last executing test programs: 11m36.385687572s ago: executing program 2 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044804}, 0x8040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r6, 0x1) writev(r6, &(0x7f0000000d40)=[{&(0x7f0000003680)="861009bc4337a5", 0x7}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28020480) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 11m35.203353017s ago: executing program 1 (id=2): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x560c, &(0x7f00000000c0)={0x0, 0x211a, 0x1, 0x2, 0x306}, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "e476d0501796a924", "50ac495230f834b7f7768b40b65222de", '\beKx', "009dd280960531d3"}, 0x28) sendmsg$DEVLINK_CMD_TRAP_SET(r2, 0x0, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 11m34.500059861s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010035bd7000fedbdf250f000000240007800c00030003000012000000000800020008"], 0x38}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 11m33.176936608s ago: executing program 0 (id=6): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x2) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 11m30.44810383s ago: executing program 1 (id=9): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5c}}, 0x4048084) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) 11m20.689731129s ago: executing program 32 (id=3): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@broadcast, @dev, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x16, 0x0, 0x0, 0x0, "f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4586f5d99cbaaf8b332233f"}}}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044804}, 0x8040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r6, &(0x7f0000000240)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r6, 0x1) writev(r6, &(0x7f0000000d40)=[{&(0x7f0000003680)="861009bc4337a5", 0x7}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) unshare(0x28020480) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 11m17.715284829s ago: executing program 33 (id=6): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x2) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 11m15.151412546s ago: executing program 34 (id=9): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) lsm_set_self_attr(0x68, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x5c}}, 0x4048084) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) 7m56.903604642s ago: executing program 3 (id=489): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) 7m55.82329366s ago: executing program 3 (id=492): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m54.869433026s ago: executing program 3 (id=497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x49) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) open$dir(0x0, 0x800, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002080)={0x0, &(0x7f0000002080)}) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r3, 0x9012}], 0x1, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000004180)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000030000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, 0x0, 0x2, 0x0) 7m41.422547094s ago: executing program 3 (id=531): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m37.044673654s ago: executing program 3 (id=540): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 7m35.439093229s ago: executing program 3 (id=546): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r3, &(0x7f00000002c0)=""/124, 0x7c, 0x7) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4d}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x354) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 7m20.040937102s ago: executing program 35 (id=546): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r3, &(0x7f00000002c0)=""/124, 0x7c, 0x7) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4d}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x354) lsetxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 3m39.528784241s ago: executing program 4 (id=1114): recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}, {&(0x7f0000001280)=""/121, 0x79}], 0x3, 0x0, 0x0, 0x2102}, 0x1c, 0x12040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x2a, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 3m26.633548844s ago: executing program 4 (id=1136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000001000000050a03000000000000000000010020000900030073797a320000000014000000110001"], 0x68}}, 0x200000d4) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m23.982825456s ago: executing program 4 (id=1140): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket(0x2, 0x80805, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m23.004792475s ago: executing program 4 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d0000"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) 3m21.642195613s ago: executing program 4 (id=1147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f00000004c0)='./file0\x00', 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x3f2f, 0x10100, 0x0, 0x8}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000091, 0x0, 0x6000000}]}) write$midi(r0, &(0x7f00000000c0)="bfaa0ef5951f379fd6a8e0819d51cd2030", 0x11) 3m19.982385678s ago: executing program 4 (id=1153): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8906, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x0) 3m4.464091497s ago: executing program 36 (id=1153): socket(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8906, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x8, 0xfffffffe, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') r4 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x40505330, &(0x7f0000000080)={0x800103, 0xfffff7fd, 0x22, 0xce9, 0x1101, 0x5}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x0) 35.277956288s ago: executing program 7 (id=1501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x20280, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x50040080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0xff7ffff7) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r7, 0x2, 0x2, r8}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000080)={r8, 0x0, 0x2, r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r8, 0x7, 0x2, r7}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') 21.142662263s ago: executing program 7 (id=1531): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 20.219542511s ago: executing program 7 (id=1535): syz_open_procfs(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x1, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x6}}}}}}}, 0x0) 18.753755334s ago: executing program 7 (id=1541): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) lstat(&(0x7f00000067c0)='./file0\x00', 0x0) 17.035801037s ago: executing program 6 (id=1544): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff", 0x3f}], 0x2}}], 0x1, 0xc2) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffddf, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) 16.516360231s ago: executing program 7 (id=1546): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) 16.039285668s ago: executing program 9 (id=1547): syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="4015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x3ff, 0x5, 0x0, 0xffff76a5, 0xf3}, &(0x7f0000000200)=0x14) 15.806386691s ago: executing program 5 (id=1548): openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x24040808) socket(0x40000000002, 0x3, 0x80000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000e0520000000000000000000000000000000000000000003abd12fa1f69198b2eb5bb9018831bbfff10e0437baa9e2ef0358909de18137300784cea6a1321d8e2487464c71ad13f56859adee77e77ebaad2516a374064a6d9d5666984"], 0x48) 14.187079398s ago: executing program 7 (id=1550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x2, 0x3) 13.478714333s ago: executing program 9 (id=1551): syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x1, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x6}}}}}}}, 0x0) 11.567167979s ago: executing program 5 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x800, 0xc, 0x80, 0x1, 0x72e6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYBLOB="d4"], 0x24}}, 0x0) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r7, 0x0, 0x1ff) sendfile(r8, r8, 0x0, 0x9) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r9, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/21, 0x15}, 0x1}], 0x1, 0x2000, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 11.152081584s ago: executing program 6 (id=1554): syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0044159743df776a5de9392543da7d297b3dea"], 0xf, 0xa02, &(0x7f0000001ec0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xfeb11bdd49a3dcc5) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2d, 0x0, @fd, 0x40, 0x0, 0x4, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 10.675912065s ago: executing program 9 (id=1555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) 10.633428959s ago: executing program 8 (id=1556): syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}}, 0x0) 10.030193797s ago: executing program 5 (id=1557): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x54, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[@routing={0x0, 0x8, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @mcast1]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x80, 0x80842) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x9c) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r7, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f00000000c0)=0x80000001) accept4$nfc_llcp(r7, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 9.910605141s ago: executing program 8 (id=1558): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9.636412191s ago: executing program 6 (id=1559): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, 0x0, 0x20000818) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb030000e1000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e2026"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@mcast1, @mcast1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYRES16, @ANYBLOB="df4800000000000000000c000000040003801800"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xea8, 0x500096, r4}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001900010000000000000000000a"], 0x1c}}, 0x0) 6.066816918s ago: executing program 5 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.042094736s ago: executing program 9 (id=1561): landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, 0x0) 5.832037657s ago: executing program 8 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008000000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) 5.420983006s ago: executing program 6 (id=1563): syz_emit_ethernet(0x7e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xea, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.419605559s ago: executing program 8 (id=1564): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.325937726s ago: executing program 5 (id=1565): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0xfffffffc, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x52, &(0x7f00000008c0)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0x1, @remote, @local, {[], {0x4e20, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x6}}}}}}}, 0x0) 2.274315612s ago: executing program 9 (id=1566): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) 1.905351218s ago: executing program 8 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x800, 0xc, 0x80, 0x1, 0x72e6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31032abd7000000000000900000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYBLOB="d4"], 0x24}}, 0x0) close(r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r7, 0x0, 0x1ff) sendfile(r8, r8, 0x0, 0x9) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r9, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/21, 0x15}, 0x1}], 0x1, 0x2000, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 1.370419454s ago: executing program 6 (id=1568): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) 807.294077ms ago: executing program 5 (id=1569): syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120120020e13e5088d1a0d109e100102030109022440010755e001090406fe02ffff025c09050f17000002090509"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) msgsnd(0x0, 0x0, 0x0, 0x0) 463.713259ms ago: executing program 6 (id=1570): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0x1, 0x27f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 277.220385ms ago: executing program 9 (id=1571): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) 0s ago: executing program 8 (id=1572): syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) execve(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): -1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 764.949291][T10087] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 764.986477][ T5898] usb 7-1: USB disconnect, device number 40 [ 765.003214][ T5873] usb 6-1: config 0 descriptor?? [ 765.087802][T10087] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 765.098749][T10087] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 765.109186][T10087] usb 9-1: Product: syz [ 765.113618][T10087] usb 9-1: Manufacturer: syz [ 765.137940][ T1675] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.149119][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.161368][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.172988][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.184724][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.201659][ T8590] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 765.233685][ T5873] gspca_main: se401-2.14.0 probing 047d:5003 [ 765.255399][T10087] cdc_wdm 9-1:1.0: skipping garbage [ 765.261304][T10087] cdc_wdm 9-1:1.0: skipping garbage [ 765.311999][ T1675] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.324498][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.336812][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.348549][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.360098][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.380425][T10087] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 765.387094][T10087] cdc_wdm 9-1:1.0: Unknown control protocol [ 765.415598][ T8590] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.426980][ T8590] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.502723][ T8590] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 765.512650][ T8590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.523368][ T8590] usb 5-1: SerialNumber: syz [ 765.595751][ T1675] usb 8-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 765.607137][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.620999][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 765.633611][ T1675] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 765.645440][ T1675] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 765.802570][ T8590] usb 5-1: 0:2 : does not exist [ 765.979366][ T8590] usb 5-1: USB disconnect, device number 40 [ 766.010252][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 766.121146][ T5873] gspca_se401: read req failed req 0x06 error -19 [ 766.245258][ T5873] usb 6-1: USB disconnect, device number 40 [ 766.379677][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.417138][T10190] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1113'. [ 767.915009][ T1675] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 767.926014][ T1675] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.065079][ T5873] usb 9-1: USB disconnect, device number 37 [ 768.155353][ T1675] usb 8-1: can't set config #168, error -71 [ 768.204891][ T1675] usb 8-1: USB disconnect, device number 35 [ 768.694188][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1115'. [ 771.272214][ T1675] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 771.532265][ T1675] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 771.541212][ T1675] usb 9-1: config 4 has no interface number 0 [ 771.548631][ T5873] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 771.665046][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 771.671508][ T1675] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 771.684434][ T1675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.692777][ T1675] usb 9-1: Product: syz [ 771.697424][ T1675] usb 9-1: Manufacturer: syz [ 771.702313][ T1675] usb 9-1: SerialNumber: syz [ 771.885297][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 771.936609][ T5873] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 771.945687][ T5873] usb 7-1: config 0 has an invalid interface descriptor of length 6, skipping [ 771.949443][ T1675] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 771.955184][ T5873] usb 7-1: config 0 has no interface number 0 [ 771.970528][ T5873] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 771.984196][ T5873] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 772.103158][ T9] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 772.112960][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.121550][ T9] usb 6-1: Product: syz [ 772.126143][ T9] usb 6-1: Manufacturer: syz [ 772.131030][ T9] usb 6-1: SerialNumber: syz [ 772.199768][ T9] usb 6-1: config 0 descriptor?? [ 772.238953][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 772.265656][ T5873] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 772.275584][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.286292][ T5873] usb 7-1: Product: syz [ 772.290723][ T5873] usb 7-1: Manufacturer: syz [ 772.296691][ T5873] usb 7-1: SerialNumber: syz [ 772.331139][ T5873] usb 7-1: config 0 descriptor?? [ 772.375014][ T5873] ljca 7-1:0.84: bulk endpoints not found [ 772.382692][ T1675] vp7045: USB control message 'in' went wrong. [ 772.390218][ T1675] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 772.401286][ T1675] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 772.517750][ T1675] usb 9-1: USB disconnect, device number 38 [ 772.675781][ T5873] usb 7-1: USB disconnect, device number 41 [ 773.373652][ T9] gspca_se401: read req failed req 0x06 error -19 [ 773.467688][ T9] usb 6-1: USB disconnect, device number 41 [ 774.039491][T10248] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1126'. [ 774.304818][ T1675] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 774.587824][ T1675] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 774.600186][ T1675] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.745015][ T1675] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 774.754698][ T1675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 774.763019][ T1675] usb 7-1: SerialNumber: syz [ 775.203012][ T1675] usb 7-1: 0:2 : does not exist [ 775.209958][ T1675] usb 7-1: unit 255 not found! [ 775.295087][ T8590] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 775.516545][ T1675] usb 7-1: USB disconnect, device number 42 [ 775.542603][ T8590] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 775.551988][ T8590] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 775.562934][ T8590] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 775.572286][ T8590] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 775.583596][ T8590] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 775.685695][ T8590] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 775.695392][ T8590] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 775.703611][ T8590] usb 6-1: Product: syz [ 775.708828][ T8590] usb 6-1: Manufacturer: syz [ 775.808108][ T8590] cdc_wdm 6-1:1.0: skipping garbage [ 775.813769][ T8590] cdc_wdm 6-1:1.0: skipping garbage [ 775.914801][ T8590] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 775.920935][ T8590] cdc_wdm 6-1:1.0: Unknown control protocol [ 776.083793][ T6144] udevd[6144]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 776.497043][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 4 bytes [ 777.333846][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1130'. [ 778.851903][ T8590] usb 6-1: USB disconnect, device number 42 [ 779.804687][ T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 780.066062][ T9] usb 7-1: config 0 has an invalid interface number: 84 but max is 0 [ 780.075115][ T9] usb 7-1: config 0 has an invalid interface descriptor of length 6, skipping [ 780.085777][ T9] usb 7-1: config 0 has no interface number 0 [ 780.092282][ T9] usb 7-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 780.104346][ T9] usb 7-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 780.125125][ T8590] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 780.331686][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 780.341802][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.350583][ T9] usb 7-1: Product: syz [ 780.355240][ T9] usb 7-1: Manufacturer: syz [ 780.360072][ T9] usb 7-1: SerialNumber: syz [ 780.394852][ T8590] usb 9-1: Using ep0 maxpacket: 8 [ 780.446598][ T8590] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.457318][ T8590] usb 9-1: config 0 has no interfaces? [ 780.507778][ T8590] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 780.517723][ T8590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.526492][ T8590] usb 9-1: Product: syz [ 780.530965][ T8590] usb 9-1: Manufacturer: syz [ 780.536081][ T8590] usb 9-1: SerialNumber: syz [ 780.557015][ T8590] usb 9-1: config 0 descriptor?? [ 780.569316][ T9] usb 7-1: config 0 descriptor?? [ 780.748332][ T9] ljca 7-1:0.84: bulk endpoints not found [ 780.935490][ T5873] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 780.999304][ T9] usb 7-1: USB disconnect, device number 43 [ 781.187391][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 781.366828][ T5873] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 781.377711][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.386479][ T5873] usb 5-1: Product: syz [ 781.390950][ T5873] usb 5-1: Manufacturer: syz [ 781.397429][ T5873] usb 5-1: SerialNumber: syz [ 781.488489][ T5873] usb 5-1: config 0 descriptor?? [ 781.549545][ T5873] gspca_main: se401-2.14.0 probing 047d:5003 [ 782.545960][ T5873] gspca_se401: read req failed req 0x06 error -19 [ 782.636381][ T5873] usb 5-1: USB disconnect, device number 41 [ 783.153429][ T1675] usb 9-1: USB disconnect, device number 39 [ 783.225023][ T8590] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 783.453834][ T8590] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 783.465251][ T8590] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 783.537214][ T8590] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 783.547692][ T8590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 783.556383][ T8590] usb 6-1: SerialNumber: syz [ 783.851903][ T8590] usb 6-1: 0:2 : does not exist [ 783.858343][ T8590] usb 6-1: unit 255 not found! [ 784.126754][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1143'. [ 784.192926][ T8590] usb 6-1: USB disconnect, device number 43 [ 784.254200][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1144'. [ 784.267205][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1144'. [ 784.459379][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.467042][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.650659][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.073000][ T5819] Bluetooth: hci6: Ignoring connect complete event for invalid link type [ 785.924666][ T8590] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 786.239934][ T8590] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 786.248664][ T8590] usb 6-1: config 0 has an invalid interface descriptor of length 8, skipping [ 786.258280][ T8590] usb 6-1: config 0 has no interface number 0 [ 786.264752][ T8590] usb 6-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 786.276122][ T8590] usb 6-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 786.611557][ T8590] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 786.621807][ T8590] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.631799][ T8590] usb 6-1: Product: syz [ 786.636752][ T8590] usb 6-1: Manufacturer: syz [ 786.641542][ T8590] usb 6-1: SerialNumber: syz [ 786.891990][ T8590] usb 6-1: config 0 descriptor?? [ 786.916995][ T9] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 787.002124][ T8590] ljca 6-1:0.84: bulk endpoints not found [ 787.150158][ T9] usb 9-1: config 0 has an invalid interface number: 222 but max is 0 [ 787.159446][ T9] usb 9-1: config 0 has no interface number 0 [ 787.164820][ T5898] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 787.166124][ T9] usb 9-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 787.184895][ T9] usb 9-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 787.196536][ T9] usb 9-1: config 0 interface 222 has no altsetting 0 [ 787.315094][ T8590] usb 6-1: USB disconnect, device number 44 [ 787.402800][ T9] usb 9-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 787.412506][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.421050][ T9] usb 9-1: Product: syz [ 787.425605][ T9] usb 9-1: Manufacturer: syz [ 787.430501][ T9] usb 9-1: SerialNumber: syz [ 787.504160][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 787.514977][ T5898] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 787.525264][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 787.535649][ T5898] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 787.546554][ T5898] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 787.556321][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.598405][ T9] usb 9-1: config 0 descriptor?? [ 787.608627][T10354] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 787.690022][T10354] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 787.860942][T10365] overlayfs: missing 'lowerdir' [ 787.930431][ T5898] usb 8-1: config 0 descriptor?? [ 788.166446][ T9] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.222/input/input22 [ 788.428478][ T5898] hdpvr 8-1:0.0: firmware version 0x0 dated [ 788.435615][ T5898] hdpvr 8-1:0.0: untested firmware, the driver might not work. [ 788.519358][ T8590] usb 9-1: USB disconnect, device number 40 [ 788.519668][ C0] usbtouchscreen 9-1:0.222: usbtouch_irq - usb_submit_urb failed with result: -19 [ 789.124791][ T5898] hdpvr 8-1:0.0: Could not setup controls [ 789.133982][ T5898] hdpvr 8-1:0.0: registering videodev failed [ 789.300620][ T5898] hdpvr 8-1:0.0: probe with driver hdpvr failed with error -71 [ 789.563774][ T5898] usb 8-1: USB disconnect, device number 36 [ 790.115039][ T8590] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 790.298776][T10385] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1157'. [ 790.311213][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1157'. [ 790.364774][ T8590] usb 7-1: Using ep0 maxpacket: 16 [ 790.406811][ T8590] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 790.415906][ T8590] usb 7-1: config 0 has no interface number 0 [ 790.422340][ T8590] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 790.432680][ T8590] usb 7-1: config 0 interface 41 has no altsetting 0 [ 790.656492][ T8590] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 790.666351][ T8590] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.675766][ T8590] usb 7-1: Product: syz [ 790.680270][ T8590] usb 7-1: Manufacturer: syz [ 790.685544][ T8590] usb 7-1: SerialNumber: syz [ 790.719168][ T5872] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 790.824010][ T8590] usb 7-1: config 0 descriptor?? [ 790.831918][T10378] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 790.941882][ T8590] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 791.154770][ T5872] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 791.165695][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.297904][ T5872] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 791.307930][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 791.316414][ T5872] usb 6-1: SerialNumber: syz [ 791.652497][ T5872] usb 6-1: 0:2 : does not exist [ 791.657976][ T5872] usb 6-1: unit 255 not found! [ 791.898641][ T5872] usb 6-1: USB disconnect, device number 45 [ 792.378390][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 793.300607][ T8590] usb 7-1: USB disconnect, device number 44 [ 795.885045][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1169'. [ 795.967109][T10435] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1170'. [ 795.977085][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1170'. [ 797.534688][ T5872] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 797.826384][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 797.929229][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 797.937519][ T5872] usb 6-1: can't read configurations, error -71 [ 797.955440][ T8883] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 798.183344][ T8883] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.195523][ T8883] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 798.258432][ T8883] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 798.268581][ T8883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 798.277077][ T8883] usb 9-1: SerialNumber: syz [ 798.578149][ T8883] usb 9-1: 0:2 : does not exist [ 798.975045][ T8883] usb 9-1: USB disconnect, device number 41 [ 799.392140][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 800.474714][ T8590] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 800.739491][ T8590] usb 9-1: Using ep0 maxpacket: 16 [ 800.787811][ T8590] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 800.797000][ T8590] usb 9-1: config 0 has no interface number 0 [ 800.803441][ T8590] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 800.813902][ T8590] usb 9-1: config 0 interface 41 has no altsetting 0 [ 801.033679][ T8590] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 801.043413][ T8590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.052122][ T8590] usb 9-1: Product: syz [ 801.057244][ T8590] usb 9-1: Manufacturer: syz [ 801.062199][ T8590] usb 9-1: SerialNumber: syz [ 801.210097][ T8590] usb 9-1: config 0 descriptor?? [ 801.222370][T10460] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 801.329936][ T8590] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22 [ 801.495113][T10467] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1176' sets config #1 [ 801.684048][T10467] vlan0: entered promiscuous mode [ 