last executing test programs: 13.883401826s ago: executing program 0 (id=2063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.010587943s ago: executing program 1 (id=2065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @void, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000000401000006020202020202"], 0x36) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 11.624207243s ago: executing program 0 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$dupfd(r2, 0x406, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) link(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 11.143164466s ago: executing program 0 (id=2072): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 11.066479692s ago: executing program 2 (id=2074): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x2c, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1e, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xa, 0x0, @opaque="75d0"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r5, 0x0, 0x408cd, 0xc) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 11.064751642s ago: executing program 1 (id=2075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="89e7ee0c9fdad9b4b47380c988cafbe1f2fbb44fc49df4af792a38c28d758bf1e724bb33", 0x24}, {&(0x7f0000000180)=']\x00\x00', 0x3}], 0x2) 10.899669237s ago: executing program 0 (id=2076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.797170723s ago: executing program 2 (id=2078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.654770826s ago: executing program 2 (id=2080): r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0xe0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r6, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r8, r7, 0x0, r7}, 0xfffffffffffffe33) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r9, 0x0) socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@can_newroute={0x1ac, 0x18, 0x20, 0x70bd25, 0x25dfdbff, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0x8, 0xfffffffffffffffc, 0xd2}}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_FILTER={0xc, 0xb, {{0x1}, {0x1, 0x0, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "0e3ecf6bb10b4202"}, 0xa}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1a, 0x7a, 0x74, 0xa, 0xf7, "7103785b57801b9c91b427c0c6b8b3884d91d7bd990a221b7055b5b2754e8352b3ed48fb43cbbe462cd30a45a0dd39054207227b5d65dac9d0b61c1d5c0c4a6bde0e1d4e9d8502f5f542f7b240a7afe8a54681674dedc86260e8a1469265dd531e152697f12b7408edd30d8426bafbaa73388bd9d7713c6ffef7b130c04555074c09a293cbf93f7d4e851355fa9c3a6bf574db618d36ad6e13a7064d42cf2075c89ec144eaa384da6f669998d81006940b4acca906fda635a671ae01b2fd4fce708ac6474620e0bf2f2d92b6550cc467ddb6f80aac2d7e2d933266741d2035b6d9116bd7f88b0db0445a3f3982643528895aacb45431f63d0c680ba80b31902d", 0x2, "b7990fa132929cea0caae011ec3285c76f11c474"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "cbd43db53b404052"}, 0xb}}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}, @CGW_MOD_AND={0x15, 0x1, {{{0x4, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "69cfc55a9ffbb1df"}, 0x9c4bcb8449ab9c1a}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.419175051s ago: executing program 3 (id=2083): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xb8}}, 0x4000) 7.344936408s ago: executing program 3 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$dupfd(r2, 0x406, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aa"], 0x208}, 0x0) link(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 6.834692322s ago: executing program 1 (id=2085): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.739301181s ago: executing program 3 (id=2086): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 6.712311813s ago: executing program 4 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 6.678342676s ago: executing program 2 (id=2088): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x30}}, 0x0) 6.625291591s ago: executing program 0 (id=2089): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x5, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800}, 0x38) setxattr(0x0, &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x2002, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c2bbd700000000000020000", @ANYRES32=r1, @ANYBLOB="4000100a14000100fe8000000000000000000000000000bb0a000200aaaaaaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x442002, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x3e8, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x59, 0x80}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x8, 0x40, 0x1, 0x9, 0x88}}, {0x4}}]}]}, 0x60}}, 0x44080) dup3(r5, r6, 0x80000) 6.075504458s ago: executing program 4 (id=2090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.983086306s ago: executing program 1 (id=2091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.544041852s ago: executing program 2 (id=2092): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) mount$fuseblk(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20080a0, 0x0) 4.466668019s ago: executing program 4 (id=2093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) 4.382153806s ago: executing program 0 (id=2094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) 4.364556738s ago: executing program 3 (id=2095): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x5, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800}, 0x38) setxattr(0x0, &(0x7f0000000080)=@known='security.apparmor\x00', 0x0, 0x0, 0x2) r5 = open(&(0x7f00000000c0)='./file1\x00', 0x2002, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r1, @ANYBLOB="4000100a14000100fe8000000000000000000000000000bb0a000200aaaaaaaaaa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x442002, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x3e8, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x59, 0x80}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x8, 0x40, 0x1, 0x9, 0x88}}, {0x4}}]}]}, 0x60}}, 0x44080) dup3(r5, r6, 0x80000) 4.298970724s ago: executing program 4 (id=2096): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x428, 0x98, 0x0, 0x0, 0x0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x228}}, {{@ip={@remote, @empty, 0x0, 0x0, 'vcan0\x00', 'veth1_to_team\x00'}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d1a1"}}, @common=@addrtype={{0x30}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_macvtap\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r7, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 4.232260699s ago: executing program 1 (id=2097): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r6, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) write(r4, &(0x7f0000000180), 0x0) syz_usb_connect(0x0, 0x58, 0x0, 0x0) 3.009379346s ago: executing program 3 (id=2098): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x9, 0x1012, 0x20, 0x5}, 0x20) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r4, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r6, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r5, &(0x7f00000012c0)={0x2020}, 0x2020) 2.661228017s ago: executing program 4 (id=2099): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket$inet(0xa, 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r7, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 1.407486546s ago: executing program 3 (id=2100): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x9, 0x1012, 0x20, 0x5}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r5 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_LOCK(r5, 0xb) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r5, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) 971.583415ms ago: executing program 1 (id=2101): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x9, 0x1012, 0x20, 0x5}, 0x20) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r4, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r6, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r5, &(0x7f00000012c0)={0x2020}, 0x2020) 962.474806ms ago: executing program 2 (id=2102): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0xff, 0x9, 0x1012, 0x20, 0x5}, 0x20) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r4, 0x0, 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r6, 0xc) read$FUSE(r5, &(0x7f00000012c0)={0x2020}, 0x2020) 0s ago: executing program 4 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}}], 0x1, 0x8080) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.392599][ T4317] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 371.560720][ T4317] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 371.780888][ T4317] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 371.801851][ T4317] usb 3-1: USB disconnect, device number 13 [ 371.829869][ T8117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.865771][ T8115] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 371.954020][ T8136] binder: 8135:8136 ioctl c0306201 0 returned -14 [ 371.962656][ T8114] tipc: Resetting bearer [ 372.287742][ T8114] tipc: Disabling bearer [ 372.531865][ T8146] binder: 8135:8146 ioctl c0306201 2000000001c0 returned -14 [ 372.867607][ T8125] bond3: (slave gretap1): making interface the new active one [ 372.902381][ T8125] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 372.971809][ T8131] device syzkaller0 entered promiscuous mode [ 373.034912][ T4315] tipc: Node number set to 72750784 [ 373.078462][ T8122] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 373.265030][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 373.478018][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 373.488242][ T8153] fuse: Bad value for 'user_id' [ 373.549912][ T8155] tipc: Enabled bearer , priority 0 [ 373.571060][ T8155] tipc: Resetting bearer [ 373.653915][ T8154] tipc: Disabling bearer [ 373.972689][ T5714] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 374.191185][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 374.198917][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.217888][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.251654][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 374.288951][ T5714] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 374.318589][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.335343][ T8175] overlayfs: missing 'workdir' [ 374.367220][ T5714] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 374.441521][ T5714] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 374.461887][ T5714] usb 1-1: Manufacturer: syz [ 374.502938][ T5714] usb 1-1: config 0 descriptor?? [ 375.706803][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.719983][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.732414][ T5714] rc_core: IR keymap rc-hauppauge not found [ 375.749304][ T5714] Registered IR keymap rc-empty [ 375.757898][ T8188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.778333][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 375.851484][ T8191] binder: 8190:8191 ioctl c0306201 0 returned -14 [ 375.862837][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 376.009898][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 376.036625][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60 [ 376.090192][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 376.161006][ T8195] binder: 8190:8195 ioctl c0306201 2000000004c0 returned -14 [ 376.171180][ T8195] binder: 8190:8195 ioctl c0306201 2000000001c0 returned -14 [ 376.932631][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 376.983230][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.012738][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.062708][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.113973][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.183009][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.300347][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 377.384130][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.530167][ T5714] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.567628][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574591][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.641928][ T8203] overlayfs: failed to resolve './file1': -2 [ 378.665855][ T5714] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 378.724810][ T5714] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 378.876678][ T5714] usb 1-1: USB disconnect, device number 14 [ 380.032687][ T4314] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 380.111086][ T8222] overlayfs: failed to resolve './file1': -2 [ 380.222594][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 380.229265][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.310904][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 380.334870][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 380.348850][ T4314] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 380.366238][ T4314] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.386136][ T4314] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.401648][ T4314] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.432121][ T4314] usb 3-1: Manufacturer: syz [ 380.445720][ T4314] usb 3-1: config 0 descriptor?? [ 380.458227][ T8229] tipc: Enabled bearer , priority 0 [ 380.472040][ T8229] device syzkaller0 entered promiscuous mode [ 380.569956][ T8229] tipc: Resetting bearer [ 380.581024][ T8232] binder: 8230:8232 ioctl c0306201 0 returned -14 [ 380.604700][ T8228] tipc: Resetting bearer [ 380.845023][ T8228] tipc: Disabling bearer [ 380.918178][ T8235] binder: 8230:8235 ioctl c0306201 2000000004c0 returned -14 [ 380.926792][ T8235] binder: 8230:8235 ioctl c0306201 2000000001c0 returned -14 [ 381.292602][ T4314] rc_core: IR keymap rc-hauppauge not found [ 381.301348][ T4314] Registered IR keymap rc-empty [ 381.379364][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.433108][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.483049][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 381.510257][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 381.695749][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.752591][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.782654][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.812611][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.842617][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.849830][ T5716] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 381.882656][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.922737][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.983068][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.014189][ T8241] device syzkaller0 entered promiscuous mode [ 382.022669][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.054543][ T5716] usb 4-1: Using ep0 maxpacket: 16 [ 382.059780][ T4314] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 382.068582][ T5716] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.113631][ T4314] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 382.122927][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.138464][ T4314] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 382.172667][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.201897][ T4314] usb 3-1: USB disconnect, device number 14 [ 382.238370][ T5716] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 382.247527][ T5716] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 382.256403][ T5716] usb 4-1: Manufacturer: syz [ 382.282066][ T5716] usb 4-1: config 0 descriptor?? [ 382.708899][ T8251] tipc: Enabled bearer , priority 0 [ 382.728094][ T8251] device syzkaller0 entered promiscuous mode [ 382.768263][ T8251] tipc: Resetting bearer [ 382.793891][ T8250] tipc: Resetting bearer [ 382.840125][ T8250] tipc: Disabling bearer [ 383.783969][ T8265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1133'. [ 385.049289][ T5311] usb 4-1: USB disconnect, device number 19 [ 385.222801][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.233105][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.247129][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.281629][ T8289] binder: 8287:8289 ioctl c0306201 0 returned -14 [ 385.345578][ T8294] tipc: Enabling of bearer rejected, failed to enable media [ 385.453744][ T4317] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 385.621771][ T8302] binder: 8287:8302 ioctl c0306201 2000000001c0 returned -14 [ 385.658245][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 385.774546][ T4317] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 386.016767][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.277543][ T4317] usb 2-1: config 0 descriptor?? [ 386.347700][ T8285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.385684][ T8308] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1145'. [ 386.668932][ T8319] binder: 8318:8319 ioctl c0306201 0 returned -14 [ 386.695529][ T8321] tipc: Enabled bearer , priority 0 [ 386.712067][ T8321] device syzkaller0 entered promiscuous mode [ 386.763766][ T8321] tipc: Resetting bearer [ 386.775509][ T4317] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 386.791068][ T4317] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 386.799677][ T8328] fuse: Bad value for 'fd' [ 386.812907][ T4317] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 386.819989][ T4317] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 386.846731][ T4317] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 386.873451][ T8320] tipc: Resetting bearer [ 386.894694][ T4317] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 386.964140][ T8320] tipc: Disabling bearer [ 387.011565][ T8332] tipc: Enabled bearer , priority 0 [ 387.035429][ T8285] process 'syz.1.1139' launched '/dev/fd/5/,' with NULL argv: empty string added [ 387.044543][ T8332] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 387.062219][ T8332] tipc: Resetting bearer [ 387.113214][ T4317] usb 2-1: USB disconnect, device number 20 [ 387.190526][ T8331] tipc: Disabling bearer [ 387.207806][ T8334] fido_id[8334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 387.387328][ T8341] tipc: Enabling of bearer rejected, failed to enable media [ 387.807187][ T8352] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1160'. [ 388.112077][ T8355] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 388.451320][ T8367] fuse: Bad value for 'fd' [ 389.065535][ T8377] tipc: Enabled bearer , priority 0 [ 389.093168][ T8380] tipc: Enabled bearer , priority 0 [ 389.108035][ T8380] device syzkaller0 entered promiscuous mode [ 389.131129][ T8377] device syzkaller0 entered promiscuous mode [ 389.167354][ T8380] tipc: Resetting bearer [ 390.409313][ T8378] tipc: Resetting bearer [ 390.464121][ T8378] tipc: Disabling bearer [ 390.478143][ T8376] tipc: Resetting bearer [ 390.523359][ T8376] tipc: Disabling bearer [ 390.536936][ T8391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1172'. [ 390.790407][ T8396] tipc: Enabling of bearer rejected, failed to enable media [ 392.168941][ T8420] tipc: Enabled bearer , priority 0 [ 392.223536][ T8422] fuse: Invalid rootmode [ 392.231718][ T8420] tipc: Resetting bearer [ 392.717414][ T8419] tipc: Disabling bearer [ 392.973264][ T8434] binder: 8433:8434 ioctl c0306201 0 returned -14 [ 394.264629][ T8446] device syzkaller0 entered promiscuous mode [ 394.285000][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 394.350311][ T8455] tipc: Enabling of bearer rejected, failed to enable media [ 394.498251][ T8464] fuse: Invalid rootmode [ 395.406807][ T8485] tipc: Enabling of bearer rejected, failed to enable media [ 395.421846][ T8486] tipc: Enabled bearer , priority 0 [ 395.430803][ T8486] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 395.453220][ T8489] netlink: 'syz.3.1201': attribute type 1 has an invalid length. [ 395.506553][ T8489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.517116][ T8486] tipc: Resetting bearer [ 395.529590][ T8484] tipc: Disabling bearer [ 395.560650][ T8494] bond5: (slave gretap1): making interface the new active one [ 395.598119][ T8494] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 395.658647][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 395.907685][ T8508] tipc: Enabled bearer , priority 0 [ 395.925656][ T8509] tipc: Enabled bearer , priority 0 [ 395.945221][ T8509] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 396.092924][ T8512] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 396.117914][ T8514] tipc: Resetting bearer [ 396.351188][ T8509] tipc: Resetting bearer [ 396.415487][ T8507] tipc: Disabling bearer [ 396.444156][ T8504] tipc: Disabling bearer [ 396.512102][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 396.828647][ T8530] fuse: Invalid rootmode [ 397.522256][ T8547] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 397.949942][ T8547] 8021q: adding VLAN 0 to HW filter on device bond5 [ 398.413289][ T8550] bond5: (slave gretap1): making interface the new active one [ 398.429009][ T8550] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 398.475854][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 398.509042][ T8564] tipc: Enabled bearer , priority 0 [ 398.519640][ T8564] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 398.536950][ T8565] device syzkaller0 entered promiscuous mode [ 398.559169][ T8565] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 398.607111][ T8564] tipc: Resetting bearer [ 398.643887][ T8562] tipc: Disabling bearer [ 399.774220][ T8583] binder: 8579:8583 ioctl c0306201 2000000004c0 returned -14 [ 399.845877][ T7400] udevd[7400]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 400.231310][ T8590] tipc: Enabled bearer , priority 0 [ 400.817125][ T8600] device syzkaller0 entered promiscuous mode [ 400.898923][ T7400] udevd[7400]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 401.035379][ T8588] tipc: Resetting bearer [ 402.074427][ T8588] tipc: Disabling bearer [ 402.123399][ T8613] tipc: Enabled bearer , priority 0 [ 402.142166][ T8613] device syzkaller0 entered promiscuous mode [ 402.315898][ T8613] tipc: Resetting bearer [ 402.511975][ T8612] tipc: Resetting bearer [ 402.620129][ T8612] tipc: Disabling bearer [ 403.183796][ T8624] tipc: Enabled bearer , priority 0 [ 403.215767][ T8624] tipc: Resetting bearer [ 403.464975][ T8632] binder: 8631:8632 ioctl c0306201 0 returned -14 [ 403.507107][ T8623] tipc: Disabling bearer [ 404.015043][ T8635] binder: 8634:8635 ioctl c0306201 0 returned -14 [ 404.475172][ T8639] binder: 8634:8639 ioctl c0306201 2000000004c0 returned -14 [ 404.485833][ T8639] binder: 8634:8639 ioctl c0306201 2000000001c0 returned -14 [ 405.111450][ T8647] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 405.588563][ T8649] tipc: Enabled bearer , priority 0 [ 405.653408][ T8649] device syzkaller0 entered promiscuous mode [ 405.763508][ T8654] tipc: Enabled bearer , priority 0 [ 405.809443][ T8654] device syzkaller0 entered promiscuous mode [ 405.831839][ T8649] tipc: Resetting bearer [ 405.842923][ T8657] binder: 8656:8657 ioctl c0306201 0 returned -14 [ 405.875199][ T8644] tipc: Resetting bearer [ 405.909162][ T8644] tipc: Disabling bearer [ 406.265504][ T8658] tipc: Resetting bearer [ 406.323927][ T7400] udevd[7400]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 406.399401][ T8653] tipc: Resetting bearer [ 406.463499][ T8653] tipc: Disabling bearer [ 406.635178][ T8667] tipc: Enabled bearer , priority 0 [ 406.651918][ T8667] device syzkaller0 entered promiscuous mode [ 407.431437][ T8666] tipc: Resetting bearer [ 407.804996][ T8666] tipc: Disabling bearer [ 408.568542][ T8682] binder: 8681:8682 ioctl c0306201 2000000004c0 returned -14 [ 409.300233][ T8683] binder: 8656:8683 ioctl c0306201 2000000004c0 returned -14 [ 409.309314][ T8683] binder: 8656:8683 ioctl c0306201 2000000001c0 returned -14 [ 409.346958][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 412.459632][ T8729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1267'. [ 412.685086][ T8733] device syzkaller0 entered promiscuous mode [ 412.942878][ T4317] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 413.142532][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 413.150504][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.173134][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.197904][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 413.219040][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 413.229662][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.254718][ T4317] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 413.270536][ T4317] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 413.279642][ T4317] usb 4-1: Manufacturer: syz [ 413.300832][ T4317] usb 4-1: config 0 descriptor?? [ 413.644928][ T4317] rc_core: IR keymap rc-hauppauge not found [ 413.650963][ T4317] Registered IR keymap rc-empty [ 413.656863][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.692780][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.727599][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 413.745571][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 413.810379][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.852927][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.902599][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.939049][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.981153][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.018364][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.056982][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.094629][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.123588][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.157316][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 414.197141][ T4317] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 414.206701][ T4317] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 414.217678][ T4317] usb 4-1: USB disconnect, device number 20 [ 415.365640][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 415.802922][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 415.807594][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1279'. [ 416.042187][ T8796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1281'. [ 420.199544][ T8849] udevd[8849]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 420.257606][ T8848] tipc: Enabled bearer , priority 0 [ 420.303745][ T8848] device syzkaller0 entered promiscuous mode [ 420.435366][ T8844] tipc: Resetting bearer [ 422.635955][ T8844] tipc: Disabling bearer [ 423.885739][ T8868] tipc: Enabled bearer , priority 0 [ 423.938092][ T8868] device syzkaller0 entered promiscuous mode [ 424.194645][ T8875] udevd[8875]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 424.363200][ T8877] tipc: Resetting bearer [ 424.390577][ T8865] tipc: Resetting bearer [ 425.527892][ T8865] tipc: Disabling bearer [ 428.828072][ T8922] binder: 8921:8922 ioctl c0306201 0 returned -14 [ 430.636639][ T8922] binder: 8921:8922 ioctl c0306201 2000000001c0 returned -14 [ 430.863055][ T8929] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 431.818621][ T8939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1317'. [ 432.019880][ T8944] tipc: Enabled bearer , priority 0 [ 432.064338][ T8944] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 432.104975][ T8944] tipc: Resetting bearer [ 432.122785][ T8943] tipc: Disabling bearer [ 432.304129][ T4317] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 432.419325][ T8950] tipc: Enabled bearer , priority 0 [ 432.437788][ T8950] tipc: Resetting bearer [ 432.455846][ T8949] tipc: Disabling bearer [ 432.502530][ T4317] usb 1-1: Using ep0 maxpacket: 16 [ 432.516331][ T4317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.581058][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.601857][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 432.696078][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 432.829379][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.018424][ T4317] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.189092][ T4317] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.323783][ T4317] usb 1-1: Manufacturer: syz [ 433.340470][ T4317] usb 1-1: config 0 descriptor?? [ 434.169322][ T8972] udevd[8972]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 434.307596][ T8972] udevd[8972]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 434.357198][ T8975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1330'. [ 434.472551][ T4317] rc_core: IR keymap rc-hauppauge not found [ 434.479526][ T4317] Registered IR keymap rc-empty [ 434.596749][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.764656][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 434.829356][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 434.882968][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input63 [ 434.975821][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.024754][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.153081][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.202915][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.232724][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.273776][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.402840][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.432671][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.472893][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.503174][ T4317] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 435.552761][ T4317] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 435.591269][ T4317] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 435.617272][ T4317] usb 1-1: USB disconnect, device number 15 [ 435.809378][ T9000] device syzkaller0 entered promiscuous mode [ 435.857025][ T9004] tipc: Enabled bearer , priority 0 [ 435.911946][ T9004] device syzkaller0 entered promiscuous mode [ 435.927986][ T9010] binder: 9009:9010 ioctl c0306201 0 returned -14 [ 435.988264][ T9004] tipc: Resetting bearer [ 436.002165][ T9001] tipc: Resetting bearer [ 436.044354][ T9001] tipc: Disabling bearer [ 437.442379][ T9034] binder: 9009:9034 ioctl c0306201 2000000004c0 returned -14 [ 437.452622][ T9034] binder: 9009:9034 ioctl c0306201 2000000001c0 returned -14 [ 438.983783][ T8972] udevd[8972]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 439.508392][ T8994] udevd[8994]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 441.713657][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.784318][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.664838][ T8972] udevd[8972]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 443.117898][ T9081] binder: 9079:9081 ioctl c0306201 0 returned -14 [ 444.774112][ T9090] binder: 9089:9090 ioctl c0306201 0 returned -14 [ 445.106523][ T9094] binder: 9092:9094 ioctl c0306201 0 returned -14 [ 445.745850][ T9104] binder: 9092:9104 ioctl c0306201 2000000004c0 returned -14 [ 445.755258][ T9104] binder: 9092:9104 ioctl c0306201 2000000001c0 returned -14 [ 449.248142][ T9127] device syzkaller0 entered promiscuous mode [ 449.942704][ T4317] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 450.152599][ T4317] usb 4-1: Using ep0 maxpacket: 16 [ 450.159832][ T4317] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.219788][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.260912][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.276220][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 450.287541][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.417084][ T9123] fuse: Unknown parameter 'group_00000000000000000000' [ 450.778020][ T4317] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 450.792376][ T4317] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 450.800639][ T4317] usb 4-1: Manufacturer: syz [ 450.834171][ T4317] usb 4-1: config 0 descriptor?? [ 451.085587][ T9160] binder: 9159:9160 ioctl c0306201 0 returned -14 [ 451.266871][ T4317] rc_core: IR keymap rc-hauppauge not found [ 451.274905][ T4317] Registered IR keymap rc-empty [ 451.280018][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 451.322627][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 451.362062][ T4317] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 451.454465][ T4317] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 451.691218][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 451.799275][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 451.996526][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.036698][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.072646][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.114279][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.152687][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.185524][ T9166] binder: 9165:9166 ioctl c0306201 0 returned -14 [ 452.186175][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.236419][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.273736][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.313685][ T4317] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 452.354569][ T4317] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 452.368028][ T4317] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 452.380640][ T4317] usb 4-1: USB disconnect, device number 21 [ 452.687779][ T9168] binder: 9165:9168 ioctl c0306201 2000000004c0 returned -14 [ 452.697026][ T9168] binder: 9165:9168 ioctl c0306201 2000000001c0 returned -14 [ 455.392653][ T9144] tipc: Enabling of bearer rejected, failed to enable media [ 455.558975][ T9184] tipc: Enabled bearer , priority 0 [ 455.576207][ T9184] tipc: Resetting bearer [ 455.624383][ T9183] tipc: Disabling bearer [ 457.249040][ T9203] udevd[9203]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 457.390789][ T9205] device syzkaller0 entered promiscuous mode [ 457.648643][ T9203] udevd[9203]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 458.466215][ T9200] udevd[9200]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 458.509042][ T9221] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 461.295183][ T9232] tipc: Enabling of bearer rejected, failed to enable media [ 461.912081][ T9254] tipc: Enabling of bearer rejected, failed to enable media [ 461.961989][ T9261] binder: 9256:9261 ioctl c0306201 0 returned -14 [ 463.010379][ T9270] device syzkaller0 entered promiscuous mode [ 463.262711][ T9277] binder: 9275:9277 ioctl c0306201 0 returned -14 [ 463.986949][ T9288] tipc: Enabling of bearer rejected, failed to enable media [ 464.575744][ T9300] tipc: Enabling of bearer rejected, failed to enable media [ 464.899290][ T9311] binder: 9275:9311 ioctl c0306201 2000000001c0 returned -14 [ 464.988466][ T9308] binder: 9307:9308 ioctl c0306201 0 returned -14 [ 465.358155][ T9316] tipc: Enabled bearer , priority 0 [ 465.390795][ T9316] tipc: Resetting bearer [ 465.466146][ T9315] tipc: Disabling bearer [ 466.180986][ T9321] tipc: Enabled bearer , priority 0 [ 466.258800][ T9321] tipc: Resetting bearer [ 466.724853][ T9319] tipc: Disabling bearer [ 467.298447][ T9332] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 467.746486][ T9203] udevd[9203]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 468.289159][ T9346] tipc: Enabling of bearer rejected, failed to enable media [ 468.562719][ T5311] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 468.682645][ T5710] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 468.736674][ T9363] tipc: Enabling of bearer rejected, failed to enable media [ 468.754723][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 468.775005][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.802837][ T5311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.826130][ T5311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.846370][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.883587][ T5311] usb 1-1: config 0 descriptor?? [ 468.892660][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 468.903198][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.929527][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.959270][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 468.987326][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.009259][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.053239][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.082525][ T5710] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.092100][ T5710] usb 5-1: Manufacturer: syz [ 469.115089][ T5710] usb 5-1: config 0 descriptor?? [ 469.333096][ T5311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 469.484660][ T5311] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 469.877235][ T5311] usb 1-1: USB disconnect, device number 16 [ 469.936421][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 470.007698][ T5710] rc_core: IR keymap rc-hauppauge not found [ 470.017904][ T5710] Registered IR keymap rc-empty [ 470.035216][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.074485][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.113533][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 470.113545][ T9377] fido_id[9377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 470.148163][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input65 [ 470.165174][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.209951][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.242634][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.312782][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.388128][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.443434][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.484146][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.535273][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.606660][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.754378][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 470.817862][ T5710] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 470.865262][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 470.912688][ T5710] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 471.059724][ T5710] usb 5-1: USB disconnect, device number 17 [ 471.096551][ T9391] tipc: Enabled bearer , priority 0 [ 471.107839][ T9391] tipc: Resetting bearer [ 471.277077][ T9390] tipc: Disabling bearer [ 471.290298][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 471.906568][ T9378] udevd[9378]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 471.978381][ T9404] binder: 9403:9404 ioctl c0306201 0 returned -14 [ 471.988378][ T9405] tipc: Enabling of bearer rejected, failed to enable media [ 473.162719][ T9422] binder: 9421:9422 ioctl 4018620d 0 returned -22 [ 473.188186][ T9422] binder: 9421:9422 ioctl c0306201 0 returned -14 [ 474.193091][ T9437] binder: 9421:9437 ioctl c0306201 2000000004c0 returned -14 [ 474.201972][ T9437] binder: 9421:9437 ioctl c0306201 2000000001c0 returned -14 [ 475.101090][ T9442] binder: 9441:9442 ioctl c0306201 0 returned -14 [ 475.632666][ T5311] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 475.838327][ T9456] fuse: Unknown parameter 'fd0x0000000000000003' [ 475.849294][ T5311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.883961][ T5311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.931548][ T5311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.038253][ T5311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.110839][ T5311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.165602][ T5311] usb 4-1: config 0 descriptor?? [ 477.145531][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 477.150864][ T5311] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 477.764990][ T5311] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 477.888774][ T9480] tipc: Enabled bearer , priority 0 [ 477.917147][ T9442] binder: 9441:9442 ioctl c0306201 2000000004c0 returned -14 [ 477.929662][ T9480] tipc: Resetting bearer [ 477.936941][ T9442] binder: 9441:9442 ioctl c0306201 2000000001c0 returned -14 [ 477.966074][ T9479] tipc: Disabling bearer [ 478.162574][ T5311] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 478.172560][ T27] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 478.358055][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 478.370854][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 478.400157][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.412715][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.435453][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.450504][ T5311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.545773][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.557472][ T5311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.596964][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.614844][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.825342][ T27] usb 2-1: config 0 descriptor?? [ 478.831808][ T5311] usb 1-1: config 0 descriptor?? [ 479.082708][ T4317] usb 4-1: reset full-speed USB device number 22 using dummy_hcd [ 479.131977][ T9495] fuse: Unknown parameter 'fd0x0000000000000003' [ 479.255794][ T27] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 479.277079][ T27] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 479.294281][ T5311] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 479.372192][ T5311] plantronics 0003:047F:FFFF.0005: hiddev2,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 479.804830][ T27] usb 2-1: USB disconnect, device number 21 [ 479.827893][ T5714] usb 1-1: USB disconnect, device number 17 [ 479.936931][ T4315] usb 4-1: USB disconnect, device number 22 [ 479.991864][ T9500] fido_id[9500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 480.067793][ T9501] fido_id[9501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 481.138441][ T9203] udevd[9203]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 482.084572][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1476'. [ 482.197783][ T9544] binder: 9543:9544 ioctl c0306201 0 returned -14 [ 482.419526][ T9542] fuse: Unknown parameter 'group_00000000000000000000' [ 482.516185][ T9552] binder: 9543:9552 ioctl c0306201 2000000001c0 returned -14 [ 482.622729][ T4315] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 482.847738][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.952197][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.118435][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 483.183699][ T4315] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.227756][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.279923][ T4315] usb 5-1: config 0 descriptor?? [ 483.994304][ T9571] binder: 9570:9571 ioctl c0306201 0 returned -14 [ 484.081635][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1487'. [ 