8 [ 425.746862][ T8721] [ 428.303802][ T8684] device syzkaller0 entered promiscuous mode [ 428.315757][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1137'. [ 429.530236][ T8766] binder: BINDER_SET_CONTEXT_MGR already set [ 429.655299][ T8766] binder: 8756:8766 ioctl 4018620d 200000000200 returned -16 [ 429.823219][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 430.431237][ T4368] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 430.648220][ T4368] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.665911][ T4368] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.693667][ T4368] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 430.703102][ T4368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 430.712226][ T4368] usb 3-1: Product: syz [ 430.716490][ T4368] usb 3-1: Manufacturer: syz [ 430.740149][ T4368] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 431.227683][ T4368] mos7840: probe of ttyUSB0 failed with error -32 [ 431.287032][ T4368] usb 3-1: USB disconnect, device number 15 [ 431.304415][ T4368] mos7840 3-1:1.0: device disconnected [ 432.655034][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 434.805545][ T8852] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.967442][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1176'. [ 435.850616][ T8831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.530472][ T8868] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 437.350530][ T4562] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 437.505597][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 437.546896][ T4562] usb 1-1: Using ep0 maxpacket: 8 [ 437.557206][ T4562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.608374][ T4562] usb 1-1: config 0 has no interfaces? [ 437.637861][ T4562] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 437.723349][ T4562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 437.745008][ T4562] usb 1-1: Product: syz [ 437.761349][ T4562] usb 1-1: Manufacturer: syz [ 437.811622][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 437.839725][ T4562] usb 1-1: SerialNumber: syz [ 438.018863][ T4562] usb 1-1: config 0 descriptor?? [ 439.818069][ T8925] No source specified [ 439.824974][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.831560][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.131808][ T4562] usb 1-1: USB disconnect, device number 25 [ 440.187977][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 440.577822][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 443.130815][ T8959] No source specified [ 444.759192][ T8989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1216'. [ 444.849651][ T8991] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 444.881050][ T8991] xt_SECMARK: invalid mode: 9 [ 445.081928][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1216'. [ 445.843451][ T8998] No source specified [ 445.937959][ T9002] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1221'. [ 447.287361][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1231'. [ 447.986320][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 448.199835][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 448.561565][ T9066] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 448.753256][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1236'. [ 448.876697][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 449.803114][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:2391007038/2391007040 [ 449.835734][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:2391007038/2391007039 [ 449.891554][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:2391007038/2391007039 [ 449.950562][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:2391007038/2391007040 [ 450.039382][ T9088] tipc: Failed to remove unknown binding: 66,0,0/0:2391007038/2391007039 [ 450.044663][ T9096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1251'. [ 450.864844][ T9109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1256'. [ 451.161820][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 452.859472][ T4562] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 453.040520][ T4562] usb 4-1: Using ep0 