last executing test programs: 9.468355134s ago: executing program 0 (id=2300): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r0, 0xb) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 9.46567769s ago: executing program 1 (id=2301): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 9.128854006s ago: executing program 0 (id=2303): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 8.175751145s ago: executing program 0 (id=2307): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x150, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e3"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.925008032s ago: executing program 1 (id=2309): kexec_load(0x3, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d", 0xb3, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8c", 0x5e, 0x5, 0x4}, {0x0, 0x0, 0x100000000000, 0x8}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f0000000480), 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca46", 0x15}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d7741d88888d2c4a16b91149c931132847fb96d3d02", 0x89}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465338a35aabfb0ed3524428b68945f0a2c8f90e1ced4718c7695aed1e852be6f9a23087af497642cd2560ef1e10729", 0x70}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486", 0xab}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.824036885s ago: executing program 2 (id=2310): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d7741d88888d2c4a16b91149c93113284", 0x84}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea0", 0xa9}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60", 0x1c}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.731877879s ago: executing program 3 (id=2311): epoll_create(0x30d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6.665914501s ago: executing program 4 (id=2312): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3", 0x89}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.557993126s ago: executing program 0 (id=2313): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x82002, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000440)={r2, &(0x7f00000003c0)=""/61}) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)=ANY=[@ANYRES32=r5, @ANYBLOB="1b9628bb975c86d5b52fbc4f76d8da42be4df0068dff46d91989e466168e82f00960e5bf3af397ce975cbc8e583447d29d588cecaacf69a7f41db99fc49004d0f69deca64e9d56964f8f1a", @ANYBLOB="0000000000ffffffe900"/20, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001540)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000006039c9430000000000000000181100006f728634dd7a0ab29c6282407780b0", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYRES64=r8, @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.847476121s ago: executing program 4 (id=2314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.841839779s ago: executing program 3 (id=2315): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x10}}, 0x4001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0xa8, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873e"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.786494269s ago: executing program 1 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x2000, 0x103) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c0002", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 4.728159563s ago: executing program 2 (id=2317): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.852382458s ago: executing program 1 (id=2318): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 3.852166943s ago: executing program 4 (id=2319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 3.507829259s ago: executing program 2 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb0", 0x5}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0x20040090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) 3.116218411s ago: executing program 4 (id=2321): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) 2.768686468s ago: executing program 2 (id=2322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="b0dcd010076a689f487da4286ded6eae3640c3fef3c563856cc0", 0x1a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af25bd7000000000000e000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.491963841s ago: executing program 4 (id=2323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="b0dcd010076a689f487da4286ded6eae3640c3fef3c563856cc0f4a594d6bb3796e53660d34170ad1cdba95258f74387ac", 0x31) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="f5af25bd7000000000000e000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000300)=ANY=[]) 1.997494723s ago: executing program 0 (id=2324): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3", 0x89}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d36726567"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.947776774s ago: executing program 3 (id=2325): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e9", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.276175648s ago: executing program 0 (id=2326): r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6057761ab0f200736ceae852a03caf381f413af6c96075ecb03b216edfcdf6142457f01689d1141660d64a06272cf6d", 0x74}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465338a35aabfb0ed3524428b68945f0a2c8f90e1ced4718c7695aed1e852be6f9a23087af497642cd2560ef1e10729", 0x70}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72", 0x52}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.256180685s ago: executing program 3 (id=2327): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f7", 0xb}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0}, 0xcc840) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 671.843483ms ago: executing program 2 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='pagemap\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/profiling', 0x1, 0x18f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 607.945291ms ago: executing program 3 (id=2329): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x321, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x404c010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newtfilter={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xf, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc8c4) 353.605142ms ago: executing program 1 (id=2330): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3", 0x89}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2, &(0x7f0000000cc0)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d3672656730000000000000000014000200677265746170300000000000000000000800030007000000140002007465616d3000"/126, @ANYRESDEC, @ANYRES32, @ANYRES8=r0, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 314.926053ms ago: executing program 3 (id=2331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 275.733435ms ago: executing program 4 (id=2332): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb0", 0x5}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0x18}, 0x20040090) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/comedi3\x00', 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) 248.866629ms ago: executing program 2 (id=2333): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) 0s ago: executing program 1 (id=2334): syz_open_procfs$userns(0x0, &(0x7f00000045c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): tive) [ 355.423358][ T36] usb 2-1: USB disconnect, device number 20 [ 357.126571][ T986] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 357.276582][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 357.280074][ T986] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 357.280104][ T986] usb 4-1: config 0 has no interface number 0 [ 357.280154][ T986] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 357.280183][ T986] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 357.306257][ T986] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 357.306289][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.306310][ T986] usb 4-1: Product: syz [ 357.306324][ T986] usb 4-1: Manufacturer: syz [ 357.306338][ T986] usb 4-1: SerialNumber: syz [ 357.433532][ T986] usb 4-1: config 0 descriptor?? [ 357.443003][ T8527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.443159][ T8527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.694428][ T8527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.694836][ T8527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 357.773071][ T8542] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.992'. [ 357.922975][ T986] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 357.923263][ T986] asix 4-1:0.34: probe with driver asix failed with error -32 [ 358.246409][ T822] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 358.397139][ T822] usb 1-1: Using ep0 maxpacket: 8 [ 358.405593][ T822] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 358.405620][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.476432][ T822] pvrusb2: Hardware description: Terratec Grabster AV400 [ 358.476454][ T822] pvrusb2: ********** [ 358.476464][ T822] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 358.476483][ T822] pvrusb2: Important functionality might not be entirely working. [ 358.476493][ T822] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 358.476506][ T822] pvrusb2: ********** [ 358.660734][ T2391] pvrusb2: Invalid write control endpoint [ 358.734186][ T2391] pvrusb2: Invalid write control endpoint [ 358.734204][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 358.734215][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 358.734230][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 358.734249][ T2391] pvrusb2: Device being rendered inoperable [ 358.734289][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 358.734339][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 358.735704][ T2391] pvrusb2: Attached sub-driver cx25840 [ 358.735719][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 358.735731][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 358.913077][ T822] usb 1-1: USB disconnect, device number 16 [ 360.012395][ T36] usb 4-1: USB disconnect, device number 20 [ 360.390698][ T8577] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1005'. [ 360.496460][ T986] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 360.649802][ T986] usb 2-1: Using ep0 maxpacket: 16 [ 360.653174][ T986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.653230][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 360.653258][ T986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 360.653290][ T986] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 360.653313][ T986] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.655155][ T986] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 360.655187][ T986] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 360.655216][ T986] usb 2-1: Manufacturer: syz [ 360.765108][ T986] usb 2-1: config 0 descriptor?? [ 361.066577][ T986] rc_core: IR keymap rc-hauppauge not found [ 361.066616][ T986] Registered IR keymap rc-empty [ 361.066779][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.086547][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.108123][ T986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 361.110592][ T986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 361.147484][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.166747][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.187021][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.207428][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.228482][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.246452][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.267320][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.287012][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.306628][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.340405][ T986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 361.408857][ T986] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 361.408879][ T986] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 361.475765][ T986] usb 2-1: USB disconnect, device number 21 [ 361.966472][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 362.126395][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 362.132277][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 362.132310][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.389952][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 362.389973][ T9] pvrusb2: ********** [ 362.389981][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 362.389994][ T9] pvrusb2: Important functionality might not be entirely working. [ 362.390004][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 362.390016][ T9] pvrusb2: ********** [ 362.416351][ T2391] pvrusb2: Invalid write control endpoint [ 363.472713][ T7828] usb 3-1: USB disconnect, device number 23 [ 363.621498][ T2391] pvrusb2: Invalid write control endpoint [ 363.621511][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 363.621519][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 363.621526][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 363.621533][ T2391] pvrusb2: Device being rendered inoperable [ 363.668740][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 363.668806][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 363.752804][ T2391] pvrusb2: Attached sub-driver cx25840 [ 363.752822][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 363.752834][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 364.892162][ T5742] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 365.047286][ T5742] usb 4-1: Using ep0 maxpacket: 16 [ 365.066376][ T5742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.066435][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.066466][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 365.066489][ T5742] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 365.066513][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.071909][ T5742] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 365.071934][ T5742] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 365.071949][ T5742] usb 4-1: Manufacturer: syz [ 365.152146][ T5742] usb 4-1: config 0 descriptor?? [ 365.606941][ T5742] rc_core: IR keymap rc-hauppauge not found [ 365.606965][ T5742] Registered IR keymap rc-empty [ 365.607107][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.628286][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.660847][ T5742] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 365.695844][ T5742] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 365.800520][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.842432][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.877042][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.897093][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.920066][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.936510][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.956663][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.976556][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 365.996812][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 366.016528][ T5742] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 366.097439][ T5742] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 366.097460][ T5742] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 366.138561][ T5742] usb 4-1: USB disconnect, device number 21 [ 368.886467][ T5729] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 369.037314][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 369.081774][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.081834][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.082601][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.082637][ T5729] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 369.082667][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.131864][ T5729] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 369.131898][ T5729] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 369.131918][ T5729] usb 2-1: Manufacturer: syz [ 369.229150][ T5729] usb 2-1: config 0 descriptor?? [ 369.827394][ T5729] rc_core: IR keymap rc-hauppauge not found [ 369.827412][ T5729] Registered IR keymap rc-empty [ 369.827527][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 369.852167][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 369.873423][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 369.900582][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 369.943515][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 369.956703][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 369.976709][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 369.998535][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.041062][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.060373][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.082582][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.099806][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.123091][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.140222][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 370.269927][ T5729] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 370.269953][ T5729] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 370.332740][ T5729] usb 2-1: USB disconnect, device number 22 [ 373.490234][ T822] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 373.646434][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 373.654720][ T822] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 373.654757][ T822] usb 3-1: config 0 has no interface number 0 [ 373.654804][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 373.654831][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 373.717520][ T822] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 373.717554][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.717574][ T822] usb 3-1: Product: syz [ 373.717590][ T822] usb 3-1: Manufacturer: syz [ 373.717605][ T822] usb 3-1: SerialNumber: syz [ 373.804495][ T822] usb 3-1: config 0 descriptor?? [ 373.807043][ T8725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.807258][ T8725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 374.073185][ T8725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 374.074894][ T8725] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 374.312133][ T822] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 374.312436][ T822] asix 3-1:0.34: probe with driver asix failed with error -61 [ 376.192620][ T822] usb 3-1: USB disconnect, device number 24 [ 377.324662][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 378.146496][ T7828] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 378.296660][ T7828] usb 3-1: Using ep0 maxpacket: 32 [ 378.306160][ T7828] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 378.306190][ T7828] usb 3-1: config 0 has no interface number 0 [ 378.347818][ T7828] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 378.347854][ T7828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.347869][ T7828] usb 3-1: Product: syz [ 378.347879][ T7828] usb 3-1: Manufacturer: syz [ 378.347890][ T7828] usb 3-1: SerialNumber: syz [ 378.370303][ T7828] usb 3-1: config 0 descriptor?? [ 378.486869][ T822] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 378.638993][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 378.642099][ T822] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 378.642125][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.642175][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.642209][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.642231][ T822] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.642256][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.643656][ T822] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.643686][ T822] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.643708][ T822] usb 4-1: Manufacturer: syz [ 378.828093][ T7828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 378.828127][ T7828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 378.834088][ T822] usb 4-1: config 0 descriptor?? [ 378.995986][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.996372][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.042089][ T7828] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 379.085281][ T7828] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 379.132886][ T7828] usb 3-1: USB disconnect, device number 25 [ 379.236478][ T822] rc_core: IR keymap rc-hauppauge not found [ 379.236501][ T822] Registered IR keymap rc-empty [ 379.236670][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.256847][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.283957][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 379.286177][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 379.352214][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.366660][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.389202][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.414311][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.427011][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.448048][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.466402][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.486436][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.508050][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.526977][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 379.664655][ T822] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 379.664683][ T822] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.721841][ T822] usb 4-1: USB disconnect, device number 22 [ 380.205748][ T8834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 380.986574][ T5729] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 381.136711][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 381.154291][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.154349][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 381.154380][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 381.154403][ T5729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 381.155311][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.176452][ T5729] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 381.176485][ T5729] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 381.176507][ T5729] usb 3-1: Manufacturer: syz [ 381.271994][ T5729] usb 3-1: config 0 descriptor?? [ 381.557154][ T5729] rc_core: IR keymap rc-hauppauge not found [ 381.557178][ T5729] Registered IR keymap rc-empty [ 381.557342][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.589743][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.610023][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 381.626805][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input28 [ 381.653332][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.701409][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.719981][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.736563][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.756917][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.776580][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.796726][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.816419][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.836964][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.856414][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 