484.176805][ T4315] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 484.223881][ T4315] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 484.292609][ T4317] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 484.517535][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.728233][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.891544][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 484.928587][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1489'. [ 484.988791][ T4317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.059275][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.147480][ T4317] usb 1-1: config 0 descriptor?? [ 485.549427][ T9596] device syzkaller0 entered promiscuous mode [ 485.595068][ T4317] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 485.619616][ T4317] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 485.989579][ T4315] usb 1-1: USB disconnect, device number 18 [ 486.374665][ T9614] loop1: detected capacity change from 0 to 764 [ 486.996396][ T27] usb 5-1: USB disconnect, device number 18 [ 489.553082][ T9625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1499'. [ 490.637727][ T9653] tipc: Enabled bearer , priority 0 [ 490.667383][ T9653] tipc: Resetting bearer [ 490.706463][ T9652] tipc: Disabling bearer [ 491.322285][ T9669] binder: 9667:9669 ioctl c0306201 0 returned -14 [ 491.913755][ T9679] binder: 9667:9679 ioctl c0306201 2000000001c0 returned -14 [ 493.051122][ T9705] tipc: Enabled bearer , priority 0 [ 493.061194][ T9705] tipc: Resetting bearer [ 493.070482][ T9703] tipc: Disabling bearer [ 494.235176][ T9724] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 496.286911][ T9747] device syzkaller0 entered promiscuous mode [ 498.012373][ T9772] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 498.866776][ T9776] binder: 9775:9776 ioctl c0306201 0 returned -14 [ 499.224622][ T9780] binder: 9775:9780 ioctl c0306201 2000000001c0 returned -14 [ 499.958011][ T9785] binder: 9783:9785 ioctl c0306201 0 returned -14 [ 500.324629][ T9788] binder: 9783:9788 ioctl c0306201 2000000004c0 returned -14 [ 500.334378][ T9788] binder: 9783:9788 ioctl c0306201 2000000001c0 returned -14 [ 500.355676][ T9786] fuse: Unknown parameter 'group_00000000000000000000' [ 502.950843][ T9737] Set syz1 is full, maxelem 65536 reached [ 503.532326][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.759581][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.045056][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.063111][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.995864][ T9812] device syzkaller0 entered promiscuous mode [ 505.032601][ T9833] tipc: Enabled bearer , priority 0 [ 506.240995][ T9864] binder: 9863:9864 ioctl c0306201 0 returned -14 [ 506.594630][ T9869] binder: 9863:9869 ioctl c0306201 2000000004c0 returned -14 [ 506.605348][ T9869] binder: 9863:9869 ioctl c0306201 2000000001c0 returned -14 [ 506.616628][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.626396][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.960394][ T9889] binder: 9888:9889 ioctl c0306201 0 returned -14 [ 511.469737][ T9839] tipc: Resetting bearer [ 511.476915][ T9831] tipc: Disabling bearer [ 511.498972][ T9904] tipc: Enabled bearer , priority 0 [ 511.518392][ T9905] device syzkaller0 entered promiscuous mode [ 511.561138][ T9912] tipc: Resetting bearer [ 511.579249][ T9899] tipc: Resetting bearer [ 511.658756][ T9899] tipc: Disabling bearer [ 511.689486][ T9930] tipc: Enabling of bearer rejected, failed to enable media [ 511.813950][ T9936] device syzkaller0 entered promiscuous mode [ 511.854920][ T9936] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 512.537107][ T9958] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 513.394166][ T9967] binder: 9965:9967 ioctl c0306201 0 returned -14 [ 514.029309][ T9986] binder: 9965:9986 ioctl c0306201 2000000001c0 returned -14 [ 514.534701][ T9992] device syzkaller0 entered promiscuous mode [ 514.788491][ T9998] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 515.407530][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.498996][T10015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.521892][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.588545][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.308887][T10015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.320346][T10013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.408863][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.484320][T10030] overlayfs: missing 'lowerdir' [ 519.836382][T10062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1609'. [ 521.338099][T10080] tipc: Enabling of bearer rejected, failed to enable media [ 522.876889][T10118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1624'. [ 522.972584][ T5710] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 522.990677][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1626'. [ 523.004894][T10122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1626'. [ 523.101066][T10120] device syzkaller0 entered promiscuous mode [ 523.110631][T10120] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 523.162839][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 523.179833][ T5710] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.210687][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.232202][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 523.253201][ T5710] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 523.273994][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.327583][ T5710] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 523.339662][ T5710] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 523.348890][ T5710] usb 2-1: Manufacturer: syz [ 523.360708][ T5710] usb 2-1: config 0 descriptor?? [ 523.789303][ T9875] udevd[9875]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 523.999580][ T5710] rc_core: IR keymap rc-hauppauge not found [ 524.016217][ T5710] Registered IR keymap rc-empty [ 524.021245][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.077774][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.098262][T10143] tipc: Enabling of bearer rejected, failed to enable media [ 524.133240][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 524.159848][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 524.326401][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.376412][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.442697][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.502847][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.624350][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.652665][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.702528][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.752597][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.792545][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.835089][ T5710] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 524.884475][ T5710] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.912447][ T5710] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.941608][ T5710] usb 2-1: USB disconnect, device number 22 [ 524.973803][T10158] binder: 10157:10158 ioctl c0306201 0 returned -14 [ 525.285994][T10163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'. [ 525.306349][T10164] binder: 10157:10164 ioctl c0306201 2000000004c0 returned -14 [ 525.316012][T10164] binder: 10157:10164 ioctl c0306201 2000000001c0 returned -14 [ 525.430869][T10163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1637'. [ 526.129249][T10172] binder: 10171:10172 ioctl c0306201 0 returned -14 [ 526.373185][T10176] device syzkaller0 entered promiscuous mode [ 526.383427][T10176] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 526.455740][T10177] binder: 10171:10177 ioctl c0306201 2000000001c0 returned -14 [ 527.174267][T10180] tipc: Enabled bearer , priority 0 [ 527.185345][T10180] tipc: Resetting bearer [ 527.248194][T10179] tipc: Disabling bearer [ 527.928513][ T9791] udevd[9791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 528.033630][T10189] tipc: Enabled bearer , priority 0 [ 528.063423][T10189] tipc: Resetting bearer [ 528.110053][T10187] tipc: Disabling bearer [ 528.154474][T10196] tipc: Enabling of bearer rejected, failed to enable media [ 528.220953][T10053] Set syz1 is full, maxelem 65536 reached [ 528.442596][ T5714] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 528.452332][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1651'. [ 528.498480][T10207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1651'. [ 528.662496][ T5714] usb 5-1: Using ep0 maxpacket: 16 [ 528.669390][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.723382][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.769746][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 528.789150][ T5714] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 528.819267][ T5714] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.879298][ T5714] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.892111][ T5714] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.927936][ T5714] usb 5-1: Manufacturer: syz [ 528.958469][ T5714] usb 5-1: config 0 descriptor?? [ 529.148513][T10114] udevd[10114]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 529.542585][ T5714] rc_core: IR keymap rc-hauppauge not found [ 529.548935][ T5714] Registered IR keymap rc-empty [ 529.674789][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 529.833796][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 529.945343][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 529.996005][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input67 [ 530.084666][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.126252][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.149312][T10233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.174207][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.223630][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.280147][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.290576][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.311144][T10233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.325446][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.373085][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.415469][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.463025][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.503557][ T5714] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 530.545210][ T5714] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 530.561928][ T5714] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 530.593771][ T5714] usb 5-1: USB disconnect, device number 19 [ 531.025153][T10242] device syzkaller0 entered promiscuous mode [ 531.100472][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.179375][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.197312][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.502182][T10251] tipc: Enabling of bearer rejected, failed to enable media [ 532.133136][ T9791] udevd[9791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 532.365093][T10253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.169405][T10130] Set syz1 is full, maxelem 65536 reached [ 534.074003][T10296] device syzkaller0 entered promiscuous mode [ 534.477547][T10302] tipc: Enabling of bearer rejected, failed to enable media [ 534.489182][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 534.502486][ T4315] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 534.692623][ T4315] usb 2-1: Using ep0 maxpacket: 16 [ 534.701149][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.753728][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.803195][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.846165][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 534.891094][ T4315] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.959329][ T4315] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 535.002979][ T4315] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 535.035698][ T4315] usb 2-1: Manufacturer: syz [ 535.055100][ T4315] usb 2-1: config 0 descriptor?? [ 535.376592][ T4315] rc_core: IR keymap rc-hauppauge not found [ 535.382586][ T4315] Registered IR keymap rc-empty [ 535.388526][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.425650][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.463218][ T4315] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 535.483752][ T4315] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input68 [ 535.507257][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.543605][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.592596][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.632587][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.663249][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.702580][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.732850][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.772935][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.813859][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.842953][ T4315] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 535.885451][ T4315] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 535.902045][ T4315] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.919130][ T4315] usb 2-1: USB disconnect, device number 23 [ 536.043891][T10238] Set syz1 is full, maxelem 65536 reached [ 536.065452][T10321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.271029][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.346537][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.370624][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.809813][T10350] device syzkaller0 entered promiscuous mode [ 537.004410][T10354] device syzkaller0 entered promiscuous mode [ 537.024638][T10354] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 537.288959][T10360] tipc: Enabling of bearer rejected, failed to enable media [ 537.356078][T10362] tipc: Enabling of bearer rejected, failed to enable media [ 537.488395][T10375] binder: 10374:10375 ioctl c0306201 0 returned -14 [ 