maxpacket: 16 [ 453.047585][ T4562] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 453.070816][ T4562] usb 4-1: config 0 has no interface number 0 [ 453.083674][ T4562] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.128933][ T4562] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.139087][ T4562] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.165338][ T4562] usb 4-1: config 0 interface 1 has no altsetting 0 [ 453.190064][ T4562] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 453.212696][ T4562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.408128][ T4562] usb 4-1: config 0 descriptor?? [ 453.443052][ T4562] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 453.838448][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 453.850665][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 453.857487][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 453.929502][ T9178] blktrace: Concurrent blktraces are not allowed on loop2 [ 454.795406][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 454.820636][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 454.850940][ T4562] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 454.890512][ T4562] elan 0003:04F3:074D.0005: unbalanced collection at end of report description [ 454.926240][ T4562] elan 0003:04F3:074D.0005: Hid Parse failed [ 454.939520][ T4562] elan: probe of 0003:04F3:074D.0005 failed with error -22 [ 454.980417][ T4562] usb 4-1: USB disconnect, device number 15 [ 455.126521][ T9192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.136199][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.710691][ T5927] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 455.900817][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 455.907543][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.932480][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.953977][ T5927] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 455.973575][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 455.993549][ T5927] usb 3-1: Product: syz [ 456.002017][ T5927] usb 3-1: Manufacturer: syz [ 456.011945][ T5927] usb 3-1: SerialNumber: syz [ 456.033833][ T5927] usb 3-1: config 0 descriptor?? [ 456.296067][ T9218] blktrace: Concurrent blktraces are not allowed on loop6 [ 457.424294][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1293'. [ 457.760539][ T4562] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 457.960959][ T4562] usb 2-1: Using ep0 maxpacket: 16 [ 457.970667][ T4562] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 457.985557][ T4562] usb 2-1: config 0 has no interface number 0 [ 458.001727][ T4562] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.028990][ T4562] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.044801][ T4562] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.066957][ T4562] usb 2-1: config 0 interface 1 has no altsetting 0 [ 458.077455][ T4562] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 458.102522][ T4562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.127263][ T4562] usb 2-1: config 0 descriptor?? [ 458.155887][ T4562] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 458.413063][ T4370] usb 3-1: USB disconnect, device number 16 [ 458.544906][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.561833][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.582448][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.599497][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.608130][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.635478][ T4562] elan 0003:04F3:074D.0006: unknown main item tag 0x0 [ 458.660730][ T4562] elan 0003:04F3:074D.0006: unbalanced collection at end of report description [ 458.679506][ T4562] elan 0003:04F3:074D.0006: Hid Parse failed [ 458.686814][ T4562] elan: probe of 0003:04F3:074D.0006 failed with error -22 [ 458.749506][ T26] usb 2-1: USB disconnect, device number 19 [ 459.650134][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 460.160640][ T4562] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 460.360720][ T4562] usb 4-1: Using ep0 maxpacket: 8 [ 460.367851][ T4562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.396963][ T4562] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.155251][ T4562] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 461.184726][ T4562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 461.212344][ T4562] usb 4-1: Product: syz [ 461.226894][ T4562] usb 4-1: Manufacturer: syz [ 461.237059][ T4562] usb 4-1: SerialNumber: syz [ 461.274396][ T4562] usb 4-1: config 0 descriptor?? [ 461.431127][ T5927] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 461.650606][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 461.657255][ T5927] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 461.690512][ T5927] usb 5-1: config 0 has no interface number 0 [ 461.711691][ T5927] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.760712][ T5927] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.801068][ T5927] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.826034][ T5927] usb 5-1: config 0 interface 1 has no altsetting 0 [ 461.842969][ T5927] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 461.866490][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.894250][ T5927] usb 5-1: config 0 descriptor?? [ 461.915720][ T5927] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 462.247168][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 462.286474][ T9311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.321393][ T5927] elan 0003:04F3:074D.0007: unknown main item tag 0x0 [ 462.340120][ T5927] elan 0003:04F3:074D.0007: unknown main item tag 0x0 [ 462.364965][ T5927] elan 0003:04F3:074D.0007: unbalanced collection at end of report description [ 462.408367][ T5927] elan 0003:04F3:074D.0007: Hid Parse failed [ 462.427836][ T5927] elan: probe of 0003:04F3:074D.0007 failed with error -22 [ 462.525342][ T5927] usb 5-1: USB disconnect, device number 18 [ 463.399752][ T4413] usb 4-1: USB disconnect, device number 16 [ 464.418010][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1329'. [ 464.606723][ T9350] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 464.635910][ T9350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 465.040542][ T4562] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 466.470575][ T4413] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 466.650581][ T4413] usb 1-1: Using ep0 maxpacket: 8 [ 466.657697][ T4413] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.674751][ T4413] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 466.687607][ T4413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 466.698533][ T4413] usb 1-1: Product: syz [ 466.706662][ T4413] usb 1-1: Manufacturer: syz [ 466.713675][ T4413] usb 1-1: SerialNumber: syz [ 466.734997][ T4413] usb 1-1: config 0 descriptor?? [ 467.058262][ T4562] usb 4-1: Using ep0 maxpacket: 16 [ 467.066742][ T4562] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.414118][ T4562] usb 4-1: config 0 has no interface number 0 [ 467.420300][ T4562] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.431252][ T4562] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.441066][ T4562] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.454254][ T4562] usb 4-1: config 0 interface 1 has no altsetting 0 [ 467.461192][ T4562] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 467.470253][ T4562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.480573][ T4562] usb 4-1: config 0 descriptor?? [ 467.489241][ T4562] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 467.895591][ T4562] elan 0003:04F3:074D.0008: unknown main item tag 0x0 [ 467.908788][ T4562] elan 0003:04F3:074D.0008: unknown main item tag 0x0 [ 467.930762][ T4562] elan 0003:04F3:074D.0008: unbalanced collection at end of report description [ 467.940287][ T4562] elan 0003:04F3:074D.0008: Hid Parse failed [ 467.980656][ T4562] elan: probe of 0003:04F3:074D.0008 failed with error -22 [ 468.097470][ T8904] usb 4-1: USB disconnect, device number 17 [ 468.158911][ T9394] nftables ruleset with unbound chain [ 468.965063][ T9417] jffs2: notice: (9417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 469.226055][ T4370] usb 1-1: USB disconnect, device number 26 [ 470.882819][ T9400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.894904][ T9400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.052231][ T9449] jffs2: notice: (9449) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 471.430696][ T7] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 471.489945][ T9476] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1374'. [ 471.516973][ T9478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.557502][ T9478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.630871][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 471.644249][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 471.673040][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 471.692273][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 471.717836][ T7] usb 1-1: Product: syz [ 471.732036][ T7] usb 1-1: Manufacturer: syz [ 471.744505][ T7] usb 1-1: SerialNumber: syz [ 471.767209][ T7] usb 1-1: config 0 descriptor?? [ 472.086199][ T9493] jffs2: notice: (9493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 473.039285][ T9511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 473.047389][ T9511] infiniband syz0: set active [ 473.053866][ T9511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.074703][ T9512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1388'. [ 473.665301][ T9530] binder: BINDER_SET_CONTEXT_MGR already set [ 473.671680][ T9530] binder: 9527:9530 ioctl 4018620d 200000000200 returned -16 [ 474.166351][ T9542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.185489][ T9542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.197797][ T5927] usb 1-1: USB disconnect, device number 27 [ 474.256982][ T9542] MPTCP: kernel_bind error, err=-98 [ 474.569118][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1408'. [ 475.382720][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 475.650565][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 475.668001][ T7] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 475.676092][ T7] usb 3-1: config 0 has no interface number 0 [ 475.682348][ T7] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.693705][ T7] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.705975][ T7] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.719136][ T7] usb 3-1: config 0 interface 1 has no altsetting 0 [ 475.725961][ T7] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 475.735157][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.745661][ T9577] binder: BINDER_SET_CONTEXT_MGR already set [ 475.751712][ T9577] binder: 9574:9577 ioctl 4018620d 200000000200 returned -16 [ 475.769312][ T7] usb 3-1: config 0 descriptor?? [ 475.774401][ T3910] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 475.805155][ T7] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 475.949443][ T9579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.959428][ T9579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.000512][ T3910] usb 4-1: Using ep0 maxpacket: 8 [ 476.007824][ T3910] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.026838][ T3910] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 476.039089][ T3910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 476.055554][ T3910] usb 4-1: Product: syz [ 476.059979][ T3910] usb 4-1: Manufacturer: syz [ 476.069408][ T3910] usb 4-1: SerialNumber: syz [ 476.093708][ T3910] usb 4-1: config 0 descriptor?? [ 476.197879][ T7] elan 0003:04F3:074D.0009: unknown main item tag 0x0 [ 476.207444][ T7] elan 0003:04F3:074D.0009: unbalanced collection at end of report description [ 476.230382][ T7] elan 0003:04F3:074D.0009: Hid Parse failed [ 476.243271][ T7] elan: probe of 0003:04F3:074D.0009 failed with error -22 [ 476.399431][ T3910] usb 3-1: USB disconnect, device number 17 [ 477.456658][ T9601] ip_tables: iptables: counters copy to user failed while replacing table [ 477.557332][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.566725][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.582099][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.609764][ T9607] device bridge_slave_0 left promiscuous mode [ 477.623706][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.645844][ T9607] device bridge_slave_1 left promiscuous mode [ 