803.529391][ T5872] usb 9-1: USB disconnect, device number 42 [ 803.985457][T10492] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1182'. [ 804.287384][ T9694] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.306444][ T9694] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.327198][ T9694] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.360994][ T9694] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.375698][ T9694] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 805.374578][ T5872] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 805.834843][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 805.896978][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 805.905301][ T5872] usb 6-1: can't read configurations, error -71 [ 806.484622][ T1675] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 806.487595][ T5819] Bluetooth: hci2: command tx timeout [ 806.716694][ T1675] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.727687][ T1675] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.838565][ T1675] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.848487][ T1675] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.857146][ T1675] usb 8-1: SerialNumber: syz [ 806.951545][T10495] chnl_net:caif_netlink_parms(): no params data found [ 807.242941][ T1675] usb 8-1: 0:2 : does not exist [ 807.542705][ T1675] usb 8-1: USB disconnect, device number 37 [ 807.956589][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.017031][ T5814] syz_tun (unregistering): left allmulticast mode [ 808.102427][T10523] syz.6.1187 (10523) used greatest stack depth: 4376 bytes left [ 808.396809][ T4031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.565189][ T5819] Bluetooth: hci2: command tx timeout [ 808.720474][ T4031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.969137][ T4031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.240274][ T4031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.702546][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 809.831549][T10495] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.839543][T10495] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.847758][T10495] bridge_slave_0: entered allmulticast mode [ 809.857670][T10495] bridge_slave_0: entered promiscuous mode [ 809.925511][ T1675] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 810.135640][T10495] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.143387][T10495] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.151972][T10495] bridge_slave_1: entered allmulticast mode [ 810.229694][T10537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.235461][ T1675] usb 8-1: Using ep0 maxpacket: 32 [ 810.318067][ T1675] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.330516][ T1675] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.341374][ T1675] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 810.350398][T10537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.350879][ T1675] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.410124][T10495] bridge_slave_1: entered promiscuous mode [ 810.441041][ T4031] bridge_slave_1: left allmulticast mode [ 810.447451][ T4031] bridge_slave_1: left promiscuous mode [ 810.454552][ T4031] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.530873][ T4031] bridge_slave_0: left allmulticast mode [ 810.537249][ T4031] bridge_slave_0: left promiscuous mode [ 810.543760][ T4031] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.654702][ T5819] Bluetooth: hci2: command tx timeout [ 810.669003][ T1675] usb 8-1: config 0 descriptor?? [ 811.439327][ T4031] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 811.450844][ T1675] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 811.634592][ T1675] usb 8-1: USB disconnect, device number 38 [ 811.828794][ T4031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.957483][ T4031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.984673][ T4031] bond0 (unregistering): Released all slaves [ 812.014777][ T8590] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 812.290731][ T8590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.302502][ T8590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.313980][ T8590] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 812.324513][ T8590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.425713][ T8590] usb 6-1: config 0 descriptor?? [ 812.725332][ T5819] Bluetooth: hci2: command tx timeout [ 812.887371][T10551] fido_id[10551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 812.888194][T10495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.991722][ T8590] usbhid 6-1:0.0: can't add hid device: -71 [ 812.998879][ T8590] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 813.114675][ T8590] usb 6-1: USB disconnect, device number 50 [ 813.264489][T10495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.498480][ T4031] hsr_slave_0: left promiscuous mode [ 813.552642][ T4031] hsr_slave_1: left promiscuous mode [ 813.562169][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.570476][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.667532][ T4031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.675640][ T4031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.782315][ T4031] veth1_macvtap: left promiscuous mode [ 813.792071][ T4031] veth0_macvtap: left promiscuous mode [ 813.798298][ T4031] veth1_vlan: left promiscuous mode [ 813.803813][ T4031] veth0_vlan: left promiscuous mode [ 816.645753][T10495] team0: Port device team_slave_0 added [ 816.738308][T10495] team0: Port device team_slave_1 added [ 817.394042][T10589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.525070][T10495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.532560][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.560702][T10495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.773800][T10495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.781241][T10495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.807831][T10495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.968177][ T5872] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 818.028035][T10589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.162663][T10587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.205237][ T5872] usb 9-1: Using ep0 maxpacket: 32 [ 818.220529][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.231955][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.242207][ T5872] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 818.251724][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.293808][T10495] hsr_slave_0: entered promiscuous mode [ 818.305098][T10495] hsr_slave_1: entered promiscuous mode [ 818.314084][T10495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.323698][T10495] Cannot create hsr debugfs directory [ 818.432569][ T5872] usb 9-1: config 0 descriptor?? [ 818.995991][ T5872] savu 0003:1E7D:2D5A.0014: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 819.298212][ T5872] usb 9-1: USB disconnect, device number 43 [ 819.925344][ T8590] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 820.073281][T10596] fido_id[10596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 820.227473][ T8590] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 820.239821][ T8590] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 820.252612][ T8590] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 820.264605][ T8590] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 820.274008][ T8590] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.610845][T10599] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 820.615350][ T1675] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 820.681578][T10495] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 820.898788][ T1675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.910458][ T1675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.921572][ T1675] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 820.931271][ T1675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.019251][T10495] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 821.019812][ T1675] usb 7-1: config 0 descriptor?? [ 821.185161][T10495] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 821.333011][T10495] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 821.575714][ T1675] usbhid 7-1:0.0: can't add hid device: -71 [ 821.582228][ T1675] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 821.676674][ T1675] usb 7-1: USB disconnect, device number 45 [ 822.240983][ T8590] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 822.253789][ T8590] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input23 [ 822.600093][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 822.608905][ T8590] usb 6-1: USB disconnect, device number 51 [ 823.457491][T10495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.865503][T10495] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.136896][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.144695][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.265381][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.272864][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.023673][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.371701][T10641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.470396][ T30] audit: type=1326 audit(1752287042.238:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.493377][ T30] audit: type=1326 audit(1752287042.248:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.516642][ T30] audit: type=1326 audit(1752287042.248:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.540756][ T30] audit: type=1326 audit(1752287042.248:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.554477][T10636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.565167][ T30] audit: type=1326 audit(1752287042.248:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.596373][ T30] audit: type=1326 audit(1752287042.268:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.619393][ T30] audit: type=1326 audit(1752287042.268:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.642358][ T30] audit: type=1326 audit(1752287042.268:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.666410][ T30] audit: type=1326 audit(1752287042.268:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 826.689337][ T30] audit: type=1326 audit(1752287042.268:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.5.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff4af2ab19 code=0x7ffc0000 [ 827.125466][ T5872] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 827.355523][ T5872] usb 9-1: Using ep0 maxpacket: 32 [ 827.390808][T10495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.425878][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.437549][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.448189][ T5872] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 827.457569][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.706601][ T5872] usb 9-1: config 0 descriptor?? [ 828.221821][ T5872] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 828.607875][ T1675] usb 9-1: USB disconnect, device number 44 [ 828.721986][T10658] loop2: detected capacity change from 0 to 7 [ 828.794116][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 828.803700][ C0] buffer_io_error: 28 callbacks suppressed [ 828.803756][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 828.847884][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 828.857560][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 828.907957][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 828.917598][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 828.930323][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 828.940015][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 828.960951][ T5872] IPVS: starting estimator thread 0... [ 828.967395][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 828.977194][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.020434][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.030102][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.039637][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.049304][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.061148][T10658] ldm_validate_partition_table(): Disk read failed. [ 829.070550][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.080246][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.099744][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.109587][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.124845][T10662] IPVS: using max 240 ests per chain, 12000 per kthread [ 829.150231][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 829.160015][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 829.169609][T10658] Dev loop2: unable to read RDB block 0 [ 829.250721][T10658] loop2: unable to read partition table [ 829.290831][T10657] fido_id[10657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 829.306987][T10658] loop2: partition table beyond EOD, truncated [ 829.313450][T10658] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 829.996905][ T5872] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 830.225782][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.238597][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.251038][ T5872] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 830.261169][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.521834][ T5872] usb 6-1: config 0 descriptor?? [ 831.076913][ T5872] usbhid 6-1:0.0: can't add hid device: -71 [ 831.083940][ T5872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 831.189703][ T5872] usb 6-1: USB disconnect, device number 52 [ 831.831873][T10495] veth0_vlan: entered promiscuous mode [ 832.019918][T10495] veth1_vlan: entered promiscuous mode [ 832.415094][T10495] veth0_macvtap: entered promiscuous mode [ 832.548441][T10495] veth1_macvtap: entered promiscuous mode [ 832.748559][T10695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.837694][T10495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.941977][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1230'. [ 832.962610][T10495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.105441][T10695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.123401][T10495] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.134929][T10495] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.144055][T10495] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.153519][T10495] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.196541][ T1675] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 833.278534][T10695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.455117][ T1675] usb 8-1: Using ep0 maxpacket: 32 [ 833.529736][ T1675] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.541379][ T1675] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.551782][ T1675] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 833.561453][ T1675] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.678828][ T1675] usb 8-1: config 0 descriptor?? [ 834.279801][ T1675] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 