537.852298][T10383] binder: 10374:10383 ioctl c0306201 2000000004c0 returned -14 [ 537.862153][T10383] binder: 10374:10383 ioctl c0306201 2000000001c0 returned -14 [ 538.798513][T10402] tipc: Enabled bearer , priority 0 [ 538.858162][T10400] tipc: Resetting bearer [ 539.644747][T10397] tipc: Disabling bearer [ 539.761456][T10413] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 540.150413][T10151] udevd[10151]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 540.818383][T10437] tipc: Enabling of bearer rejected, failed to enable media [ 540.943398][T10441] binder: 10439:10441 ioctl c0306201 0 returned -14 [ 541.320522][T10453] binder: 10439:10453 ioctl c0306201 2000000004c0 returned -14 [ 541.330728][T10453] binder: 10439:10453 ioctl c0306201 2000000001c0 returned -14 [ 542.983428][T10469] device syzkaller0 entered promiscuous mode [ 543.436460][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.561056][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.739669][ T9791] udevd[9791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 543.804584][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.558805][T10509] device syzkaller0 entered promiscuous mode [ 544.587433][T10509] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 544.667118][T10513] binder: 10512:10513 ioctl c0306201 0 returned -14 [ 544.786922][T10517] device syzkaller0 entered promiscuous mode [ 544.894402][T10519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.105888][T10519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.861565][T10522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.175134][T10530] device syzkaller0 entered promiscuous mode [ 546.274894][T10151] udevd[10151]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 546.803590][T10335] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 546.871854][T10548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.001262][T10548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.011635][T10335] usb 5-1: Using ep0 maxpacket: 16 [ 547.019838][T10335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.048530][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 547.072012][T10548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.101684][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 547.155144][T10335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 547.177989][T10335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.193522][T10555] binder: 10554:10555 ioctl c0306201 0 returned -14 [ 547.219743][T10335] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 547.242377][T10335] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 547.250594][T10335] usb 5-1: Manufacturer: syz [ 547.286940][T10335] usb 5-1: config 0 descriptor?? [ 548.213406][T10566] device syzkaller0 entered promiscuous mode [ 548.312639][T10335] rc_core: IR keymap rc-hauppauge not found [ 548.321619][T10335] Registered IR keymap rc-empty [ 548.345766][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.392522][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.423367][T10335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 548.468772][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input69 [ 548.508609][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.544449][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.561702][T10586] device syzkaller0 entered promiscuous mode [ 548.570326][T10587] device syzkaller0 entered promiscuous mode [ 548.576573][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.602698][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.613660][T10586] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 548.638310][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.682598][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.736250][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.782663][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.822829][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.854979][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 548.895754][T10335] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 548.911414][T10335] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 548.940623][T10335] usb 5-1: USB disconnect, device number 20 [ 550.672573][ T5710] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 550.862500][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 550.869310][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.879600][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.890669][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 550.900378][ T5710] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 550.910417][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.925336][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.935472][ T5710] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.945541][ T5710] usb 5-1: Manufacturer: syz [ 550.953002][ T5710] usb 5-1: config 0 descriptor?? [ 551.242614][ T5710] rc_core: IR keymap rc-hauppauge not found [ 551.248618][ T5710] Registered IR keymap rc-empty [ 551.256558][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.295855][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.299525][T10570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.341729][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 551.389039][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70 [ 551.447828][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.493108][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.525006][T10611] device syzkaller0 entered promiscuous mode [ 551.540844][T10614] tipc: Enabling of bearer rejected, failed to enable media [ 551.551223][T10613] binder: 10610:10613 ioctl c0306201 0 returned -14 [ 551.553275][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.602624][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.621176][T10618] device syzkaller0 entered promiscuous mode [ 551.642577][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.696585][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.714466][T10611] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 551.748072][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.807053][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.852821][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 551.953654][ T5710] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 552.063830][ T5710] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 552.259841][ T5710] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 552.557231][ T5710] usb 5-1: USB disconnect, device number 21 [ 553.034625][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1769'. [ 553.118593][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.167450][T10644] tipc: Enabling of bearer rejected, failed to enable media [ 553.208760][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.219573][T10648] device syzkaller0 entered promiscuous mode [ 553.232592][T10650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.248931][T10648] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 553.277065][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.305285][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.330730][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.367454][T10646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.684872][T10666] device syzkaller0 entered promiscuous mode [ 553.702715][T10666] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 553.949208][T10671] device syzkaller0 entered promiscuous mode [ 554.032669][T10607] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 554.232701][T10607] usb 3-1: Using ep0 maxpacket: 16 [ 554.244103][T10607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.353835][T10607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.470090][T10607] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 554.573011][T10607] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 554.776482][T10607] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.893824][T10607] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.903629][T10607] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.911705][T10607] usb 3-1: Manufacturer: syz [ 554.925898][T10607] usb 3-1: config 0 descriptor?? [ 554.971693][T10683] tipc: Enabled bearer , priority 0 [ 554.991109][T10682] device syzkaller0 entered promiscuous mode [ 555.010285][T10680] tipc: Resetting bearer [ 555.036299][T10678] tipc: Disabling bearer [ 555.199839][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1783'. [ 555.312690][T10607] rc_core: IR keymap rc-hauppauge not found [ 555.318826][T10607] Registered IR keymap rc-empty [ 555.330726][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.366261][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.403408][T10607] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 555.442056][T10607] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input71 [ 555.523259][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.601998][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 555.975756][T10706] device syzkaller0 entered promiscuous mode [ 556.378789][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.410520][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.514426][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.539351][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.552687][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.592792][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.603733][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.639532][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.731382][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.739182][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.762933][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.830865][ T9791] udevd[9791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 556.872895][T10607] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 556.922297][T10607] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 556.965995][T10607] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 557.081258][T10607] usb 3-1: USB disconnect, device number 15 [ 557.634488][ T9791] udevd[9791]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 557.919670][T10725] fuse: Unknown parameter 'group00000000000000000000' [ 560.373589][T10758] binder: 10757:10758 ioctl c0306201 0 returned -14 [ 560.690304][T10761] binder: 10757:10761 ioctl c0306201 2000000004c0 returned -14 [ 560.700235][T10761] binder: 10757:10761 ioctl c0306201 2000000001c0 returned -14 [ 561.324082][T10765] binder: 10764:10765 ioctl c0306201 0 returned -14 [ 561.650966][T10767] binder: 10764:10767 ioctl c0306201 2000000004c0 returned -14 [ 561.660967][T10767] binder: 10764:10767 ioctl c0306201 2000000001c0 returned -14 [ 562.567839][T10773] binder: 10772:10773 ioctl c0306201 0 returned -14 [ 562.757011][T10775] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 563.594035][T10790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 563.636288][T10790] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 563.692856][ T27] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 563.854502][T10799] device syzkaller0 entered promiscuous mode [ 563.875369][T10799] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 563.892596][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 563.900898][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.937960][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.949568][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 563.965496][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 563.977890][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.998157][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 564.026616][ T27] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 564.055477][ T27] usb 2-1: Manufacturer: syz [ 564.071606][ T27] usb 2-1: config 0 descriptor?? [ 564.207687][T10806] tipc: Enabling of bearer rejected, failed to enable media [ 565.122019][T10335] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 565.337553][T10335] usb 4-1: Using ep0 maxpacket: 16 [ 565.347801][T10335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.358500][T10335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.380007][T10335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.164842][T10335] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 566.186662][T10335] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.300296][T10826] device syzkaller0 entered promiscuous mode [ 566.322886][T10335] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 566.331984][T10335] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 566.340431][T10335] usb 4-1: Manufacturer: syz [ 566.345483][ T27] rc_core: IR keymap rc-hauppauge not found [ 566.351433][ T27] Registered IR keymap rc-empty [ 566.357953][T10826] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 566.376726][T10335] usb 4-1: config 0 descriptor?? [ 566.383312][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.422504][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.453360][ T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 566.466195][ T4317] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 566.491158][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input72 [ 566.538200][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.572843][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.612679][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.652999][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.669102][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 566.682893][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.735828][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.752613][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.832590][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.840104][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.862714][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.878548][ T4317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.902900][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 566.937041][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.947583][ T27] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 567.024305][ T27] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 567.129613][ T4317] usb 1-1: config 0 descriptor?? [ 567.165308][ T27] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.201111][ T27] usb 2-1: USB disconnect, device number 24 [ 567.290213][T10335] rc_core: IR keymap rc-hauppauge not found [ 567.297501][T10335] Registered IR keymap rc-empty [ 567.314553][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.342630][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.373125][T10335] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 567.406736][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input73 [ 567.453213][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.510550][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.552629][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.586709][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.622699][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.652610][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.702667][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.742584][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.781467][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.822682][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 567.830329][T10853] device syzkaller0 entered promiscuous mode [ 567.839262][ T4317] usbhid 1-1:0.0: can't add hid device: -71 [ 567.850609][ T4317] usbhid: probe of 1-1:0.0 failed with error -71 [ 567.859090][T10335] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 567.870856][T10853] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 567.882468][T10335] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.892929][ T4317] usb 1-1: USB disconnect, device number 19 [ 567.923085][T10335] usb 4-1: USB disconnect, device number 23 [ 568.008843][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.015933][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.488470][T10862] device syzkaller0 entered promiscuous mode [ 569.817026][T10874] tipc: Enabled bearer , priority 0 [ 569.910297][T10874] tipc: Resetting bearer [ 569.969979][T10873] tipc: Disabling bearer [ 570.512659][T10335] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 570.522688][T10892] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 570.854037][T10335] usb 4-1: Using ep0 maxpacket: 16 [ 570.882185][T10335] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.059631][T10335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.097440][T10335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 571.132744][T10335] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 571.147192][T10335] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.189209][T10335] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 571.218832][T10335] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.235758][T10335] usb 4-1: Manufacturer: syz [ 571.249897][T10335] usb 4-1: config 0 descriptor?? [ 571.287653][T10895] binder: 10894:10895 ioctl c0306201 0 returned -14 [ 571.593052][T10335] rc_core: IR keymap rc-hauppauge not found [ 571.599024][T10335] Registered IR keymap rc-empty [ 571.614201][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 571.637641][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 571.663128][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 571.711224][T10833] Set syz1 is full, maxelem 65536 reached [ 571.723701][T10335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 571.781649][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 571.826078][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 571.852556][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 571.860243][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.873959][ C1] rc rc0: IR event FIFO is full! [ 571.879028][ C1] rc rc0: IR event FIFO is full! [ 571.883982][ C1] rc rc0: IR event FIFO is full! [ 571.888935][ C1] rc rc0: IR event FIFO is full! [ 571.894311][ C1] rc rc0: IR event FIFO is full! [ 571.899823][ C1] rc rc0: IR event FIFO is full! [ 571.904843][ C1] rc rc0: IR event FIFO is full! [ 571.909829][ C1] rc rc0: IR event FIFO is full! [ 571.915420][ C1] rc rc0: IR event FIFO is full! [ 571.920412][ C1] rc rc0: IR event FIFO is full! [ 571.926721][ C1] rc rc0: IR event FIFO is full! [ 571.931742][ C1] rc rc0: IR event FIFO is full! [ 571.951815][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.966463][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 571.993938][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 572.004699][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.032601][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.045593][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 572.073168][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.098753][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.113528][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.148504][ T27] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 572.157931][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.181556][ T27] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 572.191128][ T27] usb 3-1: Manufacturer: syz [ 572.198720][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.211629][ T27] usb 3-1: config 0 descriptor?? [ 572.284230][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.322593][T10335] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 572.354287][T10335] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 572.363876][T10335] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 572.393559][T10335] usb 4-1: USB disconnect, device number 24 [ 572.536603][T10908] device syzkaller0 entered promiscuous mode [ 572.625875][ T27] rc_core: IR keymap rc-hauppauge not found [ 573.082578][ T27] Registered IR keymap rc-empty [ 573.087588][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.142565][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.213138][ T27] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1 [ 573.244752][ T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input75 [ 573.309757][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.342546][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.372547][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.425193][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.459060][T10923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.472643][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.512686][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.552608][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.582806][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.632592][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.672693][ T27] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 573.719222][ T27] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 573.793037][ T27] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 573.824995][ T27] usb 3-1: USB disconnect, device number 16 [ 573.890691][T10938] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 573.929421][T10938] loop0: detected capacity change from 0 to 512 [ 574.076785][T10938] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 574.090175][T10938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 574.100292][T10938] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 575.582651][ T4317] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 575.768361][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 575.797753][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.819574][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.836294][ T4317] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.845980][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.914652][ T4317] usb 1-1: config 0 descriptor?? [ 576.545342][ T4317] usbhid 1-1:0.0: can't add hid device: -71 [ 576.577302][ T4317] usbhid: probe of 1-1:0.0 failed with error -71 [ 576.610134][ T4317] usb 1-1: USB disconnect, device number 20 [ 577.655870][T10924] tipc: Enabling of bearer rejected, failed to enable media [ 577.744997][T10969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.826870][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.881744][T10979] tipc: Enabling of bearer rejected, failed to enable media [ 577.925762][T10981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.949753][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.965897][T10983] binder: 10982:10983 ioctl c0306201 0 returned -14 [ 577.977442][T10975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.292730][T10335] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 578.532671][T10335] usb 5-1: Using ep0 maxpacket: 16 [ 578.550614][T10335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.724662][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.737270][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 578.748637][T10335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 578.760049][T10335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.863781][T10335] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 578.876195][T10335] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 578.936558][T10335] usb 5-1: Manufacturer: syz [ 578.971744][T10335] usb 5-1: config 0 descriptor?? [ 579.170864][T11001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.647470][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1870'. [ 580.790719][T11023] tipc: Enabling of bearer rejected, failed to enable media [ 580.820533][T11025] tipc: Enabled bearer , priority 0 [ 580.827708][T10335] rc_core: IR keymap rc-hauppauge not found [ 580.843960][T10335] Registered IR keymap rc-empty [ 580.849632][T11023] device syzkaller0 entered promiscuous mode [ 580.888271][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 580.916508][T11025] tipc: Resetting bearer [ 580.926194][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 580.957399][T11024] tipc: Disabling bearer [ 580.964008][T10335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 580.984326][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input76 [ 581.025600][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.072554][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.114052][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.142949][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.158715][T11033] tipc: Enabled bearer , priority 0 [ 581.173941][T11030] tipc: Resetting bearer [ 581.182845][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.227326][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.246455][T11028] tipc: Disabling bearer [ 581.262982][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.297679][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.438441][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.603781][T11038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.694716][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 581.738036][T10335] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 581.802976][T10335] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 581.858509][T10335] usb 5-1: USB disconnect, device number 22 [ 581.923798][T11051] tipc: Enabling of bearer rejected, failed to enable media [ 582.242683][ T129] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 582.832655][T10335] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 583.042540][T10335] usb 5-1: Using ep0 maxpacket: 16 [ 583.055215][T10335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.187143][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.294148][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 583.315644][ T129] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.331893][T10335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.342219][T10335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.354271][T10335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.371806][T10335] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.381142][T10335] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.393120][ T129] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 583.399630][T10335] usb 5-1: Manufacturer: syz [ 583.432117][T10335] usb 5-1: config 0 descriptor?? [ 583.436805][ T129] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 583.471879][ T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.500444][ T129] usb 4-1: config 0 descriptor?? [ 583.516518][T11078] tipc: Enabling of bearer rejected, failed to enable media [ 583.640133][T11081] tipc: Enabling of bearer rejected, failed to enable media [ 583.673424][T11081] device syzkaller0 entered promiscuous mode [ 583.932572][T10335] rc_core: IR keymap rc-hauppauge not found [ 583.939706][T10335] Registered IR keymap rc-empty [ 583.968771][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.022622][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.144862][ T129] usbhid 4-1:0.0: can't add hid device: -71 [ 584.159391][ T129] usbhid: probe of 4-1:0.0 failed with error -71 [ 584.208907][ T129] usb 4-1: USB disconnect, device number 25 [ 584.229071][T10335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 584.243417][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input77 [ 584.312596][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.353243][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.389519][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.425862][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.462657][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.493028][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.522626][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.552493][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.582676][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.612656][T10335] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 584.643724][T10335] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 584.663283][T10335] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 584.693958][T10335] usb 5-1: USB disconnect, device number 23 [ 585.068050][T11110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.324938][T11129] tipc: Enabling of bearer rejected, failed to enable media [ 587.642637][ T129] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 587.818972][T10851] udevd[10851]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 587.876071][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 588.015894][ T129] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.057459][T11151] device syzkaller0 entered promiscuous mode [ 588.082467][ T129] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.123421][ T129] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.143559][ T129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.180699][ T129] usb 2-1: config 0 descriptor?? [ 588.505092][T11159] fuse: Unknown parameter 'group_00000000000000000000' [ 588.727352][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 589.690701][ T129] usbhid 2-1:0.0: can't add hid device: -71 [ 589.698094][ T129] usbhid: probe of 2-1:0.0 failed with error -71 [ 589.712303][ T129] usb 2-1: USB disconnect, device number 25 [ 589.792673][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1909'. [ 589.832505][ T5712] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 589.906584][T11171] device syzkaller0 entered promiscuous mode [ 590.032894][ T5712] usb 3-1: Using ep0 maxpacket: 16 [ 590.048467][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.058881][T11175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.083073][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.112897][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 590.124731][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 590.138993][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.199605][ T5712] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 590.217877][ T5712] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 590.232195][ T5712] usb 3-1: Manufacturer: syz [ 590.248467][T11187] tipc: Enabling of bearer rejected, failed to enable media [ 590.274517][ T5712] usb 3-1: config 0 descriptor?? [ 590.293362][T11186] device syzkaller0 entered promiscuous mode [ 590.316126][T11186] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 590.452511][ T5716] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 590.660603][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 590.696529][T11202] binder: 11201:11202 ioctl c0306201 0 returned -14 [ 590.705822][ T5716] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.732122][ T5716] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.931572][ T5712] rc_core: IR keymap rc-hauppauge not found [ 590.938146][ T5716] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 590.938201][ T5712] Registered IR keymap rc-empty [ 590.952792][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.982694][ T5716] usb 4-1: config 0 descriptor?? [ 590.988887][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.032542][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.070731][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 591.133644][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input78 [ 591.240586][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.312761][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.362751][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.402566][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.442775][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.600856][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.612014][ T5716] usbhid 4-1:0.0: can't add hid device: -71 [ 591.618378][ T5716] usbhid: probe of 4-1:0.0 failed with error -71 [ 591.626884][ T5716] usb 4-1: USB disconnect, device number 26 [ 591.632934][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.662494][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.692800][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.732556][ T5712] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 591.764039][ T5712] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 591.783601][ T5712] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 591.823461][ T5712] usb 3-1: USB disconnect, device number 17 [ 593.296684][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1926'. [ 593.418000][T11237] device syzkaller0 entered promiscuous mode [ 593.610206][T11249] binder: 11248:11249 ioctl c0306201 0 returned -14 [ 594.060820][ T5712] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 594.259035][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 594.294058][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.339086][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 594.383937][ T5712] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 594.495977][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.540895][ T5712] usb 1-1: config 0 descriptor?? [ 595.012027][T11270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1934'. [ 595.965748][T11284] Set syz1 is full, maxelem 65536 reached [ 595.978199][ T5712] usbhid 1-1:0.0: can't add hid device: -71 [ 595.984452][ T5712] usbhid: probe of 1-1:0.0 failed with error -71 [ 595.997372][ T5712] usb 1-1: USB disconnect, device number 21 [ 596.168545][T11288] Set syz1 is full, maxelem 65536 reached [ 596.274732][T11294] binder: 11293:11294 ioctl c0306201 0 returned -14 [ 596.363030][T11296] device syzkaller0 entered promiscuous mode [ 596.379288][T11295] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 596.542469][ T5712] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 596.742650][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 596.756280][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.791544][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.819710][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 596.836304][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 596.848547][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 596.902062][ T5712] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 596.912555][ T5712] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 596.920656][ T5712] usb 4-1: Manufacturer: syz [ 596.929213][ T5712] usb 4-1: config 0 descriptor?? [ 597.342525][ T5712] rc_core: IR keymap rc-hauppauge not found [ 597.349301][ T5712] Registered IR keymap rc-empty [ 597.354593][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.382507][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.413169][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 597.435911][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 597.459527][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.502587][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.512444][ T5716] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 597.553142][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.582623][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.622502][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.677689][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.723627][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.734054][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.748930][ T5716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 597.759770][ T5716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.773705][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.780937][ T5716] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.790724][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.801023][ T5716] usb 1-1: config 0 descriptor?? [ 597.806562][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.852653][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 597.895758][ T5712] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 597.905651][ T5712] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 597.928042][ T5712] usb 4-1: USB disconnect, device number 27 [ 598.516738][ T5716] usbhid 1-1:0.0: can't add hid device: -71 [ 598.523678][ T5716] usbhid: probe of 1-1:0.0 failed with error -71 [ 598.532233][ T5716] usb 1-1: USB disconnect, device number 22 [ 598.844222][T11276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.568307][T11335] Set syz1 is full, maxelem 65536 reached [ 601.786262][ T5712] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 602.034974][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.182460][T10335] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 602.334713][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.344888][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.358204][ T5712] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.367651][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.490777][ T5712] usb 4-1: config 0 descriptor?? [ 602.532487][T10335] usb 3-1: Using ep0 maxpacket: 16 [ 602.539633][T10335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.592566][T10335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 602.630572][T10335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 603.094367][T10335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 603.112490][T10335] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.141773][T10335] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 603.174806][T10335] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 603.196796][ T5712] usbhid 4-1:0.0: can't add hid device: -71 [ 603.206677][ T5712] usbhid: probe of 4-1:0.0 failed with error -71 [ 603.223071][T10335] usb 3-1: Manufacturer: syz [ 603.243453][ T5712] usb 4-1: USB disconnect, device number 28 [ 603.279125][T10335] usb 3-1: config 0 descriptor?? [ 603.388356][T11369] tipc: Enabled bearer , priority 0 [ 603.409202][T11369] tipc: Resetting bearer [ 603.453181][T11368] tipc: Disabling bearer [ 603.587752][T10335] rc_core: IR keymap rc-hauppauge not found [ 603.593876][T10335] Registered IR keymap rc-empty [ 603.598864][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.632578][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.652539][ T22] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 603.679924][T10335] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 603.700539][T10335] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input80 [ 603.728298][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.742458][ T4314] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 603.792996][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.822575][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.849708][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 603.862649][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.870065][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.884553][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.898552][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.906143][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.916138][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.922835][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 603.932588][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.942725][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.945641][ T22] usb 5-1: config 0 descriptor?? [ 603.969008][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 603.987954][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 603.990920][ T4314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 604.015216][ T4314] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 604.029528][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.034207][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.054841][ T4314] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 604.068022][ T4314] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 604.077331][ T4314] usb 1-1: Manufacturer: syz [ 604.082732][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.093066][ T4314] usb 1-1: config 0 descriptor?? [ 604.112521][T10335] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 604.156745][T10335] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 604.173758][T10335] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 604.187521][T10335] usb 3-1: USB disconnect, device number 18 [ 604.322644][ T5712] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 604.402488][ T4314] rc_core: IR keymap rc-hauppauge not found [ 604.408478][ T4314] Registered IR keymap rc-empty [ 604.413984][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.442496][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.473004][ T4314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 604.495675][ T4314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input81 [ 604.512487][ T5712] usb 4-1: Using ep0 maxpacket: 16 [ 604.518745][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.527667][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.538110][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.549231][ T5712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 604.559325][ T5712] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 604.572609][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.573405][ T27] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 604.592791][ T22] usbhid 5-1:0.0: can't add hid device: -71 [ 604.599200][ T22] usbhid: probe of 5-1:0.0 failed with error -71 [ 604.615738][ T22] usb 5-1: USB disconnect, device number 24 [ 604.622754][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.642853][ T5712] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.656480][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.675236][ T5712] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 604.688720][ T5712] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 604.700968][ T5712] usb 4-1: Manufacturer: syz [ 604.708568][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.737728][ T5712] usb 4-1: config 0 descriptor?? [ 604.762639][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.795122][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.807245][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.816640][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.832949][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.849009][ T27] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 604.852985][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.871218][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.899407][ T27] usb 2-1: config 0 descriptor?? [ 604.903398][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.942514][ T4314] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 