477.655701][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.669206][ T9607] bond0: (slave bond_slave_0): Releasing backup interface [ 477.688977][ T9607] bond0: (slave bond_slave_1): Releasing backup interface [ 477.757582][ T9607] team0: Port device team_slave_0 removed [ 477.782152][ T9607] team0: Port device team_slave_1 removed [ 477.788698][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.797762][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.813052][ T9607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.826010][ T9607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.218763][ T9620] binder: BINDER_SET_CONTEXT_MGR already set [ 478.224975][ T9620] binder: 9618:9620 ioctl 4018620d 200000000200 returned -16 [ 478.538513][ T8904] usb 4-1: USB disconnect, device number 18 [ 478.927314][ T9642] [ 478.929690][ T9642] ====================================================== [ 478.936710][ T9642] WARNING: possible circular locking dependency detected [ 478.943743][ T9642] syzkaller #0 Not tainted [ 478.948152][ T9642] ------------------------------------------------------ [ 478.955165][ T9642] syz.4.1433/9642 is trying to acquire lock: [ 478.961131][ T9642] ffff88807be8c350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x55c/0xd10 [ 478.970263][ T9642] [ 478.970263][ T9642] but task is already holding lock: [ 478.977613][ T9642] ffff88807be88510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 478.988223][ T9642] [ 478.988223][ T9642] which lock already depends on the new lock. [ 478.988223][ T9642] [ 478.998610][ T9642] [ 478.998610][ T9642] the existing dependency chain (in reverse order) is: [ 479.007608][ T9642] [ 479.007608][ T9642] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 479.016284][ T9642] __mutex_lock+0x12d/0xae0 [ 479.021309][ T9642] nfc_urelease_event_work+0x120/0x310 [ 479.027278][ T9642] process_one_work+0x8ab/0x1160 [ 479.032727][ T9642] worker_thread+0xaf5/0x12a0 [ 479.037915][ T9642] kthread+0x29d/0x330 [ 479.042491][ T9642] ret_from_fork+0x1f/0x30 [ 479.047420][ T9642] [ 479.047420][ T9642] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 479.055226][ T9642] __mutex_lock+0x12d/0xae0 [ 479.060242][ T9642] nfc_register_device+0x38/0x300 [ 479.065780][ T9642] nci_register_device+0x89f/0x9f0 [ 479.071401][ T9642] virtual_ncidev_open+0x55/0xc0 [ 479.076851][ T9642] misc_open+0x31f/0x390 [ 479.081605][ T9642] chrdev_open+0x585/0x5f0 [ 479.086530][ T9642] do_dentry_open+0x7dd/0x10b0 [ 479.091803][ T9642] path_openat+0x2674/0x2f10 [ 479.096902][ T9642] do_filp_open+0x1ee/0x420 [ 479.101912][ T9642] do_sys_openat2+0x14b/0x4f0 [ 479.107106][ T9642] __x64_sys_openat+0x135/0x160 [ 479.112468][ T9642] do_syscall_64+0x4c/0xa0 [ 479.117393][ T9642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.123795][ T9642] [ 479.123795][ T9642] -> #1 (nci_mutex){+.+.}-{3:3}: [ 479.130913][ T9642] __mutex_lock+0x12d/0xae0 [ 479.135927][ T9642] virtual_nci_close+0x13/0x40 [ 479.141206][ T9642] nci_dev_up+0x976/0xd90 [ 479.146046][ T9642] nfc_dev_up+0x15d/0x310 [ 479.150890][ T9642] nfc_genl_dev_up+0x85/0xd0 [ 479.155989][ T9642] genl_family_rcv_msg_doit+0x22f/0x350 [ 479.162045][ T9642] genl_rcv_msg+0x601/0x790 [ 479.167056][ T9642] netlink_rcv_skb+0x1ef/0x440 [ 479.172331][ T9642] genl_rcv+0x24/0x40 [ 479.176834][ T9642] netlink_unicast+0x7ad/0x920 [ 479.182106][ T9642] netlink_sendmsg+0x8ad/0xbd0 [ 479.187383][ T9642] ____sys_sendmsg+0x5ed/0x9a0 [ 479.192653][ T9642] ___sys_sendmsg+0x2a2/0x360 [ 479.197836][ T9642] __se_sys_sendmsg+0x1c3/0x2b0 [ 479.203192][ T9642] do_syscall_64+0x4c/0xa0 [ 479.208118][ T9642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.214521][ T9642] [ 479.214521][ T9642] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 479.222164][ T9642] __lock_acquire+0x3a03/0x7ea0 [ 479.227539][ T9642] lock_acquire+0x1bc/0x4a0 [ 479.232579][ T9642] __mutex_lock+0x12d/0xae0 [ 479.237608][ T9642] nci_start_poll+0x55c/0xd10 [ 479.242804][ T9642] nfc_start_poll+0x141/0x2c0 [ 479.247995][ T9642] nfc_genl_start_poll+0x1d7/0x340 [ 479.253615][ T9642] genl_family_rcv_msg_doit+0x22f/0x350 [ 479.259671][ T9642] genl_rcv_msg+0x601/0x790 [ 479.264691][ T9642] netlink_rcv_skb+0x1ef/0x440 [ 479.270074][ T9642] genl_rcv+0x24/0x40 [ 479.274652][ T9642] netlink_unicast+0x7ad/0x920 [ 479.279923][ T9642] netlink_sendmsg+0x8ad/0xbd0 [ 479.285195][ T9642] ____sys_sendmsg+0x5ed/0x9a0 [ 479.290465][ T9642] ___sys_sendmsg+0x2a2/0x360 [ 479.295649][ T9642] __se_sys_sendmsg+0x1c3/0x2b0 [ 479.301007][ T9642] do_syscall_64+0x4c/0xa0 [ 479.305933][ T9642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.312333][ T9642] [ 479.312333][ T9642] other info that might help us debug this: [ 479.312333][ T9642] [ 479.322543][ T9642] Chain exists of: [ 479.322543][ T9642] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 479.322543][ T9642] [ 479.336786][ T9642] Possible unsafe locking scenario: [ 479.336786][ T9642] [ 479.344227][ T9642] CPU0 CPU1 [ 479.349578][ T9642] ---- ---- [ 479.354925][ T9642] lock(&genl_data->genl_data_mutex); [ 479.360370][ T9642] lock(nfc_devlist_mutex); [ 479.367467][ T9642] lock(&genl_data->genl_data_mutex); [ 479.375431][ T9642] lock(&ndev->req_lock); [ 479.379837][ T9642] [ 479.379837][ T9642] *** DEADLOCK *** [ 479.379837][ T9642] [ 479.387959][ T9642] 4 locks held by syz.4.1433/9642: [ 479.393062][ T9642] #0: ffffffff8ebb71d0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 479.401234][ T9642] #1: ffffffff8ebb6fe8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x107/0x790 [ 479.410265][ T9642] #2: ffff88807be88510 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 479.421293][ T9642] #3: ffff88807be88100 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 479.430415][ T9642] [ 479.430415][ T9642] stack backtrace: [ 479.436289][ T9642] CPU: 1 PID: 9642 Comm: syz.4.1433 Not tainted syzkaller #0 [ 479.443645][ T9642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 479.453688][ T9642] Call Trace: [ 479.456959][ T9642] [ 479.459887][ T9642] dump_stack_lvl+0x188/0x24e [ 479.464561][ T9642] ? load_image+0x410/0x410 [ 479.469051][ T9642] ? show_regs_print_info+0x12/0x12 [ 479.474265][ T9642] ? print_circular_bug+0x12b/0x1a0 [ 479.479476][ T9642] check_noncircular+0x2f8/0x400 [ 479.484432][ T9642] ? print_deadlock_bug+0x5d0/0x5d0 [ 479.489637][ T9642] ? lockdep_lock+0xf1/0x1f0 [ 479.494232][ T9642] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 479.500116][ T9642] ? _find_first_zero_bit+0xd2/0x100 [ 479.505391][ T9642] __lock_acquire+0x3a03/0x7ea0 [ 479.510234][ T9642] ? __stack_depot_save+0x439/0x480 [ 479.515429][ T9642] ? kasan_set_track+0x4b/0x70 [ 479.520184][ T9642] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 479.525285][ T9642] ? nfc_start_poll+0x141/0x2c0 [ 479.530126][ T9642] ? netlink_unicast+0x7ad/0x920 [ 479.535051][ T9642] ? netlink_sendmsg+0x8ad/0xbd0 [ 479.539977][ T9642] ? ____sys_sendmsg+0x5ed/0x9a0 [ 479.544908][ T9642] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 479.549919][ T9642] ? do_syscall_64+0x4c/0xa0 [ 479.554500][ T9642] ? verify_lock_unused+0x140/0x140 [ 479.559693][ T9642] ? mark_lock+0x94/0x320 [ 479.564017][ T9642] lock_acquire+0x1bc/0x4a0 [ 479.568509][ T9642] ? nci_start_poll+0x55c/0xd10 [ 479.573349][ T9642] ? kasan_quarantine_put+0xd4/0x210 [ 479.578625][ T9642] ? __might_sleep+0xd0/0xd0 [ 479.583202][ T9642] ? read_lock_is_recursive+0x10/0x10 [ 479.588563][ T9642] ? slab_free_freelist_hook+0x133/0x1b0 [ 479.594187][ T9642] ? nfc_llcp_build_gb+0x31f/0x3e0 [ 479.599285][ T9642] ? __kmem_cache_free+0xb6/0x200 [ 479.604305][ T9642] __mutex_lock+0x12d/0xae0 [ 479.608802][ T9642] ? nci_start_poll+0x55c/0xd10 [ 479.613646][ T9642] ? nfc_llcp_general_bytes+0x240/0x240 [ 479.619178][ T9642] ? nci_start_poll+0x55c/0xd10 [ 479.624018][ T9642] ? mutex_lock_nested+0x10/0x10 [ 479.628947][ T9642] ? nfc_llcp_general_bytes+0x141/0x240 [ 479.634480][ T9642] ? nfc_llcp_general_bytes+0x204/0x240 [ 479.640012][ T9642] nci_start_poll+0x55c/0xd10 [ 479.644684][ T9642] ? nci_dev_down+0x40/0x40 [ 479.649177][ T9642] ? trace_raw_output_contention_end+0xd0/0xd0 [ 479.655319][ T9642] ? __mutex_trylock_common+0x15c/0x260 [ 479.660856][ T9642] ? rcu_is_watching+0x11/0xa0 [ 479.665614][ T9642] ? trace_contention_end+0x5f/0x170 [ 479.670889][ T9642] ? __mutex_lock+0x1ab/0xae0 [ 479.675554][ T9642] ? trace_contention_end+0x5f/0x170 [ 479.680829][ T9642] ? __mutex_lock+0x1ab/0xae0 [ 479.685495][ T9642] ? nfc_start_poll+0x4f/0x2c0 [ 479.690252][ T9642] ? nfc_get_device+0x82/0xd0 [ 479.694921][ T9642] ? nfc_release+0x2e0/0x2e0 [ 479.699502][ T9642] nfc_start_poll+0x141/0x2c0 [ 479.704169][ T9642] nfc_genl_start_poll+0x1d7/0x340 [ 479.709267][ T9642] genl_family_rcv_msg_doit+0x22f/0x350 [ 479.714808][ T9642] ? end_current_label_crit_section+0x170/0x170 [ 479.721041][ T9642] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 479.726929][ T9642] ? bpf_lsm_capable+0x5/0x10 [ 479.731597][ T9642] ? security_capable+0x85/0xb0 [ 479.736437][ T9642] genl_rcv_msg+0x601/0x790 [ 479.740934][ T9642] ? genl_bind+0x360/0x360 [ 479.745337][ T9642] ? nfc_genl_dev_down+0xd0/0xd0 [ 479.750265][ T9642] netlink_rcv_skb+0x1ef/0x440 [ 479.755015][ T9642] ? genl_bind+0x360/0x360 [ 479.759419][ T9642] ? netlink_ack+0x1160/0x1160 [ 479.764181][ T9642] ? down_read+0x1a8/0x2d0 [ 479.768610][ T9642] genl_rcv+0x24/0x40 [ 479.772587][ T9642] netlink_unicast+0x7ad/0x920 [ 479.777343][ T9642] netlink_sendmsg+0x8ad/0xbd0 [ 479.782099][ T9642] ? netlink_getsockopt+0x550/0x550 [ 479.787287][ T9642] ? apparmor_socket_sendmsg+0x8a/0x330 [ 479.792847][ T9642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 479.798117][ T9642] ? security_socket_sendmsg+0x7c/0xa0 [ 479.803571][ T9642] ? netlink_getsockopt+0x550/0x550 [ 479.808756][ T9642] ____sys_sendmsg+0x5ed/0x9a0 [ 479.813508][ T9642] ? __sys_sendmsg_sock+0x30/0x30 [ 479.818520][ T9642] ? __import_iovec+0x306/0x510 [ 479.823364][ T9642] ? import_iovec+0x6f/0xa0 [ 479.827859][ T9642] ___sys_sendmsg+0x2a2/0x360 [ 479.832524][ T9642] ? __sys_sendmsg+0x2a0/0x2a0 [ 479.837295][ T9642] __se_sys_sendmsg+0x1c3/0x2b0 [ 479.842133][ T9642] ? __x64_sys_sendmsg+0x80/0x80 [ 479.847059][ T9642] ? lockdep_hardirqs_on+0x94/0x140 [ 479.852249][ T9642] do_syscall_64+0x4c/0xa0 [ 479.856655][ T9642] ? clear_bhb_loop+0x60/0xb0 [ 479.861322][ T9642] ? clear_bhb_loop+0x60/0xb0 [ 479.865987][ T9642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.871868][ T9642] RIP: 0033:0x7f7ac439e559 [ 479.876271][ T9642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.895863][ T9642] RSP: 002b:00007f7ac52ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.904262][ T9642] RAX: ffffffffffffffda RBX: 00007f7ac4626090 RCX: 00007f7ac439e559 [ 479.912220][ T9642] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 479.920182][ T9642] RBP: 00007f7ac4435ad8 R08: 0000000000000000 R09: 0000000000000000 [ 479.928139][ T9642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.936094][ T9642] R13: 00007f7ac4626128 R14: 00007f7ac4626090 R15: 00007ffe163cb3e8 [ 479.944058][ T9642] [ 479.971279][ T9647] ip_tables: iptables: counters copy to user failed while replacing table [ 480.010642][ T8904] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 480.210624][ T8904] usb 4-1: Using ep0 maxpacket: 16 [ 480.222847][ T8904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.287693][ T8904] usb 4-1: config 0 has no interface number 0 [ 480.299917][ T8904] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.313907][ T8904] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.324028][ T8904] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.338616][ T8904] usb 4-1: config 0 interface 1 has no altsetting 0 [ 480.345498][ T8904] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 480.362333][ T8904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.371788][ T8904] usb 4-1: config 0 descriptor?? [ 480.383398][ T8904] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 480.783632][ T8904] elan 0003:04F3:074D.000A: unknown main item tag 0x0 [ 480.790534][ T8904] elan 0003:04F3:074D.000A: unbalanced collection at end of report description [ 480.799682][ T8904] elan 0003:04F3:074D.000A: Hid Parse failed [ 480.806667][ T8904] elan: probe of 0003:04F3:074D.000A failed with error -22 [ 480.986237][ T8904] usb 4-1: USB disconnect, device number 19 [ 481.739411][ T9642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.748958][ T9642] nci: nci_start_poll: failed to set local general bytes [ 481.756427][ T9632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512