834.386642][T10720] input: syz0 as /devices/virtual/input/input24 [ 834.547438][ T8883] usb 8-1: USB disconnect, device number 39 [ 835.207993][T10721] fido_id[10721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 836.395376][ T8590] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 836.615202][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.626647][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.637116][ T8590] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 836.646779][ T8590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.770882][ T8590] usb 8-1: config 0 descriptor?? [ 836.967161][ T1675] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 837.312282][ T8590] usbhid 8-1:0.0: can't add hid device: -71 [ 837.320037][ T8590] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 837.384805][ T1675] usb 9-1: unable to get BOS descriptor or descriptor too short [ 837.450236][ T1675] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 837.458789][ T1675] usb 9-1: can't read configurations, error -71 [ 837.466942][ T8590] usb 8-1: USB disconnect, device number 40 [ 837.659387][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1243'. [ 838.193784][T10763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.452976][T10767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.623509][T10763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.836728][ T5872] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 839.025593][ T8883] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 839.053061][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.064815][ T5872] usb 9-1: config 0 has no interfaces? [ 839.070689][ T5872] usb 9-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 839.080504][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.142285][ T5872] usb 9-1: config 0 descriptor?? [ 839.274938][ T8883] usb 7-1: Using ep0 maxpacket: 32 [ 839.322194][ T8883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.333941][ T8883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.344997][ T8883] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 839.361407][ T8883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.517694][ T8883] usb 7-1: config 0 descriptor?? [ 840.066575][ T8883] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 840.455896][ T8883] usb 7-1: USB disconnect, device number 46 [ 840.745250][T10791] fido_id[10791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 841.835837][ T1675] usb 9-1: USB disconnect, device number 47 [ 841.894710][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 841.904174][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1253'. [ 842.165057][ T8590] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 842.555991][ T8590] usb 8-1: unable to get BOS descriptor or descriptor too short [ 842.579002][ T8590] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 842.587357][ T8590] usb 8-1: can't read configurations, error -71 [ 842.659800][ T9932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.668309][ T9932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.822156][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1256'. [ 843.131670][ T5872] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 843.159221][ T1878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.167680][ T1878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.413147][ T5872] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 843.424127][ T5872] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 843.435573][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 843.445085][ T5872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 843.457722][ T5872] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 843.747377][ T5872] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 843.760067][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 843.768724][ T5872] usb 6-1: Product: syz [ 843.773059][ T5872] usb 6-1: Manufacturer: syz [ 844.001143][ T5872] cdc_wdm 6-1:1.0: skipping garbage [ 844.007033][ T5872] cdc_wdm 6-1:1.0: skipping garbage [ 844.073841][ T5872] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 844.080603][ T5872] cdc_wdm 6-1:1.0: Unknown control protocol [ 844.325723][T10835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.446514][ T5872] usb 6-1: USB disconnect, device number 53 [ 844.764724][ T8883] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 844.941254][T10840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.092758][ T8883] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 845.101337][ T8883] usb 7-1: config 0 has no interface number 0 [ 845.108086][ T8883] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 845.119662][ T8883] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 845.130939][ T8883] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 845.140390][ T8883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.224796][T10816] syz.8.1255 (10816): drop_caches: 2 [ 845.532182][ T8883] usb 7-1: config 0 descriptor?? [ 845.550182][T10841] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 845.682186][ T8883] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 845.938840][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 845.946218][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 847.666039][ T8883] usb 7-1: USB disconnect, device number 47 [ 847.995079][ T8590] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 848.214507][ T8590] usb 8-1: Using ep0 maxpacket: 32 [ 848.270108][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.281564][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.291886][ T8590] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 848.301283][ T8590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.618019][ T8590] usb 8-1: config 0 descriptor?? [ 849.227054][ T8590] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 849.552961][ T8590] usb 8-1: USB disconnect, device number 43 [ 850.301084][T10866] fido_id[10866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 850.454509][ T8883] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 850.688877][ T8883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.700274][ T8883] usb 7-1: config 0 has no interfaces? [ 850.706771][ T8883] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 850.716556][ T8883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.806228][T10873] netlink: 'syz.5.1265': attribute type 10 has an invalid length. [ 851.013337][ T8883] usb 7-1: config 0 descriptor?? [ 851.399649][ T5872] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 851.624818][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 851.702197][ T5872] usb 6-1: config 0 has an invalid descriptor of length 15, skipping remainder of the config [ 851.839127][ T5872] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 851.850327][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.859335][ T5872] usb 6-1: Product: syz [ 851.863683][ T5872] usb 6-1: Manufacturer: syz [ 851.868547][ T5872] usb 6-1: SerialNumber: syz [ 851.974025][ T5872] usb 6-1: config 0 descriptor?? [ 852.362983][ T8590] usb 6-1: USB disconnect, device number 54 [ 852.371890][T10888] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1267'. [ 853.473105][ T5872] usb 7-1: USB disconnect, device number 48 [ 853.611282][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1268'. [ 854.646684][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1269'. [ 855.192609][T10911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.492649][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.666969][T10912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.974777][ T5872] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 856.098777][ T8590] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 856.230946][ T5872] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 856.239289][ T5872] usb 6-1: config 0 has no interface number 0 [ 856.245824][ T5872] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 856.257225][ T5872] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 856.268609][ T5872] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 856.278141][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.298280][ T5872] usb 6-1: config 0 descriptor?? [ 856.310970][T10917] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 856.343879][ T8590] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.353213][ T8590] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 856.364585][ T8590] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.374029][ T8590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 856.385952][ T8590] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 856.436459][ T5872] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 856.545338][ T8590] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 856.554992][ T8590] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 856.563192][ T8590] usb 9-1: Product: syz [ 856.568375][ T8590] usb 9-1: Manufacturer: syz [ 857.011068][ T8590] cdc_wdm 9-1:1.0: skipping garbage [ 857.017608][ T8590] cdc_wdm 9-1:1.0: skipping garbage [ 857.076929][ T8590] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device [ 857.086838][ T8590] cdc_wdm 9-1:1.0: Unknown control protocol [ 857.122030][ T5872] usb 6-1: USB disconnect, device number 55 [ 857.704938][ T8590] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 857.755228][ T1675] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 857.991331][ T8590] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 858.001373][ T8590] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.013032][ T1675] usb 7-1: Using ep0 maxpacket: 32 [ 858.042907][ T1675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 858.055374][ T1675] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.065791][ T1675] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 858.075454][ T1675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.093122][ T8590] usb 8-1: config 0 descriptor?? [ 858.144157][ T8590] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 858.224650][ T1675] usb 7-1: config 0 descriptor?? [ 858.630504][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1277'. [ 858.660967][ T8590] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 858.883993][ T1675] savu 0003:1E7D:2D5A.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 859.070601][ T8590] gspca_cpia1: usb_control_msg 02, error -71 [ 859.102864][ T8590] gspca_cpia1: usb_control_msg 05, error -71 [ 859.110306][ T8590] cpia1 8-1:0.0: unexpected systemstate: 00 [ 859.184595][ T8590] usb 8-1: USB disconnect, device number 44 [ 859.223396][ T5872] usb 7-1: USB disconnect, device number 49 [ 859.428507][ T8663] usb 9-1: USB disconnect, device number 48 [ 859.605887][ T1675] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 859.815480][ T1675] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 859.824072][ T1675] usb 6-1: config 0 has no interface number 0 [ 859.830920][ T1675] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 859.842554][ T1675] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 859.853950][ T1675] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 859.863697][ T1675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.875178][ T8590] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 859.897973][T10939] fido_id[10939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 859.981314][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1281'. [ 860.125769][ T8590] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.137702][ T8590] usb 10-1: config 0 has no interfaces? [ 860.143610][ T8590] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 860.155477][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.179693][ T1675] usb 6-1: config 0 descriptor?? [ 860.188675][T10943] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 860.240530][ T8590] usb 10-1: config 0 descriptor?? [ 860.276931][ T1675] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 860.548764][ T1675] usb 6-1: USB disconnect, device number 56 [ 861.096551][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1283'. [ 861.460899][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.714736][T10972] input: syz0 as /devices/virtual/input/input25 [ 861.792973][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.000313][T10976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.685842][ T5872] usb 10-1: USB disconnect, device number 2 [ 863.746840][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1290'. [ 864.524673][ T1675] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 864.756607][ T1675] usb 9-1: Using ep0 maxpacket: 8 [ 864.799259][ T1675] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 864.954906][ T1675] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 864.964774][ T1675] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.973092][ T1675] usb 9-1: Product: syz [ 864.977756][ T1675] usb 9-1: Manufacturer: syz [ 864.982644][ T1675] usb 9-1: SerialNumber: syz [ 865.211033][ T1675] usb 9-1: config 0 descriptor?? [ 865.269253][ T1675] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 866.040317][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1295'. [ 867.079524][T11021] netlink: 'syz.5.1297': attribute type 11 has an invalid length. [ 867.696963][ T5872] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 867.948187][T11026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.961545][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.972345][ T5872] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 867.981973][ T5872] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 867.992097][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.269281][ T5872] usb 10-1: config 0 descriptor?? [ 868.374837][T11026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.530687][T11026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.883618][ T1675] gspca_zc3xx: reg_w_i err -71 [ 868.919389][ T1675] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 868.957149][ T1675] usb 9-1: USB disconnect, device number 49 [ 870.056318][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1303'. [ 870.658844][ T1675] usb 10-1: USB disconnect, device number 3 [ 872.980145][T11054] syz.9.1307 (11054): drop_caches: 2 [ 873.572033][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1309'. [ 874.782138][T11076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.113761][T11083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.279262][T11076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.585737][T11091] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1316'. [ 875.757038][ T1675] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 875.875647][T11089] netlink: 'syz.8.1314': attribute type 1 has an invalid length. [ 876.061405][ T1675] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.072289][ T1675] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 876.081747][ T1675] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 876.091348][ T1675] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.106356][ T1675] usb 10-1: config 0 descriptor?? [ 876.804775][ T5872] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 877.038641][ T5872] usb 8-1: Using ep0 maxpacket: 32 [ 877.076298][ T8883] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 877.110598][ T5872] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 877.119964][ T5872] usb 8-1: config 0 has no interface number 0 [ 877.220432][ T5872] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 877.230244][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.239331][ T5872] usb 8-1: Product: syz [ 877.243772][ T5872] usb 8-1: Manufacturer: syz [ 877.249065][ T5872] usb 8-1: SerialNumber: syz [ 877.352655][ T8883] usb 6-1: not running at top speed; connect to a high speed hub [ 877.408210][ T5872] usb 8-1: config 0 descriptor?? [ 877.415915][ T8883] usb 6-1: config 1 interface 0 has no altsetting 0 [ 877.440280][ T5872] smsc95xx v2.0.0 [ 877.496003][ T8883] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 877.505958][ T8883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.514715][ T8883] usb 6-1: Product: syz [ 877.519345][ T8883] usb 6-1: Manufacturer: syz [ 877.524532][ T8883] usb 6-1: SerialNumber: syz [ 877.882301][ T8883] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input26 [ 877.896706][ T5155] bcm5974 6-1:1.0: could not read from device [ 877.992466][ T5155] bcm5974 6-1:1.0: could not read from device [ 878.067904][ T5872] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 878.079773][ T5872] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 878.081015][ T5155] bcm5974 6-1:1.0: could not read from device [ 878.157241][ T8883] usb 6-1: USB disconnect, device number 57 [ 879.342602][ T8883] usb 10-1: USB disconnect, device number 4 [ 879.385165][ T5872] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 879.397609][ T5872] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 879.630066][ T5872] usb 8-1: USB disconnect, device number 45 [ 881.471378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b9b2e00: rx timeout, send abort [ 881.862354][T11153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.980157][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b9b2e00: abort rx timeout. Force session deactivation [ 882.136975][T11158] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1329'. [ 882.247805][T11155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.407641][T11155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.285101][ T8590] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 883.466522][ T5872] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 883.539430][ T8590] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 883.553041][ T8590] usb 10-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 883.562642][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.680294][ T5872] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.691744][ T5872] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 883.701307][ T5872] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 883.710934][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.773249][ T8590] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 883.951495][ T5872] usb 8-1: config 0 descriptor?? [ 884.815684][ T8590] stv0680 10-1:4.0: STV(e): camera ping failed!! [ 885.026796][ T8590] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 885.036359][ T8590] stv0680 10-1:4.0: last error: 0, command = 0x0 [ 885.145603][ T8590] usb 10-1: USB disconnect, device number 5 [ 885.764744][ T8590] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 885.975825][ T8590] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.986526][ T8590] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.112959][ T8590] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 886.122899][ T8590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 886.131784][ T8590] usb 7-1: SerialNumber: syz [ 886.237358][T11193] binder: BINDER_SET_CONTEXT_MGR already set [ 886.243923][T11193] binder: 11192:11193 ioctl 4018620d 200000000040 returned -16 [ 886.410011][ T8590] usb 7-1: 0:2 : does not exist [ 886.417458][ T8590] usb 7-1: unit 255 not found! [ 886.580914][ T8590] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 886.650955][ T5872] usb 8-1: USB disconnect, device number 46 [ 886.684060][ T8590] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 886.781807][ T8590] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 886.915358][ T8590] usb 7-1: 5:0: cannot get min/max values for control 7 (id 5) [ 887.054675][ T8590] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 887.055880][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b9b3600: rx timeout, send abort [ 887.201688][ T8590] usb 7-1: USB disconnect, device number 50 [ 887.477582][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.571269][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804b9b3600: abort rx timeout. Force session deactivation [ 887.842508][T11208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.032193][T11208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.361722][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.485898][ T5872] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 888.705982][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 888.772449][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.783380][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 888.795643][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 888.805798][ T5872] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 888.816001][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.027233][ T5872] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 889.037306][ T5872] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 889.046189][ T5872] usb 6-1: Manufacturer: syz [ 889.151534][ T5872] usb 6-1: config 0 descriptor?? [ 889.564761][ T8883] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 889.789524][ T8883] usb 9-1: Using ep0 maxpacket: 8 [ 889.831721][ T8883] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 889.895460][ T5872] rc_core: IR keymap rc-hauppauge not found [ 889.901971][ T5872] Registered IR keymap rc-empty [ 889.908602][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 889.917354][ T8883] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 889.927344][ T8883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.935885][ T8883] usb 9-1: Product: syz [ 889.940333][ T8883] usb 9-1: Manufacturer: syz [ 889.945431][ T8883] usb 9-1: SerialNumber: syz [ 889.962477][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 890.035470][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.088242][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 890.105887][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 890.212880][ T8883] usb 9-1: config 0 descriptor?? [ 890.241388][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 890.251358][ T9] usb 7-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 890.261109][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.303776][ T8883] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 890.396948][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.416416][ T9] usb 7-1: config 0 descriptor?? [ 890.535652][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.555777][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.615865][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.725912][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.762881][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.835565][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.885007][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.927874][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 890.972948][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 891.026680][ T5872] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 891.036602][ T5872] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 891.230275][ T5872] usb 6-1: USB disconnect, device number 58 [ 892.518653][ T8883] gspca_zc3xx: reg_r err -32 [ 892.617429][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 892.617515][ T30] audit: type=1326 audit(1752287108.398:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.647895][ T30] audit: type=1326 audit(1752287108.398:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.670901][ T30] audit: type=1326 audit(1752287108.408:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.694390][ T30] audit: type=1326 audit(1752287108.408:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.717571][ T30] audit: type=1326 audit(1752287108.408:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.740759][ T30] audit: type=1326 audit(1752287108.408:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.763724][ T30] audit: type=1326 audit(1752287108.408:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.787487][ T30] audit: type=1326 audit(1752287108.408:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.787734][ T30] audit: type=1326 audit(1752287108.408:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 892.787972][ T30] audit: type=1326 audit(1752287108.408:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.9.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd97eb2ab19 code=0x7ffc0000 [ 893.024133][ T8590] usb 7-1: USB disconnect, device number 51 [ 893.114675][ T8883] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 893.121559][ T8883] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 894.148868][T11276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.653261][ T5872] usb 9-1: USB disconnect, device number 50 [ 894.671939][T11279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.783464][T11276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.485756][ T8590] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 895.728093][ T8590] usb 6-1: Using ep0 maxpacket: 16 [ 895.763547][ T8590] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.775800][ T8590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.787879][ T8590] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 895.798148][ T8590] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 895.808274][ T8590] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.983099][ T8590] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 895.993711][ T8590] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 896.002684][ T8590] usb 6-1: Manufacturer: syz [ 896.188743][ T8590] usb 6-1: config 0 descriptor?? [ 896.944961][ T8590] rc_core: IR keymap rc-hauppauge not found [ 896.945065][ T8590] Registered IR keymap rc-empty [ 896.945696][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 896.966441][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 896.988583][ T8590] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 897.013791][ T8590] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input28 [ 897.055736][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.098999][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.116240][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.142192][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.155678][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.176245][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.195479][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.225375][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.266098][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.300732][ T8590] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 897.331674][ T8590] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 897.331895][ T8590] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 897.424863][ T5872] usb 6-1: USB disconnect, device number 59 [ 897.443733][T11318] binder: 11316:11318 ioctl c0306201 0 returned -14 [ 899.004992][T11333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1378'. [ 899.632488][T11349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.005727][T11349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.133578][T11347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 900.643268][T11360] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 901.954807][ T5872] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 901.974858][ T8883] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 902.212332][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 902.224811][ T8883] usb 7-1: Using ep0 maxpacket: 8 [ 902.280754][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.292087][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.303733][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 902.314486][ T5872] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 902.325039][ T5872] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.374765][ T8883] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 902.383383][ T8883] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.394009][ T8883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.404420][ T8883] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.415112][ T8883] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.428814][ T8883] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 902.438366][ T8883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.631463][ T5872] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 902.641269][ T5872] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 902.649881][ T5872] usb 6-1: Manufacturer: syz [ 902.803427][ T5872] usb 6-1: config 0 descriptor?? [ 903.055492][ T8883] usb 7-1: usb_control_msg returned -32 [ 903.061980][ T8883] usbtmc 7-1:16.0: can't read capabilities [ 903.785634][ T5872] rc_core: IR keymap rc-hauppauge not found [ 903.785732][ T5872] Registered IR keymap rc-empty [ 903.786294][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 903.815078][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 903.837700][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 903.841787][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29 [ 903.857706][T11396] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 903.908065][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.085649][ T8590] usb 9-1: new full-speed USB device number 51 using dummy_hcd [ 904.242758][ T8590] usb 9-1: config 4 has an invalid interface number: 231 but max is 0 [ 904.242922][ T8590] usb 9-1: config 4 has no interface number 0 [ 904.408532][ T8590] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 904.408710][ T8590] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.408839][ T8590] usb 9-1: Product: syz [ 904.408952][ T8590] usb 9-1: Manufacturer: syz [ 904.409066][ T8590] usb 9-1: SerialNumber: syz [ 904.464101][ T8590] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 904.527007][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.552764][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.565760][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.586887][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.608888][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.625006][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.645018][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.675023][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.715671][ T5872] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.748542][ T5872] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 904.748696][ T5872] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 904.816478][ T5872] usb 6-1: USB disconnect, device number 60 [ 904.979692][ T8590] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 904.979838][ T8590] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 905.454171][ T5872] usb 7-1: USB disconnect, device number 52 [ 906.984788][ T5872] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 907.175046][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 907.182584][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.182813][ T5872] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 907.182966][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.197076][ T5872] usb 6-1: config 0 descriptor?? [ 907.230729][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 907.329538][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.329902][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.504588][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.771731][T11416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.846785][ T5872] gspca_vc032x: reg_r err -32 [ 907.847145][ T5872] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 907.872817][T11415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.383105][ T5872] usb 9-1: USB disconnect, device number 51 [ 910.038675][ T8590] usb 6-1: USB disconnect, device number 61 [ 911.235535][ T8590] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 911.344625][ T32] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 911.456588][ T8590] usb 8-1: Using ep0 maxpacket: 16 [ 911.561566][ T8590] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.573578][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 911.586190][ T8590] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 911.597108][ T8590] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 911.607374][ T8590] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.660245][ T32] usb 9-1: Using ep0 maxpacket: 8 [ 911.710750][ T32] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 911.720949][ T32] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.732176][ T32] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.743394][ T32] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 911.754836][ T32] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.768945][ T32] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 911.778428][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.950149][ T8590] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 911.959816][ T8590] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 911.968198][ T8590] usb 8-1: Manufacturer: syz [ 912.101016][ T8590] usb 8-1: config 0 descriptor?? [ 912.457014][ T32] usb 9-1: usb_control_msg returned -32 [ 912.463227][ T32] usbtmc 9-1:16.0: can't read capabilities [ 913.100550][ T8590] rc_core: IR keymap rc-hauppauge not found [ 913.107271][ T8590] Registered IR keymap rc-empty [ 913.112979][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.190971][T11461] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 913.210941][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.247163][ T8590] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 913.263496][ T8590] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input30 [ 913.392911][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.509814][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.545201][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.573556][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.636365][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.685834][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.716425][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.765919][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.801719][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.848152][ T8590] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 913.926158][ T8590] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 913.934943][ T8590] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 913.998698][ T8590] usb 8-1: USB disconnect, device number 47 [ 914.847081][ T8590] usb 9-1: USB disconnect, device number 52 [ 915.355561][ T32] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 915.579448][ T32] usb 8-1: Using ep0 maxpacket: 8 [ 915.610685][ T32] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.610916][ T32] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 915.611068][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.667635][ T32] usb 8-1: config 0 descriptor?? [ 915.692524][ T32] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 915.982839][ T32] gspca_vc032x: reg_r err -32 [ 915.983207][ T32] vc032x 8-1:0.0: probe with driver vc032x failed with error -32 [ 918.379097][ T32] usb 8-1: USB disconnect, device number 48 [ 920.484790][ T5872] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 920.734565][ T5872] usb 9-1: Using ep0 maxpacket: 16 [ 920.806413][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.817131][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.828448][ T5872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 920.838400][ T5872] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 920.848318][ T5872] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.004997][ T32] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 921.157567][ T5872] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 921.168106][ T5872] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 921.176705][ T5872] usb 9-1: Manufacturer: syz [ 921.258916][ T32] usb 8-1: Using ep0 maxpacket: 8 [ 921.332362][ T32] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 921.338792][ T5872] usb 9-1: config 0 descriptor?? [ 921.341104][ T32] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.356512][ T32] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.367743][ T32] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 921.378358][ T32] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.391819][ T32] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.401343][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.956208][ T32] usb 8-1: usb_control_msg returned -32 [ 921.962357][ T32] usbtmc 8-1:16.0: can't read capabilities [ 922.245548][ T5872] rc_core: IR keymap rc-hauppauge not found [ 922.251848][ T5872] Registered IR keymap rc-empty [ 922.257776][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.384949][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.458253][ T5872] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 922.473432][ T5872] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input31 [ 922.643045][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.755985][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.775441][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.800957][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.825114][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.843223][T11534] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 922.909455][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 922.965774][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 923.012636][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 923.062079][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 923.110045][ T5872] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 923.151846][ T5872] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 923.161628][ T5872] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 923.262522][ T5872] usb 9-1: USB disconnect, device number 53 [ 924.637033][ T32] usb 8-1: USB disconnect, device number 49 [ 924.744901][ T5872] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 924.964656][ T5872] usb 7-1: Using ep0 maxpacket: 8 [ 925.086374][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.097333][ T5872] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 925.107217][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.288386][ T5872] usb 7-1: config 0 descriptor?? [ 925.356418][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 925.615133][ T5872] gspca_vc032x: reg_r err -32 [ 925.620456][ T5872] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 927.475740][ T32] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 927.696330][ T32] usb 8-1: Using ep0 maxpacket: 16 [ 927.745085][ T32] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 927.753682][ T32] usb 8-1: config 0 has no interface number 0 [ 927.760480][ T32] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 927.771182][ T32] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 927.780238][ T1611] kworker/0:2 (1611) used greatest stack depth: 3928 bytes left [ 927.782553][ T32] usb 8-1: config 0 interface 41 has no altsetting 0 [ 927.904719][ T32] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 927.914475][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.922854][ T32] usb 8-1: Product: syz [ 927.927858][ T32] usb 8-1: Manufacturer: syz [ 927.932764][ T32] usb 8-1: SerialNumber: syz [ 927.949151][ T5872] usb 7-1: USB disconnect, device number 53 [ 928.160483][ T32] usb 8-1: config 0 descriptor?? [ 928.169233][T11566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 928.185193][T11566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 928.531302][T11566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 928.579980][T11566] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 928.725439][ T8883] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 928.935965][ T8883] usb 7-1: Using ep0 maxpacket: 16 [ 929.007642][ T8883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.018655][ T8883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.030195][ T8883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 929.040554][ T8883] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 929.050894][ T8883] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 929.158580][ T32] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -22 [ 929.370258][ T8883] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 929.380230][ T8883] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 929.388821][ T8883] usb 7-1: Manufacturer: syz [ 929.582575][ T32] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 929.699368][ T8883] usb 7-1: config 0 descriptor?? [ 929.815183][ T32] usb 10-1: Using ep0 maxpacket: 8 [ 929.845961][ T9694] Bluetooth: hci2: command 0x0406 tx timeout [ 929.947914][ T32] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 929.957107][ T32] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.968201][ T32] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.978801][ T32] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 929.989335][ T32] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.004333][ T32] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 930.013929][ T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.554835][ T8883] rc_core: IR keymap rc-hauppauge not found [ 930.561313][ T8883] Registered IR keymap rc-empty [ 930.568796][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 930.569629][ T32] usb 10-1: usb_control_msg returned -32 [ 930.582532][ T32] usbtmc 10-1:16.0: can't read capabilities [ 930.690265][ T9] usb 8-1: USB disconnect, device number 50 [ 930.715825][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 930.772859][ T8883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 930.789222][ T8883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 930.945336][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.062092][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.095874][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.150453][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.197794][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.242967][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.275062][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.305156][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.326985][T11600] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -90 [ 931.340401][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.389071][ T8883] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 931.458295][ T8883] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 931.467048][ T8883] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 931.664780][ T8883] usb 7-1: USB disconnect, device number 54 [ 932.715813][ T8883] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 932.921139][ T8883] usb 7-1: Using ep0 maxpacket: 8 [ 932.930358][ T9] usb 10-1: USB disconnect, device number 6 [ 932.963121][ T8883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.974473][ T8883] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 932.983897][ T8883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.116237][ T8883] usb 7-1: config 0 descriptor?? [ 933.218467][ T8883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 933.416370][ T8883] gspca_vc032x: reg_r err -32 [ 933.421701][ T8883] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 934.485185][ T32] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 934.725624][ T32] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.736202][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.830589][ T32] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 934.840454][ T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 934.849532][ T32] usb 6-1: SerialNumber: syz [ 935.220722][ T32] usb 6-1: 0:2 : does not exist [ 935.421026][ T32] usb 6-1: USB disconnect, device number 62 [ 935.495655][ T8883] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 935.714536][ T8883] usb 10-1: Using ep0 maxpacket: 16 [ 935.745369][ T9] usb 7-1: USB disconnect, device number 55 [ 935.765917][ T8883] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 935.775051][ T8883] usb 10-1: config 0 has no interface number 0 [ 935.781557][ T8883] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 935.793188][ T8883] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 935.804722][ T8883] usb 10-1: config 0 interface 41 has no altsetting 0 [ 935.907827][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.062634][ T8883] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 936.072805][ T8883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.081560][ T8883] usb 10-1: Product: syz [ 936.086322][ T8883] usb 10-1: Manufacturer: syz [ 936.091321][ T8883] usb 10-1: SerialNumber: syz [ 936.254688][ T32] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 936.294611][ T8883] usb 10-1: config 0 descriptor?? [ 936.304043][T11640] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 936.405698][T11640] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 936.507516][ T32] usb 8-1: Using ep0 maxpacket: 16 [ 936.541659][ T32] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.552616][ T32] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 936.564501][ T32] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 936.574945][ T32] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 936.585170][ T32] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.614669][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 936.728554][T11640] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 