381.884693][ T5729] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 381.884722][ T5729] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 381.971670][ T5729] usb 3-1: USB disconnect, device number 26 [ 385.126684][ T986] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 385.277001][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 385.295945][ T986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.295988][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.296009][ T986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 385.296034][ T986] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 385.296052][ T986] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.362084][ T986] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 385.362120][ T986] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 385.362142][ T986] usb 4-1: Manufacturer: syz [ 385.403267][ T986] usb 4-1: config 0 descriptor?? [ 385.746581][ T986] rc_core: IR keymap rc-hauppauge not found [ 385.746604][ T986] Registered IR keymap rc-empty [ 385.746789][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.775789][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.789140][ T986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 385.793084][ T986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 385.825368][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.836589][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.857804][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.876590][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.896615][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.917011][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.936637][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.956969][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.976602][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 385.996536][ T986] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 386.032487][ T986] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 386.032521][ T986] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 386.099921][ T986] usb 4-1: USB disconnect, device number 23 [ 389.438319][ T8977] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 390.257387][ T36] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 390.416940][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 390.419530][ T36] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.419569][ T36] usb 1-1: config 0 has no interface number 0 [ 390.424918][ T36] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.424956][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.424998][ T36] usb 1-1: Product: syz [ 390.425009][ T36] usb 1-1: Manufacturer: syz [ 390.425020][ T36] usb 1-1: SerialNumber: syz [ 390.483572][ T36] usb 1-1: config 0 descriptor?? [ 390.714266][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 390.963224][ T36] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 390.963253][ T36] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 391.777679][ T36] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 391.778015][ T36] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 393.089206][ T5729] usb 1-1: USB disconnect, device number 17 [ 395.056571][ T5742] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 395.187938][ T9086] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 395.227036][ T5742] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 395.227069][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.227089][ T5742] usb 4-1: Product: syz [ 395.227104][ T5742] usb 4-1: Manufacturer: syz [ 395.227120][ T5742] usb 4-1: SerialNumber: syz [ 395.715413][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 395.715479][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 395.716007][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 395.716062][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.773226][ T5742] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.817986][ T5742] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 395.855657][ T5742] usb 4-1: USB disconnect, device number 24 [ 398.127457][ T5729] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 398.284604][ T5729] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 398.284641][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.284658][ T5729] usb 4-1: Product: syz [ 398.284670][ T5729] usb 4-1: Manufacturer: syz [ 398.284930][ T5729] usb 4-1: SerialNumber: syz [ 398.978728][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 398.978792][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 399.013281][ T5729] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 399.049760][ T5729] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 399.092593][ T5729] usb 4-1: USB disconnect, device number 25 [ 399.677857][ T5729] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 399.852066][ T5729] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 399.852102][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.852124][ T5729] usb 1-1: Product: syz [ 399.852139][ T5729] usb 1-1: Manufacturer: syz [ 399.852154][ T5729] usb 1-1: SerialNumber: syz [ 399.893651][ T5729] usb 1-1: config 0 descriptor?? [ 400.046690][ T9175] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1226'. [ 400.108177][ T5729] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 400.436657][ T986] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 400.594452][ T986] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 400.594476][ T986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.594536][ T986] usb 2-1: Product: syz [ 400.594548][ T986] usb 2-1: Manufacturer: syz [ 400.594558][ T986] usb 2-1: SerialNumber: syz [ 401.067958][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 401.068086][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 401.526421][ T5742] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 401.663754][ T5729] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 401.700101][ T5729] usb 1-1: USB disconnect, device number 18 [ 401.717798][ T5742] usb 4-1: Using ep0 maxpacket: 8 [ 401.723067][ T5742] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.723122][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 401.724056][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 401.724086][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 401.724110][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.834602][ T5742] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.834628][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.842548][ T5742] usb 4-1: Product: syz [ 401.842794][ T5742] usb 4-1: Manufacturer: syz [ 401.842959][ T5742] usb 4-1: SerialNumber: syz [ 402.005233][ T5742] usb 4-1: config 0 descriptor?? [ 402.229186][ T5742] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 402.229208][ T5742] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 402.289612][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 402.430833][ T5742] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 402.430860][ T5742] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 402.459408][ T5742] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 402.496427][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 402.496815][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 402.496852][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 402.497471][ T986] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 402.566403][ T986] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 402.631446][ T5742] usb 4-1: USB disconnect, device number 26 [ 402.745127][ T986] usb 2-1: USB disconnect, device number 23 [ 402.976457][ T36] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 403.126447][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 403.129660][ T36] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 403.129718][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.129748][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 403.129771][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 403.129796][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.131386][ T36] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 403.131416][ T36] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 403.131438][ T36] usb 1-1: Manufacturer: syz [ 403.229488][ T36] usb 1-1: config 0 descriptor?? [ 403.546354][ T36] rc_core: IR keymap rc-hauppauge not found [ 403.546378][ T36] Registered IR keymap rc-empty [ 403.546534][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.581530][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.600180][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 403.605204][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 403.637894][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.656853][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.677686][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.706537][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.726581][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.739772][ T822] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 403.760087][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.784739][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.806438][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.836910][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.866530][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 403.942381][ T36] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 403.942409][ T36] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 403.957490][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 403.976797][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.976855][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 403.976883][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 403.976910][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 403.976934][ T822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 404.047260][ T822] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 404.047347][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 404.047402][ T822] usb 2-1: Product: syz [ 404.047443][ T822] usb 2-1: Manufacturer: syz [ 404.047486][ T822] usb 2-1: SerialNumber: syz [ 404.104177][ T36] usb 1-1: USB disconnect, device number 19 [ 404.142600][ T822] usb 2-1: config 0 descriptor?? [ 404.414367][ T822] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 404.414389][ T822] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 404.616739][ T822] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 404.616759][ T822] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 404.616968][ T822] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 404.706661][ T822] usb 2-1: USB disconnect, device number 24 [ 404.826544][ T986] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 404.976430][ T986] usb 3-1: Using ep0 maxpacket: 16 [ 404.980084][ T986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.980116][ T986] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.983064][ T986] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.983088][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.983102][ T986] usb 3-1: Product: syz [ 404.983113][ T986] usb 3-1: Manufacturer: syz [ 404.983123][ T986] usb 3-1: SerialNumber: syz [ 405.121412][ T986] usb 3-1: 0:2 : does not exist [ 405.293882][ T986] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 405.407573][ T986] usb 3-1: USB disconnect, device number 27 [ 405.822466][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.195494][ T9259] loop8: detected capacity change from 0 to 7 [ 406.312092][ T9259] Dev loop8: unable to read RDB block 7 [ 406.312139][ T9259] loop8: unable to read partition table [ 