604.975145][ T4314] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 604.994554][ T4314] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 605.031566][ T4314] usb 1-1: USB disconnect, device number 23 [ 605.132993][ T5712] rc_core: IR keymap rc-hauppauge not found [ 605.138967][ T5712] Registered IR keymap rc-empty [ 605.153807][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.192600][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.228292][ T5712] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 605.260182][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input82 [ 605.330087][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.358819][ C0] rc rc1: IR event FIFO is full! [ 605.363853][ C0] rc rc1: IR event FIFO is full! [ 605.369677][ C0] rc rc1: IR event FIFO is full! [ 605.374668][ C0] rc rc1: IR event FIFO is full! [ 605.379644][ C0] rc rc1: IR event FIFO is full! [ 605.384614][ C0] rc rc1: IR event FIFO is full! [ 605.389591][ C0] rc rc1: IR event FIFO is full! [ 605.394562][ C0] rc rc1: IR event FIFO is full! [ 605.399527][ C0] rc rc1: IR event FIFO is full! [ 605.497670][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.562593][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.602731][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.662927][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.702953][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.743095][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.760159][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 605.766359][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 605.828880][ T27] usb 2-1: USB disconnect, device number 26 [ 605.853102][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.882575][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.912486][ T5712] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 605.948609][ T5712] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 605.968145][ T5712] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 605.992625][ T5712] usb 4-1: USB disconnect, device number 29 [ 606.872235][T11413] tipc: Enabled bearer , priority 0 [ 608.366941][T11423] Set syz1 is full, maxelem 65536 reached [ 608.481203][T11425] tipc: Resetting bearer [ 608.578778][T11412] tipc: Disabling bearer [ 608.632741][T11427] device syzkaller0 entered promiscuous mode [ 612.657142][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1999'. [ 612.852175][T11484] device syzkaller0 entered promiscuous mode [ 614.244784][T11504] device syzkaller0 entered promiscuous mode [ 615.607427][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2014'. [ 616.930910][T11540] device syzkaller0 entered promiscuous mode [ 619.244549][T11556] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2022'. [ 619.352765][T11516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 622.331657][T11577] device syzkaller0 entered promiscuous mode [ 623.406344][T11592] Set syz1 is full, maxelem 65536 reached [ 625.452703][ T5712] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 625.463436][T11618] tipc: Enabling of bearer rejected, failed to enable media [ 625.568290][T11618] device syzkaller0 entered promiscuous mode [ 625.672446][ T5712] usb 5-1: Using ep0 maxpacket: 16 [ 625.679644][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.694566][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.715752][ T5712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 625.726509][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 625.753797][ T5712] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.788587][ T5712] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 625.799630][ T5712] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 625.813410][ T5712] usb 5-1: Manufacturer: syz [ 625.862677][ T5712] usb 5-1: config 0 descriptor?? [ 626.443660][T11639] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 626.995651][ T5712] rc_core: IR keymap rc-hauppauge not found [ 627.001675][ T5712] Registered IR keymap rc-empty [ 627.006670][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 627.056731][T11641] Set syz1 is full, maxelem 65536 reached [ 627.132544][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 627.173153][ T5712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 627.199132][ T5712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input83 [ 627.217222][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 627.248060][ C0] rc rc0: IR event FIFO is full! [ 627.253081][ C0] rc rc0: IR event FIFO is full! [ 627.258236][ C0] rc rc0: IR event FIFO is full! [ 627.263222][ C0] rc rc0: IR event FIFO is full! [ 627.268247][ C0] rc rc0: IR event FIFO is full! [ 627.273221][ C0] rc rc0: IR event FIFO is full! [ 627.278201][ C0] rc rc0: IR event FIFO is full! [ 627.284007][ C0] rc rc0: IR event FIFO is full! [ 627.289008][ C0] rc rc0: IR event FIFO is full! [ 627.293971][ C0] rc rc0: IR event FIFO is full! [ 627.298949][ C0] rc rc0: IR event FIFO is full! [ 627.303912][ C0] rc rc0: IR event FIFO is full! [ 627.308881][ C0] rc rc0: IR event FIFO is full! [ 627.313857][ C0] rc rc0: IR event FIFO is full! [ 627.674984][ T22] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 627.918166][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.134062][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.173978][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.218411][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.228902][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 628.242798][ T22] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 628.251929][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.282503][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.282507][ T22] usb 1-1: config 0 descriptor?? [ 628.312641][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.342474][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.393063][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 628.872852][ T22] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 629.192458][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 629.201113][ T22] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 629.222651][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 629.278840][ T22] usb 1-1: USB disconnect, device number 24 [ 629.292769][ T5712] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 629.323743][ T5712] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 629.368798][ T5712] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 629.448583][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.454963][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.473691][ T5712] usb 5-1: USB disconnect, device number 25 [ 629.618900][T11679] fido_id[11679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 630.215474][T11693] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 633.485321][T11717] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 634.728541][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2060'. [ 634.772657][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 634.802791][T11725] device syzkaller0 entered promiscuous mode [ 635.089570][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.191225][T11746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.086275][T11739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.722283][T11764] udevd[11764]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 636.854197][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2072'. [ 636.940665][T11769] device syzkaller0 entered promiscuous mode [ 636.990462][T11774] tipc: Enabling of bearer rejected, failed to enable media [ 637.140091][T11774] device syzkaller0 entered promiscuous mode [ 637.160297][T11779] device syzkaller0 entered promiscuous mode [ 637.538682][T11786] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 640.803182][T11780] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 640.841511][T11755] udevd[11755]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 641.266537][T11813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 642.945156][T11828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2089'. [ 643.381455][T11832] device syzkaller0 entered promiscuous mode [ 752.962322][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 752.969332][ C1] (detected by 1, t=10502 jiffies, g=68105, q=150 ncpus=2) [ 752.976637][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10497 (4295012417-4295001920), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 752.990040][ C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g68105 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 753.001266][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 753.011267][ C1] rcu: RCU grace-period kthread stack dump: [ 753.017184][ C1] task:rcu_preempt state:R running task stack:27760 pid:16 ppid:2 flags:0x00004000 [ 753.028023][ C1] Call Trace: [ 753.031333][ C1] [ 753.034313][ C1] __schedule+0x11d1/0x40e0 [ 753.038874][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 753.044804][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 753.050750][ C1] ? __sched_text_start+0x8/0x8 [ 753.055643][ C1] ? __mod_timer+0x91e/0xd00 [ 753.060305][ C1] schedule+0xb9/0x180 [ 753.064421][ C1] schedule_timeout+0x184/0x2d0 [ 753.069312][ C1] ? console_conditional_schedule+0x40/0x40 [ 753.075268][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 753.081217][ C1] ? update_process_times+0x1b0/0x1b0 [ 753.086654][ C1] ? prepare_to_swait_event+0x335/0x350 [ 753.092248][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 753.097150][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 753.103340][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 753.108161][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 753.113069][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 753.118326][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 753.123555][ C1] rcu_gp_kthread+0x99/0x3b0 [ 753.128180][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 753.133363][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 753.139308][ C1] ? __kthread_parkme+0x162/0x1c0 [ 753.144390][ C1] kthread+0x29d/0x330 [ 753.148498][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 753.153674][ C1] ? kthread_blkcg+0xd0/0xd0 [ 753.158301][ C1] ret_from_fork+0x1f/0x30 [ 753.162805][ C1] [ 753.165948][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 753.172313][ C1] Sending NMI from CPU 1 to CPUs 0: [ 753.177566][ C0] NMI backtrace for cpu 0 [ 753.177590][ C0] CPU: 0 PID: 11865 Comm: syz.3.2100 Not tainted syzkaller #0 [ 753.177606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.177615][ C0] RIP: 0010:native_apic_msr_write+0x35/0x50 [ 753.177640][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 ef 48 01 03 66 2e 0f 1f 84 00 00 00 00 00 [ 753.177654][ C0] RSP: 0018:ffffc90000007e38 EFLAGS: 00000046 [ 753.177669][ C0] RAX: 00000000000483ae RBX: 00000000000483ae RCX: 0000000000000838 [ 753.177691][ C0] RDX: 0000000000000000 RSI: 00000000000483ae RDI: 0000000000000838 [ 753.177701][ C0] RBP: 0000000000000000 R08: ffffffff8e1fcd2f R09: 1ffffffff1c3f9a5 [ 753.177711][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f9a6 R12: dffffc0000000000 [ 753.177722][ C0] R13: 00000000100058eb R14: ffffffff8c64fb40 R15: dffffc0000000000 [ 753.177734][ C0] FS: 00007fe16aea56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 753.177747][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.177757][ C0] CR2: 000020000006b000 CR3: 0000000055de6000 CR4: 00000000003506f0 [ 753.177770][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.177779][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 753.177788][ C0] Call Trace: [ 753.177794][ C0] [ 753.177798][ C0] lapic_next_event+0x5b/0x70 [ 753.177822][ C0] clockevents_program_event+0x1bc/0x310 [ 753.177844][ C0] hrtimer_interrupt+0x59d/0x9c0 [ 753.177872][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 753.177896][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 753.177922][ C0] [ 753.177926][ C0] [ 753.177930][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 753.177949][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 753.177964][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9e 02 2e f7 48 89 df e8 e6 ca 2e f7 e8 31 1f 52 f7 fb bf 01 00 00 00 86 2b 22 f7 65 8b 05 47 b0 cb 75 85 c0 74 02 5b c3 e8 94 c4 c9 [ 753.177976][ C0] RSP: 0018:ffffc90003d87b98 EFLAGS: 00000282 [ 753.177987][ C0] RAX: 081852de91e7bf00 RBX: ffff88802f03ae40 RCX: 081852de91e7bf00 [ 753.177998][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 753.178008][ C0] RBP: ffff88802f03b2d8 R08: ffff88802f03ae43 R09: 1ffff11005e075c8 [ 753.178019][ C0] R10: dffffc0000000000 R11: ffffed1005e075c9 R12: 1ffff11005e0765b [ 753.178031][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 753.178049][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 753.178063][ C0] get_signal+0x1163/0x1350 [ 753.178096][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 753.178119][ C0] ? __ia32_sys_rt_sigreturn+0x619/0x760 [ 753.178141][ C0] ? load_gs_index+0x130/0x130 [ 753.178159][ C0] ? get_sigframe_size+0x10/0x10 [ 753.178205][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 753.178231][ C0] exit_to_user_mode_loop+0x70/0x110 [ 753.178256][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 753.178282][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 753.178314][ C0] do_syscall_64+0x58/0xa0 [ 753.178333][ C0] ? clear_bhb_loop+0x60/0xb0 [ 753.178350][ C0] ? clear_bhb_loop+0x60/0xb0 [ 753.178368][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 753.178385][ C0] RIP: 0033:0x7fe169f9c627 [ 753.178401][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 753.178413][ C0] RSP: 002b:00007fe16aea5028 EFLAGS: 00000246 [ 753.178424][ C0] RAX: 0000000000000113 RBX: 00007fe16a215fa0 RCX: 00007fe169f9c629 [ 753.178435][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005 [ 753.178443][ C0] RBP: 00007fe16a032b39 R08: 0000000000000007 R09: 0000000000000000 [ 753.178469][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.178478][ C0] R13: 00007fe16a216038 R14: 00007fe16a215fa0 R15: 00007ffd7e212e38 [ 753.178497][ C0]