936.789001][T11640] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 936.861156][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 936.897060][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 936.906208][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 936.916726][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 936.927040][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 936.929556][ T32] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 936.937309][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 936.937556][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 936.937706][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.978738][ T32] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 936.987298][ T32] usb 8-1: Manufacturer: syz [ 937.075623][ T5872] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 937.189069][ T32] usb 8-1: config 0 descriptor?? [ 937.285813][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 937.313711][ T8883] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -22 [ 937.355722][ T5872] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 937.364883][ T5872] usb 6-1: config 0 has no interface number 0 [ 937.371520][ T5872] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 937.382823][ T5872] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 937.393381][ T5872] usb 6-1: config 0 interface 41 has no altsetting 0 [ 937.497372][ T5873] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 937.541549][ T9] usb 7-1: usb_control_msg returned -32 [ 937.548770][ T9] usbtmc 7-1:16.0: can't read capabilities [ 937.614067][ T5872] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 937.624850][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.633214][ T5872] usb 6-1: Product: syz [ 937.638172][ T5872] usb 6-1: Manufacturer: syz [ 937.643099][ T5872] usb 6-1: SerialNumber: syz [ 937.723696][ T5872] usb 6-1: config 0 descriptor?? [ 937.732628][T11651] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 937.744112][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 937.788236][ T5873] usb 9-1: config 0 has no interfaces? [ 937.807335][ T5873] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 937.807479][T11651] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 937.825087][ T5873] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 937.833437][ T5873] usb 9-1: Manufacturer: syz [ 937.889344][ T5873] usb 9-1: config 0 descriptor?? [ 938.046214][ T32] rc_core: IR keymap rc-hauppauge not found [ 938.052666][ T32] Registered IR keymap rc-empty [ 938.058580][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.088419][T11651] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 938.128139][T11651] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 938.156064][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.179397][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 938.197299][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input33 [ 938.283577][T11662] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 938.362703][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.476425][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.529395][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.635624][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.705426][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.746755][ T5873] usb 9-1: USB disconnect, device number 54 [ 938.772623][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.787901][ T5872] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 938.830583][ T5872] usb 6-1: USB disconnect, device number 63 [ 938.846823][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.919981][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 938.978498][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 939.017513][ T32] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 939.058831][ T32] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 939.060722][ T9] usb 10-1: USB disconnect, device number 7 [ 939.067563][ T32] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 939.222824][ T32] usb 8-1: USB disconnect, device number 51 [ 939.721243][T11667] fuse: Bad value for 'user_id' [ 939.726662][T11667] fuse: Bad value for 'user_id' [ 939.816679][ T32] usb 7-1: USB disconnect, device number 56 [ 942.075313][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 942.255070][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 942.285009][ T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 942.285178][ T9] usb 7-1: config 0 has no interface number 0 [ 942.285309][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 942.285469][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 942.285629][ T9] usb 7-1: config 0 interface 41 has no altsetting 0 [ 942.313716][ T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 942.313896][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.314051][ T9] usb 7-1: Product: syz [ 942.314460][ T9] usb 7-1: Manufacturer: syz [ 942.314587][ T9] usb 7-1: SerialNumber: syz [ 942.338328][ T9] usb 7-1: config 0 descriptor?? [ 942.341827][T11695] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 942.342535][T11695] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 942.657530][T11695] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 942.658241][T11695] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 942.676537][ T32] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 942.833906][ T32] usb 9-1: Using ep0 maxpacket: 16 [ 942.844981][ T32] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.845162][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 942.845436][ T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 942.845581][ T32] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 942.845734][ T32] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 942.874870][ T32] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 942.875049][ T32] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 942.875185][ T32] usb 9-1: Manufacturer: syz [ 942.907920][ T32] usb 9-1: config 0 descriptor?? [ 943.088241][ T9] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 943.194438][ T1675] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 943.379704][ T1675] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.379860][ T1675] usb 6-1: config 0 has no interface number 0 [ 943.379993][ T1675] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 943.380170][ T1675] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 943.380404][ T1675] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 943.380566][ T1675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.408912][ T1675] usb 6-1: config 0 descriptor?? [ 943.413923][T11706] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 943.490480][ T1675] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 943.524709][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 943.726402][ T32] rc_core: IR keymap rc-hauppauge not found [ 943.726880][ T32] Registered IR keymap rc-empty [ 943.729504][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 943.758937][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 943.784378][ T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 943.787914][ T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 943.807827][ T5873] usb 6-1: USB disconnect, device number 64 [ 943.860067][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 943.877353][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 943.915426][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.086632][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.094954][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 944.105434][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.125797][ T9] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 944.125957][ T9] usb 10-1: config 0 has no interface number 0 [ 944.126101][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 944.126254][ T9] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 944.126539][ T9] usb 10-1: config 0 interface 41 has no altsetting 0 [ 944.132462][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.145745][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.168922][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.191141][ T9] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 944.191334][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.191588][ T9] usb 10-1: Product: syz [ 944.191782][ T9] usb 10-1: Manufacturer: syz [ 944.191889][ T9] usb 10-1: SerialNumber: syz [ 944.215518][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.224900][ T9] usb 10-1: config 0 descriptor?? [ 944.240654][ T32] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 944.246306][T11711] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 944.247131][T11711] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 944.262468][ T32] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 944.419867][ T32] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 944.642475][T11711] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 944.642991][T11711] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 945.207759][ T1675] usb 7-1: USB disconnect, device number 57 [ 945.211394][ T9] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 945.233958][ T32] usb 9-1: USB disconnect, device number 55 [ 945.379617][ T9] usb 10-1: USB disconnect, device number 8 [ 945.517027][T11721] fuse: Bad value for 'user_id' [ 945.522445][T11721] fuse: Bad value for 'user_id' [ 948.967215][ T1675] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 949.006213][T11768] fuse: Bad value for 'user_id' [ 949.011534][T11768] fuse: Bad value for 'user_id' [ 949.304545][ T1675] usb 7-1: Using ep0 maxpacket: 16 [ 949.318765][ T1675] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 949.328256][ T1675] usb 7-1: config 1 has no interface number 1 [ 949.334830][ T1675] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.413100][ T1675] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 949.422806][ T1675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.431394][ T1675] usb 7-1: Product: syz [ 949.436004][ T1675] usb 7-1: Manufacturer: syz [ 949.440894][ T1675] usb 7-1: SerialNumber: syz [ 949.950514][ T1675] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 950.079595][ T1675] usb 7-1: USB disconnect, device number 58 [ 950.602367][ T6141] udevd[6141]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.350325][ T1675] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 952.436588][T11806] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 952.623962][ T1675] usb 7-1: config 0 has an invalid interface number: 222 but max is 0 [ 952.632937][ T1675] usb 7-1: config 0 has no interface number 0 [ 952.639686][ T1675] usb 7-1: config 0 interface 222 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 952.651809][ T1675] usb 7-1: config 0 interface 222 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 952.663376][ T1675] usb 7-1: config 0 interface 222 has no altsetting 0 [ 952.848833][ T1675] usb 7-1: New USB device found, idVendor=3823, idProduct=0002, bcdDevice=86.41 [ 952.859430][ T1675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.868573][ T1675] usb 7-1: Product: syz [ 952.873026][ T1675] usb 7-1: Manufacturer: syz [ 952.878727][ T1675] usb 7-1: SerialNumber: syz [ 952.978538][ T1675] usb 7-1: config 0 descriptor?? [ 952.987487][T11802] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 953.056352][T11802] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 953.406554][ T9] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 953.410855][ T1675] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.222/input/input35 [ 953.638219][T11816] fuse: Bad value for 'fd' [ 953.647839][ T9] usb 6-1: device descriptor read/64, error -71 [ 953.676542][ T1675] usb 7-1: USB disconnect, device number 59 [ 953.974684][ T9] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 954.124639][ T9] usb 6-1: device descriptor read/64, error -71 [ 954.236962][ T9] usb usb6-port1: attempt power cycle [ 954.606741][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 954.686544][ T9] usb 6-1: device descriptor read/8, error -71 [ 954.960273][ T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 955.024938][ T9] usb 6-1: device descriptor read/8, error -71 [ 955.147719][ T9] usb usb6-port1: unable to enumerate USB device [ 955.294855][ T1675] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 955.497391][ T1675] usb 7-1: Using ep0 maxpacket: 16 [ 955.557236][ T32] usb 9-1: new low-speed USB device number 56 using dummy_hcd [ 955.581918][ T1675] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 955.591872][ T1675] usb 7-1: config 1 has no interface number 1 [ 955.598677][ T1675] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.750762][ T1675] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.760259][ T1675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.769214][ T1675] usb 7-1: Product: syz [ 955.773577][ T1675] usb 7-1: Manufacturer: syz [ 955.778511][ T1675] usb 7-1: SerialNumber: syz [ 955.831578][ T32] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.840551][ T32] usb 9-1: config 0 has no interface number 0 [ 955.847142][ T32] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 955.858609][ T32] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 955.869870][ T32] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 955.879461][ T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.034977][ T8590] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 956.113603][ T32] usb 9-1: config 0 descriptor?? [ 956.122613][T11827] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 956.217675][ T1675] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 956.268387][ T8590] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.279292][ T8590] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 956.288936][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.303580][ T32] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 956.427242][ T8590] usb 10-1: config 0 descriptor?? [ 956.446144][ T1675] usb 7-1: USB disconnect, device number 60 [ 956.501349][ T5873] usb 9-1: USB disconnect, device number 56 [ 956.520538][ T8590] pwc: Askey VC010 type 2 USB webcam detected. [ 956.934875][ T8590] pwc: recv_control_msg error -32 req 02 val 2b00 [ 956.979234][ T8590] pwc: recv_control_msg error -32 req 02 val 2700 [ 957.024879][ T8590] pwc: recv_control_msg error -32 req 02 val 2c00 [ 957.084749][ T8590] pwc: recv_control_msg error -32 req 04 val 1000 [ 957.146197][ T8590] pwc: recv_control_msg error -32 req 04 val 1300 [ 957.197492][ T6144] udevd[6144]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 957.200181][ T8590] pwc: recv_control_msg error -32 req 04 val 1400 [ 957.355768][ T8590] pwc: recv_control_msg error -32 req 02 val 2000 [ 957.571536][ T8590] pwc: recv_control_msg error -32 req 02 val 2100 [ 957.665289][ T8590] pwc: recv_control_msg error -32 req 04 val 1500 [ 957.912721][ T8590] pwc: recv_control_msg error -32 req 02 val 2400 [ 957.961386][ T8590] pwc: recv_control_msg error -32 req 02 val 2600 [ 958.185969][ T8590] pwc: recv_control_msg error -71 req 02 val 2800 [ 958.245664][ T8590] pwc: recv_control_msg error -71 req 04 val 1100 [ 958.284916][ T8590] pwc: recv_control_msg error -71 req 04 val 1200 [ 958.323692][ T8590] pwc: Registered as video103. [ 958.333653][ T8590] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input36 [ 958.549780][ T8590] usb 10-1: USB disconnect, device number 9 [ 959.913915][T11858] fuse: Bad value for 'fd' [ 961.625739][ T5873] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 961.816248][ T5873] usb 6-1: device descriptor read/64, error -71 [ 962.106382][ T5873] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 962.325061][ T8590] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 962.344666][ T5873] usb 6-1: device descriptor read/64, error -71 [ 962.466083][ T5873] usb usb6-port1: attempt power cycle [ 962.584714][ T8590] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 962.593215][ T8590] usb 10-1: config 0 has no interface number 0 [ 962.600098][ T8590] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 962.611927][ T8590] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 962.623477][ T8590] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 962.633134][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.830330][ T8590] usb 10-1: config 0 descriptor?? [ 962.839935][T11875] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 962.864531][ T5873] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 962.962860][ T8590] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 962.998490][ T5873] usb 6-1: device descriptor read/8, error -71 [ 963.175903][T11881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 963.268794][ T9] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 963.283813][ T5873] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 963.307963][ T8590] usb 10-1: USB disconnect, device number 10 [ 963.412513][ T5873] usb 6-1: device descriptor read/8, error -71 [ 963.552295][ T5873] usb usb6-port1: unable to enumerate USB device [ 963.566191][ T9] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 963.577196][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.641949][ T9] usb 7-1: config 0 descriptor?? [ 963.700335][ T9] cp210x 7-1:0.0: cp210x converter detected [ 963.891496][ T9] usb 7-1: cp210x converter now attached to ttyUSB0 [ 965.963996][ T8590] usb 7-1: USB disconnect, device number 61 [ 966.050899][ T8590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 966.062036][ T8590] cp210x 7-1:0.0: device disconnected [ 966.097796][T11906] fuse: Bad value for 'fd' [ 966.520816][T11913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.991918][T11918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.190512][T11921] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 968.095011][ T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 968.104784][ T8590] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 968.177329][T11933] loop8: detected capacity change from 0 to 8 [ 968.490537][ T9] usb 6-1: device descriptor read/64, error -71 [ 968.638319][ T8590] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 968.647393][ T8590] usb 10-1: config 0 has no interface number 0 [ 968.654121][ T8590] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 968.667636][ T8590] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 968.679557][ T8590] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 968.689626][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.756417][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 968.763101][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 968.825433][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 969.007095][ T9] usb 6-1: device descriptor read/64, error -71 [ 969.088617][ T8590] usb 10-1: config 0 descriptor?? [ 969.112171][T11931] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 969.219262][ T9] usb usb6-port1: attempt power cycle [ 969.565819][ T8590] usb 10-1: can't set config #0, error -71 [ 969.610187][ T8590] usb 10-1: USB disconnect, device number 11 [ 970.345118][ T8590] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 970.461813][T11957] fuse: Bad value for 'fd' [ 970.588346][ T8590] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 970.597731][ T8590] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 970.606939][ T8590] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 970.616473][ T8590] usb 7-1: config 1 has no interface number 0 [ 970.622878][ T8590] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 970.634431][ T8590] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 970.648043][ T8590] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 970.657774][ T8590] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.002005][ T8590] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 972.441053][ T8590] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 972.779022][ T9] usb 7-1: USB disconnect, device number 62 [ 972.788858][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 975.613477][T11985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.796662][T11987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.212548][T11991] loop6: detected capacity change from 0 to 2048 [ 976.306839][T11991] NILFS (loop6): invalid segment: Magic number mismatch [ 976.315030][T11991] NILFS (loop6): trying rollback from an earlier position [ 976.433352][T11991] NILFS (loop6): recovery complete [ 976.464446][T11997] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 976.532100][ T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 976.705567][ T9] usb 10-1: device descriptor read/64, error -71 [ 976.968660][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 977.016700][ T8590] IPVS: starting estimator thread 0... [ 977.115644][T12004] IPVS: using max 192 ests per chain, 9600 per kthread [ 977.314811][ T9] usb 10-1: device descriptor read/64, error -71 [ 977.729836][T12003] fuse: Bad value for 'fd' [ 977.745348][ T9] usb usb10-port1: attempt power cycle [ 978.762918][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 980.586971][ T9] usb 10-1: device descriptor read/8, error -71 [ 984.624977][T12019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 985.254809][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 985.543007][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 986.530593][T12051] loop6: detected capacity change from 0 to 64 [ 986.555164][ T9] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 986.787398][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 986.839433][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 986.891619][ T9] usb 6-1: config index 0 descriptor too short (expected 16420, got 36) [ 986.900708][ T9] usb 6-1: config 7 has an invalid interface number: 6 but max is 0 [ 986.909065][ T9] usb 6-1: config 7 has no interface number 0 [ 986.915646][ T9] usb 6-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 986.925123][ T9] usb 6-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.938549][ T9] usb 6-1: config 7 interface 6 has no altsetting 0 [ 986.997535][T12051] ===================================================== [ 987.005479][T12051] BUG: KMSAN: uninit-value in hfs_find_set_zero_bits+0x74d/0xb60 [ 987.007682][ T9] usb 6-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e [ 987.013416][T12051] hfs_find_set_zero_bits+0x74d/0xb60 [ 987.013568][T12051] hfs_vbm_search_free+0x13c/0x5b0 [ 987.023382][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.028785][T12051] hfs_extend_file+0x6a5/0x1b00 [ 987.033943][ T9] usb 6-1: Product: syz [ 987.042124][T12051] hfs_get_block+0x435/0x1150 [ 987.047358][ T9] usb 6-1: Manufacturer: syz [ 987.051520][T12051] __block_write_begin_int+0xa73/0x3030 [ 987.051813][T12051] cont_write_begin+0x10e1/0x1bc0 [ 987.052007][T12051] hfs_write_begin+0x85/0x130 [ 987.052170][T12051] generic_perform_write+0x3f7/0x10c0 [ 987.052325][T12051] __generic_file_write_iter+0x213/0x460 [ 987.052456][T12051] generic_file_write_iter+0x131/0x980 [ 987.052576][T12051] vfs_write+0xb4b/0x1580 [ 987.052784][T12051] __x64_sys_write+0x1fb/0x4d0 [ 987.057747][ T9] usb 6-1: SerialNumber: syz [ 987.062288][T12051] x64_sys_call+0x38c3/0x3db0 [ 987.071038][T11943] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 987.074018][T12051] do_syscall_64+0xd9/0x210 [ 987.128522][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.134862][T12051] [ 987.137339][T12051] Uninit was created at: [ 987.141888][T12051] __kmalloc_cache_noprof+0x7f7/0xed0 [ 987.147752][T12051] hfs_mdb_get+0x1cc8/0x2a90 [ 987.152647][T12051] hfs_fill_super+0x3d0/0xb80 [ 987.157861][T12051] get_tree_bdev_flags+0x6e6/0x920 [ 987.163375][T12051] get_tree_bdev+0x38/0x50 [ 987.168314][T12051] hfs_get_tree+0x35/0x40 [ 987.172889][T12051] vfs_get_tree+0xb3/0x5c0 [ 987.177814][T12051] do_new_mount+0x738/0x1610 [ 987.182802][T12051] path_mount+0x6db/0x1e90 [ 987.187747][T12051] __se_sys_mount+0x6eb/0x7d0 [ 987.192714][T12051] __x64_sys_mount+0xe4/0x150 [ 987.197916][T12051] x64_sys_call+0xfa7/0x3db0 [ 987.202813][T12051] do_syscall_64+0xd9/0x210 [ 987.207973][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.214688][T12051] [ 987.217200][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.6.1570 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 987.229792][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.240346][T12051] ===================================================== [ 987.247780][T12051] Disabling lock debugging due to kernel taint [ 987.254127][T12051] Kernel panic - not syncing: kmsan.panic set ... [ 987.260835][T12051] CPU: 1 UID: 0 PID: 12051 Comm: syz.6.1570 Tainted: G B 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 987.274826][T12051] Tainted: [B]=BAD_PAGE [ 987.279175][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.289456][T12051] Call Trace: [ 987.292895][T12051] [ 987.296003][T12051] __dump_stack+0x26/0x30 [ 987.300637][T12051] dump_stack_lvl+0x53/0x270 [ 987.305530][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.311678][T12051] dump_stack+0x1e/0x25 [ 987.316115][T12051] panic+0x4bd/0xd50 [ 987.320431][T12051] kmsan_report+0x31c/0x320 [ 987.325241][T12051] ? __msan_warning+0x1b/0x30 [ 987.330182][T12051] ? hfs_find_set_zero_bits+0x74d/0xb60 [ 987.336070][T12051] ? hfs_vbm_search_free+0x13c/0x5b0 [ 987.341650][T12051] ? hfs_extend_file+0x6a5/0x1b00 [ 987.346955][T12051] ? hfs_get_block+0x435/0x1150 [ 987.352091][T12051] ? __block_write_begin_int+0xa73/0x3030 [ 987.358145][T12051] ? cont_write_begin+0x10e1/0x1bc0 [ 987.363665][T12051] ? hfs_write_begin+0x85/0x130 [ 987.368808][T12051] ? generic_perform_write+0x3f7/0x10c0 [ 987.374624][T12051] ? __generic_file_write_iter+0x213/0x460 [ 987.380709][T12051] ? generic_file_write_iter+0x131/0x980 [ 987.386615][T12051] ? vfs_write+0xb4b/0x1580 [ 987.391413][T12051] ? __x64_sys_write+0x1fb/0x4d0 [ 987.396654][T12051] ? x64_sys_call+0x38c3/0x3db0 [ 987.401813][T12051] ? do_syscall_64+0xd9/0x210 [ 987.406973][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.413317][T12051] ? kfree+0x252/0xec0 [ 987.417626][T12051] ? hfs_find_exit+0x4e/0xb0 [ 987.422476][T12051] ? hfs_extend_file+0x46d/0x1b00 [ 987.427847][T12051] ? hfs_get_block+0x435/0x1150 [ 987.433011][T12051] ? __block_write_begin_int+0xa73/0x3030 [ 987.439153][T12051] ? cont_write_begin+0x10e1/0x1bc0 [ 987.444666][T12051] ? hfs_write_begin+0x85/0x130 [ 987.449809][T12051] ? generic_perform_write+0x3f7/0x10c0 [ 987.455632][T12051] ? __generic_file_write_iter+0x213/0x460 [ 987.461717][T12051] ? generic_file_write_iter+0x131/0x980 [ 987.467624][T12051] ? vfs_write+0xb4b/0x1580 [ 987.472437][T12051] ? __x64_sys_write+0x1fb/0x4d0 [ 987.477671][T12051] ? x64_sys_call+0x38c3/0x3db0 [ 987.482831][T12051] ? do_syscall_64+0xd9/0x210 [ 987.487808][T12051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.494155][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.499574][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.505709][T12051] ? kfree+0x121/0xec0 [ 987.509999][T12051] ? filter_irq_stacks+0x49/0x190 [ 987.515269][T12051] ? stack_depot_save_flags+0x35/0x7b0 [ 987.521091][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.526491][T12051] __msan_warning+0x1b/0x30 [ 987.531239][T12051] hfs_find_set_zero_bits+0x74d/0xb60 [ 987.536852][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.542232][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.548310][T12051] hfs_vbm_search_free+0x13c/0x5b0 [ 987.553647][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.559721][T12051] hfs_extend_file+0x6a5/0x1b00 [ 987.564862][T12051] ? __mark_inode_dirty+0x371/0x1090 [ 987.570566][T12051] hfs_get_block+0x435/0x1150 [ 987.575602][T12051] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 987.581939][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.587409][T12051] __block_write_begin_int+0xa73/0x3030 [ 987.593287][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.598678][T12051] ? __pfx_hfs_get_block+0x10/0x10 [ 987.604075][T12051] cont_write_begin+0x10e1/0x1bc0 [ 987.609393][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.615552][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.620944][T12051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 987.627049][T12051] hfs_write_begin+0x85/0x130 [ 987.631979][T12051] ? __pfx_hfs_get_block+0x10/0x10 [ 987.637350][T12051] ? __pfx_hfs_write_begin+0x10/0x10 [ 987.642871][T12051] generic_perform_write+0x3f7/0x10c0 [ 987.648531][T12051] __generic_file_write_iter+0x213/0x460 [ 987.654448][T12051] generic_file_write_iter+0x131/0x980 [ 987.660167][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.665541][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.670901][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.676275][T12051] ? __x64_sys_write+0x1fb/0x4d0 [ 987.681485][T12051] ? __msan_warning+0x1b/0x30 [ 987.686415][T12051] ? filter_irq_stacks+0x13f/0x190 [ 987.691767][T12051] ? stack_depot_save_flags+0x35/0x7b0 [ 987.697454][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.702822][T12051] ? kmsan_get_metadata+0xfb/0x160 [ 987.708192][T12051] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 987.714809][T12051] vfs_write+0xb4b/0x1580 [ 987.719422][T12051] ? __pfx_generic_file_write_iter+0x10/0x10 [ 987.725657][T12051] __x64_sys_write+0x1fb/0x4d0 [ 987.730703][T12051] x64_sys_call+0x38c3/0x3db0 [ 987.735648][T12051] do_syscall_64+0xd9/0x210 [ 987.740522][T12051] ? irqentry_exit+0x16/0x60 [ 987.745355][T12051] ? clear_bhb_loop+0x40/0x90 [ 987.750251][T12051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.756379][T12051] RIP: 0033:0x7f8ef2b8e929 [ 987.760973][T12051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.780833][T12051] RSP: 002b:00007f8ef39e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.789477][T12051] RAX: ffffffffffffffda RBX: 00007f8ef2db5fa0 RCX: 00007f8ef2b8e929 [ 987.797644][T12051] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 987.805803][T12051] RBP: 00007f8ef2c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 987.813949][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.822098][T12051] R13: 0000000000000000 R14: 00007f8ef2db5fa0 R15: 00007ffd1b440578 [ 987.830289][T12051] [ 987.834129][T12051] Kernel Offset: disabled [ 987.838628][T12051] Rebooting in 86400 seconds..