406.312374][ T9259] loop8: partition table beyond EOD, truncated [ 406.312406][ T9259] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 407.486528][ T5729] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 407.636424][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 407.642212][ T5729] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.642277][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 407.642310][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.642633][ T5729] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 407.642661][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.645828][ T5729] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 407.646433][ T5729] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 407.646537][ T5729] usb 2-1: Manufacturer: syz [ 407.764789][ T5729] usb 2-1: config 0 descriptor?? [ 407.926632][ T986] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 408.068369][ T5729] rc_core: IR keymap rc-hauppauge not found [ 408.068393][ T5729] Registered IR keymap rc-empty [ 408.068577][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.088864][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.110674][ T986] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 408.110710][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.110733][ T986] usb 4-1: Product: syz [ 408.110749][ T986] usb 4-1: Manufacturer: syz [ 408.110763][ T986] usb 4-1: SerialNumber: syz [ 408.117022][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 408.163221][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input31 [ 408.181039][ T986] usb 4-1: config 0 descriptor?? [ 408.191773][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.206704][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.226881][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.246696][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.268834][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.286856][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.310412][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.328148][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.350346][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.367077][ T5729] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 408.377608][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 408.403895][ T986] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 408.441766][ T5729] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 408.441795][ T5729] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 408.503773][ T9297] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1277'. [ 408.547078][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 408.549805][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.549826][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.553315][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.553337][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.553397][ T9] usb 3-1: Product: syz [ 408.553411][ T9] usb 3-1: Manufacturer: syz [ 408.553422][ T9] usb 3-1: SerialNumber: syz [ 408.649726][ T5729] usb 2-1: USB disconnect, device number 25 [ 408.813723][ T9] usb 3-1: 0:2 : does not exist [ 408.957577][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 409.024560][ T9301] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 409.642556][ T9] usb 3-1: USB disconnect, device number 28 [ 409.918471][ T986] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 409.964298][ T986] usb 4-1: USB disconnect, device number 27 [ 410.211444][ T9320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.820855][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.285768][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.113122][ T9391] macvlan2: entered promiscuous mode [ 414.113151][ T9391] macvlan2: entered allmulticast mode [ 414.115326][ T9391] bond3: entered promiscuous mode [ 414.150726][ T9391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.259485][ T9391] bond3: left promiscuous mode [ 414.906959][ T9404] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 415.404170][ T9420] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 415.995451][ T9426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.656495][ T5729] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 418.806349][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 418.809085][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.809144][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 418.809164][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 418.809183][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 418.809199][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 418.813252][ T5729] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 418.813290][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 418.813307][ T5729] usb 3-1: Product: syz [ 418.813318][ T5729] usb 3-1: Manufacturer: syz [ 418.813329][ T5729] usb 3-1: SerialNumber: syz [ 418.878739][ T5729] usb 3-1: config 0 descriptor?? [ 419.143911][ T5729] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 419.144243][ T5729] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 419.206433][ T5729] usb 3-1: USB disconnect, device number 29 [ 419.946573][ T5729] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 420.098316][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 420.102493][ T5729] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.102525][ T5729] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.102549][ T5729] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 420.102594][ T5729] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.102617][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.198689][ T5729] usbtmc 4-1:16.0: bulk endpoints not found [ 422.020317][ T9504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.706468][ T5729] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 422.789793][ T986] usb 4-1: USB disconnect, device number 28 [ 422.956319][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 422.959553][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.959582][ T5729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.964866][ T5729] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.964900][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.964921][ T5729] usb 2-1: Product: syz [ 422.964941][ T5729] usb 2-1: Manufacturer: syz [ 422.964957][ T5729] usb 2-1: SerialNumber: syz [ 423.102814][ T5729] usb 2-1: 0:2 : does not exist [ 423.355195][ T5729] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 424.293432][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.693549][ T5729] usb 2-1: USB disconnect, device number 26 [ 425.122946][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 425.669781][ T9540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.465087][ T9590] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1398'. [ 429.667836][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'. [ 431.456722][ T822] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 431.470339][ T9626] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1412'. [ 431.616448][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 431.650035][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.650093][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.650123][ T822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 431.650146][ T822] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 431.650170][ T822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.654100][ T822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.654139][ T822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.654164][ T822] usb 3-1: Manufacturer: syz [ 431.779766][ T822] usb 3-1: config 0 descriptor?? [ 431.985054][ T9632] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1415'. [ 432.156420][ T822] rc_core: IR keymap rc-hauppauge not found [ 432.156440][ T822] Registered IR keymap rc-empty [ 432.156595][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.184775][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.207064][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 432.210995][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 432.215334][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.258067][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.286501][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.316519][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.346442][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.366461][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.386404][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.409069][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.436406][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.457240][ T822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 432.512525][ T822] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 432.512554][ T822] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 432.545342][ T822] usb 3-1: USB disconnect, device number 30 [ 433.595205][ T9660] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.1425'. [ 433.827102][ T9666] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1428'. [ 434.454787][ T9680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.505195][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 436.505232][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 436.595329][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 436.595366][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1446'. [ 437.850831][ T9739] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 439.548589][ T9772] loop8: detected capacity change from 0 to 7 [ 439.574812][ T9772] Dev loop8: unable to read RDB block 7 [ 439.574841][ T9772] loop8: AHDI p1 [ 439.574866][ T9772] loop8: partition table partially beyond EOD, truncated [ 440.028005][ T36] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 440.177563][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 440.181861][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.181917][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.181955][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.181979][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 440.182004][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.183901][ T36] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.184202][ T36] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.184223][ T36] usb 2-1: Manufacturer: syz [ 440.281518][ T36] usb 2-1: config 0 descriptor?? [ 440.410735][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.410888][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.566385][ T36] rc_core: IR keymap rc-hauppauge not found [ 440.566410][ T36] Registered IR keymap rc-empty [ 440.566673][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.596510][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.646711][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 440.676739][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 440.683923][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.709462][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.726686][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.746427][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.766427][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.786592][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.816475][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.841152][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.856646][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.876425][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 440.912965][ T36] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 440.913051][ T36] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 440.961821][ T36] usb 2-1: USB disconnect, device number 27 [ 442.086463][ T36] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 442.135830][ T9821] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1487'. [ 442.236471][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 442.260759][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.260846][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.286330][ T36] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.286363][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.286384][ T36] usb 2-1: Product: syz [ 442.286400][ T36] usb 2-1: Manufacturer: syz [ 442.286415][ T36] usb 2-1: SerialNumber: syz [ 442.355895][ T36] usb 2-1: 0:2 : does not exist [ 442.355984][ T36] usb 2-1: unit 6 not found! [ 442.563457][ T5729] usb 2-1: USB disconnect, device number 28 [ 443.562292][ T9850] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1500'. [ 443.750098][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 443.978788][ T9860] macvlan2: entered promiscuous mode [ 443.978817][ T9860] macvlan2: entered allmulticast mode [ 444.002328][ T9860] bond5: entered promiscuous mode [ 444.015193][ T9860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.127772][ T9860] bond5: left promiscuous mode [ 450.476761][ T36] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 450.568464][ T986] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 450.626385][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 450.631583][ T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 450.631617][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.729377][ T36] pvrusb2: Hardware description: Terratec Grabster AV400 [ 450.729397][ T36] pvrusb2: ********** [ 450.729404][ T36] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 450.729417][ T36] pvrusb2: Important functionality might not be entirely working. [ 450.729426][ T36] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 450.729438][ T36] pvrusb2: ********** [ 450.936962][ T986] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 450.936986][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.937001][ T986] usb 3-1: Product: syz [ 450.937076][ T986] usb 3-1: Manufacturer: syz [ 450.937092][ T986] usb 3-1: SerialNumber: syz [ 451.025968][ T986] usb 3-1: config 0 descriptor?? [ 451.031129][ T2391] pvrusb2: Invalid write control endpoint [ 451.173709][ T36] usb 2-1: USB disconnect, device number 29 [ 451.384859][ T986] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 451.571674][ T2391] pvrusb2: Invalid write control endpoint [ 451.571691][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 451.571703][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 451.571713][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 451.571724][ T2391] pvrusb2: Device being rendered inoperable [ 451.641750][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 451.843293][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 451.870099][ T2391] pvrusb2: Attached sub-driver cx25840 [ 451.870118][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 451.870135][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 452.702902][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 452.705666][ T986] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 452.718912][ T986] usb 3-1: USB disconnect, device number 31 [ 452.746497][ T5743] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 452.904067][ T5743] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 452.904101][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.904123][ T5743] usb 4-1: Product: syz [ 452.904137][ T5743] usb 4-1: Manufacturer: syz [ 452.904152][ T5743] usb 4-1: SerialNumber: syz [ 453.373199][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 453.373267][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 454.590515][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 454.595652][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 454.624515][T10032] erspan0: entered promiscuous mode [ 454.624943][T10032] macvtap1: entered promiscuous mode [ 454.625196][T10032] macvtap1: entered allmulticast mode [ 454.625217][T10032] erspan0: entered allmulticast mode [ 454.653053][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1571'. [ 454.998312][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 455.000645][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 455.000706][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 455.001658][ T5743] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 455.074602][ T5743] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 455.110394][ T5743] usb 4-1: USB disconnect, device number 29 [ 456.603224][T10079] trusted_key: encrypted_key: keylen parameter is missing [ 457.098527][T10090] 9p: Could not find request transport: 0xffffffffffffffff [ 457.999245][T10111] syz.2.1604 (10111): drop_caches: 2 [ 462.258499][ T986] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 462.409273][ T986] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 462.409305][ T986] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 462.409326][ T986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.409346][ T986] usb 2-1: config 0 has no interface number 0 [ 462.409394][ T986] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 462.409419][ T986] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 14129, setting to 64 [ 462.409447][ T986] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 462.409491][ T986] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 462.409515][ T986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.523105][ T986] usb 2-1: config 0 descriptor?? [ 462.581262][ T986] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 462.785717][ T13] usb 2-1: Failed to submit usb control message: -71 [ 462.785751][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 462.785766][ T13] usb 2-1: unable to get target info from device [ 462.785790][ T13] usb 2-1: could not get target info (-71) [ 462.823233][ T5729] usb 2-1: USB disconnect, device number 30 [ 462.837701][ T13] usb 2-1: could not probe fw (-71) [ 463.107569][T10189] syz.0.1633(10189): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 465.383054][T10207] syz.1.1639 (10207): drop_caches: 2 [ 470.070387][T10254] veth1_macvtap: left promiscuous mode [ 472.093186][T10261] ceph: No mds server is up or the cluster is laggy [ 472.590647][ T5623] libceph: connect (1)[c::]:6789 error -101 [ 472.592395][ T5623] libceph: mon0 (1)[c::]:6789 connect error [ 474.996639][ T5623] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 475.156335][ T5623] usb 3-1: Using ep0 maxpacket: 32 [ 475.158665][ T5623] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 475.158696][ T5623] usb 3-1: config 2 has no interface number 0 [ 475.158746][ T5623] usb 3-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 475.158773][ T5623] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 475.158801][ T5623] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 475.158844][ T5623] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 475.158868][ T5623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.249534][T10285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.251851][T10285] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 475.867554][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 476.089524][T10315] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 476.229013][T10315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.283449][ T5623] usb 3-1: string descriptor 0 read error: -71 [ 476.300738][ T5623] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.518146][ T5623] usb 3-1: USB disconnect, device number 32 [ 476.625825][T10317] bond6: (slave dummy0): making interface the new active one [ 476.682520][T10317] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 476.746384][ T5265] veth1_macvtap: entered promiscuous mode [ 477.321821][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 477.378328][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 477.559230][T10334] ip6gretap0: entered promiscuous mode [ 477.559515][T10334] macvtap2: entered promiscuous mode [ 477.650287][T10334] macvtap2: entered allmulticast mode [ 477.652050][T10334] ip6gretap0: entered allmulticast mode [ 478.047122][T10337] ip6gretap0: left allmulticast mode [ 479.040201][T10337] ip6gretap0: left promiscuous mode [ 484.224668][T10380] pim6reg: entered allmulticast mode [ 484.242305][T10381] pim6reg: left allmulticast mode [ 488.098366][T10401] loop9: detected capacity change from 0 to 520093695 [ 488.576313][ T5729] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 488.726517][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 488.730332][ T5729] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 488.730381][ T5729] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 488.730405][ T5729] usb 3-1: config 0 has no interface number 0 [ 488.730449][ T5729] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 488.730468][ T5729] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 488.735657][ T5729] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 488.735696][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.735713][ T5729] usb 3-1: Product: syz [ 488.735723][ T5729] usb 3-1: Manufacturer: syz [ 488.735734][ T5729] usb 3-1: SerialNumber: syz [ 489.618358][ T5729] usb 3-1: config 0 descriptor?? [ 489.628292][T10408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.628441][T10408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.877838][T10408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 489.877990][T10408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 490.381396][ T5729] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 490.381422][ T5729] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 490.381640][ T5729] asix 3-1:0.251: probe with driver asix failed with error -71 [ 490.417801][ T5729] usb 3-1: USB disconnect, device number 33 [ 491.117976][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 494.128204][ T5729] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 494.349544][ T5729] usb 4-1: Using ep0 maxpacket: 8 [ 494.423322][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 494.445609][ T5729] usb 4-1: config 4 interface 0 has no altsetting 0 [ 494.525780][ T5729] usb 4-1: string descriptor 0 read error: -22 [ 494.526079][ T5729] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 494.526122][ T5729] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 494.621372][ T5729] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 494.840877][ T5729] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 494.892071][ T5729] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 494.892150][ T5729] usb 4-1: media controller created [ 496.583922][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 496.702365][ T5729] zl10353_read_register: readreg error (reg=127, ret==0) [ 496.911096][T10466] syz_tun: entered promiscuous mode [ 496.911624][T10466] macvtap1: entered promiscuous mode [ 497.000967][ T5729] usb 4-1: USB disconnect, device number 30 [ 497.037268][T10466] syz_tun: left promiscuous mode [ 497.930482][T10491] fuse: Bad value for 'fd' [ 498.213638][ T5742] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 499.216825][ T5742] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.218282][ T5742] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 499.218312][ T5742] usb 3-1: config 255 has an invalid interface number: 100 but max is 1 [ 499.218334][ T5742] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 499.218354][ T5742] usb 3-1: config 255 has no interface number 0 [ 499.218397][ T5742] usb 3-1: config 255 interface 100 altsetting 25 endpoint 0x9 has invalid maxpacket 16, setting to 8 [ 499.218423][ T5742] usb 3-1: config 255 interface 100 has no altsetting 0 [ 499.218437][ T5742] usb 3-1: config 255 interface 100 has no altsetting 1 [ 499.221862][ T5742] usb 3-1: string descriptor 0 read error: -22 [ 499.222163][ T5742] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 499.222188][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.588476][ T5742] usb 3-1: USB disconnect, device number 34 [ 502.629924][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.630009][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.477083][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.509010][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.510448][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.513548][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.515698][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 506.725940][ T5633] Bluetooth: hci5: command tx timeout [ 509.416262][ T5633] Bluetooth: hci5: command tx timeout [ 510.815776][ T3331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.436795][ T5633] Bluetooth: hci5: command tx timeout [ 511.920813][ T3331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.519857][ T3331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.100734][ T3331] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.304761][T10627] C: renamed from veth1_to_team (while UP) [ 513.476644][T10627] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 513.476667][T10627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 513.536803][ T5622] Bluetooth: hci5: command tx timeout [ 517.146828][T10658] syz.0.1778 (10658): drop_caches: 2 [ 517.764300][ T37] audit: type=1326 audit(1779136146.477:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10662 comm="syz.2.1780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b46cdce59 code=0x0 [ 519.545299][ T3331] bridge_slave_1: left allmulticast mode [ 519.583723][ T3331] bridge_slave_1: left promiscuous mode [ 519.618585][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.114627][ T3331] bridge_slave_0: left allmulticast mode [ 520.114667][ T3331] bridge_slave_0: left promiscuous mode [ 520.133010][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.737295][ T3331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.780918][ T3331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.809783][ T3331] bond0 (unregistering): Released all slaves [ 524.010053][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 524.156650][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 524.159391][ T10] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 524.159423][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 524.159446][ T10] usb 2-1: config 0 has no interface number 0 [ 524.159513][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 524.159541][ T10] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 524.189620][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 524.189654][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.189676][ T10] usb 2-1: Product: syz [ 524.189691][ T10] usb 2-1: Manufacturer: syz [ 524.189706][ T10] usb 2-1: SerialNumber: syz [ 524.307937][ T10] usb 2-1: config 0 descriptor?? [ 524.308805][T10730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.308932][T10730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.359101][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 524.405623][T10726] erspan0: entered promiscuous mode [ 524.582649][T10730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.582781][T10730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 524.817850][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 524.817979][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 524.818274][ T10] asix 2-1:0.251: probe with driver asix failed with error -5 [ 524.909662][ T10] usb 2-1: USB disconnect, device number 31 [ 525.671129][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.671385][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.671647][T10539] bridge_slave_0: entered allmulticast mode [ 525.675593][T10539] bridge_slave_0: entered promiscuous mode [ 525.713651][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.713928][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.714595][T10539] bridge_slave_1: entered allmulticast mode [ 525.833985][T10539] bridge_slave_1: entered promiscuous mode [ 526.074855][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.080349][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.598673][T10758] lo speed is unknown, defaulting to 1000 [ 527.600850][T10758] lo speed is unknown, defaulting to 1000 [ 527.676102][T10758] lo speed is unknown, defaulting to 1000 [ 527.713255][T10758] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 527.713331][T10758] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 527.713407][T10758] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 527.789058][T10758] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 527.982066][T10758] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 528.157171][T10539] team0: Port device team_slave_0 added [ 528.183765][T10758] lo speed is unknown, defaulting to 1000 [ 528.188248][T10758] lo speed is unknown, defaulting to 1000 [ 528.190179][T10758] lo speed is unknown, defaulting to 1000 [ 528.192564][T10758] lo speed is unknown, defaulting to 1000 [ 528.194475][T10758] lo speed is unknown, defaulting to 1000 [ 528.196786][T10758] lo speed is unknown, defaulting to 1000 [ 528.521741][T10539] team0: Port device team_slave_1 added [ 530.784214][T10784] binder: 10779:10784 ioctl c0306201 200000000040 returned -14 [ 531.309920][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 531.326485][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.326522][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.326554][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.675491][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.675512][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.675542][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.732084][ T5729] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 531.854679][T10793] macvlan0: entered promiscuous mode [ 531.909527][ T5729] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 531.909560][ T5729] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 531.909583][ T5729] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 531.909644][ T5729] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.909673][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 531.909701][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.008958][ T5729] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 532.008993][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 532.009014][ T5729] usb 4-1: Product: syz [ 532.009029][ T5729] usb 4-1: Manufacturer: syz [ 532.052676][ T5743] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 532.091872][T10792] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 532.112514][ T5729] cdc_wdm 4-1:1.0: skipping garbage [ 532.112538][ T5729] cdc_wdm 4-1:1.0: skipping garbage [ 532.206302][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 532.209238][ T5743] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 532.209270][ T5743] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 532.209292][ T5743] usb 2-1: config 0 has no interface number 0 [ 532.209350][ T5743] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 532.209379][ T5743] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 532.214007][ T5743] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 532.214039][ T5743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.214061][ T5743] usb 2-1: Product: syz [ 532.214076][ T5743] usb 2-1: Manufacturer: syz [ 532.214091][ T5743] usb 2-1: SerialNumber: syz [ 532.380396][ T5743] usb 2-1: config 0 descriptor?? [ 532.381596][T10798] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.381753][T10798] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.610296][T10798] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.610953][T10798] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 532.667696][ T37] audit: type=1326 audit(1779136161.447:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10799 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b46cdce59 code=0x7ffc0000 [ 532.668080][ T37] audit: type=1326 audit(1779136161.447:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10799 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2b46cdce59 code=0x7ffc0000 [ 532.669249][ T37] audit: type=1326 audit(1779136161.447:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10799 comm="syz.2.1813" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b46cdce59 code=0x7ffc0000 [ 532.988298][ T5743] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 532.988331][ T5743] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 532.988636][ T5743] asix 2-1:0.251: probe with driver asix failed with error -5 [ 533.369007][ T5743] usb 2-1: USB disconnect, device number 32 [ 533.382342][ T5729] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 533.382420][ T5729] cdc_wdm 4-1:1.0: Unknown control protocol [ 533.584804][T10539] hsr_slave_0: entered promiscuous mode [ 533.681077][T10539] hsr_slave_1: entered promiscuous mode [ 533.682190][T10539] debugfs: 'hsr0' already exists in 'hsr' [ 533.724577][T10539] Cannot create hsr debugfs directory [ 533.965826][ T5729] usb 4-1: USB disconnect, device number 31 [ 537.226814][ T3331] hsr_slave_0: left promiscuous mode [ 537.277840][ T3331] hsr_slave_1: left promiscuous mode [ 537.279580][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.279733][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.346427][ T3331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.346459][ T3331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.607571][ T3331] veth1_macvtap: left promiscuous mode [ 537.655798][ T3331] veth0_macvtap: left promiscuous mode [ 537.702225][ T3331] veth1_vlan: left promiscuous mode [ 537.758100][ T3331] veth0_vlan: left promiscuous mode [ 538.334578][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1828'. [ 538.614913][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'. [ 544.047192][ T3331] team0 (unregistering): Port device team_slave_1 removed [ 544.159307][ T3331] team0 (unregistering): Port device team_slave_0 removed [ 545.020006][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.050114][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.050152][T10858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.166683][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.166718][T10858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.001808][T10899] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1841'. [ 556.396879][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1849'. [ 563.271633][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.271700][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.599867][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.691958][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.712251][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.748554][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.783590][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.831288][ T5633] Bluetooth: hci4: command tx timeout [ 566.161997][T10989] lo speed is unknown, defaulting to 1000 [ 568.654857][ T5633] Bluetooth: hci4: command tx timeout [ 570.706754][ T5633] Bluetooth: hci4: command tx timeout [ 573.287367][ T5633] Bluetooth: hci4: command tx timeout [ 575.475240][T10989] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.487421][T10989] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.489436][T10989] bridge_slave_0: entered allmulticast mode [ 575.527564][T10989] bridge_slave_0: entered promiscuous mode [ 575.533519][T10989] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.533734][T10989] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.534007][T10989] bridge_slave_1: entered allmulticast mode [ 575.576952][T10989] bridge_slave_1: entered promiscuous mode [ 575.577387][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 575.713164][T10989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.838581][T10989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.938495][T10989] team0: Port device team_slave_0 added [ 575.942978][T10989] team0: Port device team_slave_1 added [ 576.462201][T10989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.462220][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.462251][T10989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.468748][T10989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.468767][T10989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.468799][T10989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.729259][T10989] hsr_slave_0: entered promiscuous mode [ 577.732253][T10989] hsr_slave_1: entered promiscuous mode [ 577.761036][T10989] debugfs: 'hsr0' already exists in 'hsr' [ 577.761069][T10989] Cannot create hsr debugfs directory [ 578.614348][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 578.948770][ T12] bridge_slave_1: left allmulticast mode [ 578.948808][ T12] bridge_slave_1: left promiscuous mode [ 578.949121][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.132677][ T12] bridge_slave_0: left allmulticast mode [ 579.132719][ T12] bridge_slave_0: left promiscuous mode [ 579.200055][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.478734][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.605121][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.683967][ T12] bond0 (unregistering): Released all slaves [ 580.739324][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 583.572365][T11225] input: syz0 as /devices/virtual/input/input37 [ 584.994734][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 585.206379][ T12] hsr_slave_0: left promiscuous mode [ 585.257482][ T12] hsr_slave_1: left promiscuous mode [ 585.259694][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.308605][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.097368][ T12] team0 (unregistering): Port device team_slave_1 removed [ 586.167312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 591.174486][T11264] input: syz0 as /devices/virtual/input/input38 [ 597.212636][T11305] input: syz0 as /devices/virtual/input/input39 [ 598.507183][T11326] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1944'. [ 601.426395][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 601.581280][ T5743] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 601.581314][ T5743] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 601.711081][T10989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.792771][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 601.834240][T10989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 601.972795][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 601.977236][T10989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 602.412358][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 602.417636][T10989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 602.720281][T10989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.313021][T10989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.372444][T10989] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.511506][ T1379] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.511750][ T1379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.577089][T11388] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1957'. [ 604.426263][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.426396][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.361816][T11439] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1970'. [ 611.211782][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.588424][T11472] fuse: Bad value for 'fd' [ 612.306579][ T6368] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 612.375556][T10989] veth0_vlan: entered promiscuous mode [ 612.464075][T10989] veth1_vlan: entered promiscuous mode [ 612.483519][ T6368] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 612.483569][ T6368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.483591][ T6368] usb 1-1: Product: syz [ 612.483607][ T6368] usb 1-1: Manufacturer: syz [ 612.483622][ T6368] usb 1-1: SerialNumber: syz [ 612.763487][T10989] veth0_macvtap: entered promiscuous mode [ 613.123646][ T6368] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 613.123714][ T6368] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 613.236651][T10989] veth1_macvtap: entered promiscuous mode [ 613.303270][T11507] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1983'. [ 614.111168][ T6368] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 614.112097][ T6368] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 614.113025][ T6368] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 614.170277][ T6368] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 614.211719][T10989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.302469][T10989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.370982][ T3331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.372107][ T3331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.372374][ T3331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.372643][ T3331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.604805][ T6368] usb 1-1: USB disconnect, device number 20 [ 616.047151][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.047174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.503099][T10460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.503123][T10460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.192811][T11561] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1995'. [ 617.756913][T11575] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1996'. [ 619.086534][ T5743] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 619.116301][ T5742] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 619.254593][ T5743] usb 1-1: Using ep0 maxpacket: 16 [ 619.270199][ T5742] usb 3-1: Using ep0 maxpacket: 16 [ 619.274005][ T5743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.274068][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.274099][ T5743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.274123][ T5743] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 619.274147][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.311835][ T5743] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.311890][ T5743] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.311945][ T5743] usb 1-1: Manufacturer: syz [ 619.373919][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.373991][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.374021][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 619.374044][ T5742] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 619.374070][ T5742] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.376933][ T5742] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.376966][ T5742] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.376987][ T5742] usb 3-1: Manufacturer: syz [ 619.488062][ T5743] usb 1-1: config 0 descriptor?? [ 619.489347][ T5742] usb 3-1: config 0 descriptor?? [ 621.028797][ T5743] rc_core: IR keymap rc-hauppauge not found [ 621.028822][ T5743] Registered IR keymap rc-empty [ 621.028991][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.051415][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.087565][ T5742] rc_core: IR keymap rc-hauppauge not found [ 621.087613][ T5742] Registered IR keymap rc-empty [ 621.088309][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.140050][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.155858][ T5743] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 621.189683][ T5743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input41 [ 621.257781][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.260407][ T5742] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 621.304836][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.331709][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.346856][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.361459][ T5742] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 621.404556][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.426621][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.449178][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.466507][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.486323][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.506747][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.529269][ T5743] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.635720][ T5743] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.635749][ T5743] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 621.707098][ T5743] usb 1-1: USB disconnect, device number 21 [ 621.713638][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.767554][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.788214][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.810079][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.829573][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.846420][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.867835][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.888112][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.930550][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 621.946684][ T5742] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 622.134013][ T5742] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 622.135252][ T5742] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 622.408980][ T5742] usb 3-1: USB disconnect, device number 35 [ 622.645299][T11620] fuse: fd is not a fuse device [ 622.798850][T11621] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2008'. [ 623.368868][T11639] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2014'. [ 624.717077][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.717164][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.495260][T11680] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2023'. [ 626.156311][ T5620] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 626.316362][ T5620] usb 1-1: Using ep0 maxpacket: 16 [ 626.320881][ T5620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.320940][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.320971][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.320994][ T5620] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.321029][ T5620] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.323058][ T5620] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.323090][ T5620] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.323112][ T5620] usb 1-1: Manufacturer: syz [ 627.272610][ T5620] usb 1-1: config 0 descriptor?? [ 627.666453][ T5620] rc_core: IR keymap rc-hauppauge not found [ 627.666478][ T5620] Registered IR keymap rc-empty [ 627.666638][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.698464][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.721142][ T5620] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 627.725573][ T5620] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input42 [ 627.785501][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.818386][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.841439][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.858477][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.876561][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.896493][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.920194][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 627.936717][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.177027][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.196355][ T5620] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 628.220414][ T5620] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 628.220445][ T5620] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 628.911733][ T5620] usb 1-1: USB disconnect, device number 22 [ 629.556292][ T5743] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 629.706392][ T5743] usb 5-1: Using ep0 maxpacket: 16 [ 629.710862][ T5743] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 629.710892][ T5743] usb 5-1: config 0 has no interface number 0 [ 629.710940][ T5743] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 629.710959][ T5743] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 629.716022][ T5743] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 629.716056][ T5743] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.719453][ T5743] usb 5-1: Product: syz [ 629.719499][ T5743] usb 5-1: Manufacturer: syz [ 629.719551][ T5743] usb 5-1: SerialNumber: syz [ 629.790296][ T5743] usb 5-1: config 0 descriptor?? [ 629.806578][T11712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 629.806891][T11712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 630.019684][T11712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 630.019830][T11712] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 631.141418][ T5743] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 631.141624][ T5743] asix 5-1:0.34: probe with driver asix failed with error -61 [ 631.226298][ T5620] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 631.376241][ T5620] usb 1-1: Using ep0 maxpacket: 32 [ 631.380719][ T5620] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 631.380751][ T5620] usb 1-1: config 0 has no interface number 0 [ 631.387560][ T5620] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 631.387678][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.387706][ T5620] usb 1-1: Product: syz [ 631.387721][ T5620] usb 1-1: Manufacturer: syz [ 631.387736][ T5620] usb 1-1: SerialNumber: syz [ 631.437299][ T5620] usb 1-1: config 0 descriptor?? [ 631.604753][T11737] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2042'. [ 631.917560][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 631.917593][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 632.390438][ T5729] usb 5-1: USB disconnect, device number 7 [ 633.124540][ T5620] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 633.443750][ T5620] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 635.588441][ T5728] usb 1-1: USB disconnect, device number 23 [ 638.831384][T11830] fuse: fd is not a fuse device [ 640.706760][ T5728] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 640.856276][ T5728] usb 3-1: Using ep0 maxpacket: 16 [ 640.859576][ T5728] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 640.859605][ T5728] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 640.859627][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.859642][ T5728] usb 3-1: config 0 has no interface number 0 [ 640.859689][ T5728] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 640.859707][ T5728] usb 3-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.863867][ T5728] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 640.863900][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.863915][ T5728] usb 3-1: Product: syz [ 640.863925][ T5728] usb 3-1: Manufacturer: syz [ 640.863937][ T5728] usb 3-1: SerialNumber: syz [ 640.967196][ T5728] usb 3-1: config 0 descriptor?? [ 641.033367][T11843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 641.044925][ T5728] asix 3-1:0.251: probe with driver asix failed with error -22 [ 641.634908][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 641.718495][ T5743] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 641.997980][ T5743] usb 2-1: Using ep0 maxpacket: 16 [ 642.023669][ T5743] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.023746][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.023783][ T5743] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.023809][ T5743] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 642.023837][ T5743] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.032188][ T5743] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 642.032324][ T5743] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 642.032397][ T5743] usb 2-1: Manufacturer: syz [ 642.139001][ T5743] usb 2-1: config 0 descriptor?? [ 642.479911][ T5743] rc_core: IR keymap rc-hauppauge not found [ 642.479929][ T5743] Registered IR keymap rc-empty [ 642.480049][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.506869][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.537856][ T5743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 642.546090][ T5743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input44 [ 642.658003][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.676827][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.698063][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.728347][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.757183][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.776321][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.805919][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.817846][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.836645][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.870836][ T5743] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 642.934135][ T5743] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 642.934158][ T5743] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 642.970469][ T5728] usb 3-1: USB disconnect, device number 36 [ 643.076314][ T5743] usb 2-1: USB disconnect, device number 33 [ 646.170893][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 646.996345][ T5728] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 647.146418][ T5728] usb 1-1: Using ep0 maxpacket: 16 [ 647.150420][ T5728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.150482][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.150512][ T5728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 647.150537][ T5728] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 647.150562][ T5728] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.152187][ T5728] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 647.152218][ T5728] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 647.152240][ T5728] usb 1-1: Manufacturer: syz [ 647.289448][ T5728] usb 1-1: config 0 descriptor?? [ 647.304047][T11924] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2107'. [ 647.586369][ T5728] rc_core: IR keymap rc-hauppauge not found [ 647.586392][ T5728] Registered IR keymap rc-empty [ 647.586547][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.619175][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.642415][ T5728] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 647.669537][ T5728] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input46 [ 647.697433][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.716671][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.736695][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.756481][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.776433][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.796329][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.948362][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.972116][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 647.986367][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 648.007073][ T5728] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 648.030044][ T5728] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 648.030065][ T5728] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 648.035864][ T5728] usb 1-1: USB disconnect, device number 24 [ 649.044697][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 650.067918][T11968] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2123'. [ 650.261891][T11970] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2124'. [ 651.766292][ T5620] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 651.943278][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 651.953851][ T5620] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.953912][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 651.953944][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 651.953987][ T5620] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 651.954018][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.955910][ T5620] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.955943][ T5620] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.956094][ T5620] usb 3-1: Manufacturer: syz [ 652.078590][ T5620] usb 3-1: config 0 descriptor?? [ 652.126196][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 652.606344][ T5620] rc_core: IR keymap rc-hauppauge not found [ 652.606368][ T5620] Registered IR keymap rc-empty [ 652.606523][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.639006][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.658510][ T5620] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 652.678854][ T5620] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 652.701629][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.717097][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.746873][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.766534][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.787369][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.806603][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.826465][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.846487][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.876523][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.907026][ T5620] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 652.948892][ T5620] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 652.948923][ T5620] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 652.983206][ T5620] usb 3-1: USB disconnect, device number 37 [ 653.631838][T12020] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2141'. [ 654.842862][T12039] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 654.962066][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2149'. [ 656.892189][T12069] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2159'. [ 657.216267][ T822] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 657.466269][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 657.469132][ T822] usb 5-1: config index 0 descriptor too short (expected 52, got 36) [ 657.469162][ T822] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 657.469184][ T822] usb 5-1: config 0 has no interface number 0 [ 657.469232][ T822] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 657.469257][ T822] usb 5-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 657.472965][ T822] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 657.472997][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.473019][ T822] usb 5-1: Product: syz [ 657.473035][ T822] usb 5-1: Manufacturer: syz [ 657.473051][ T822] usb 5-1: SerialNumber: syz [ 657.571321][ T822] usb 5-1: config 0 descriptor?? [ 657.572939][T12071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 657.590672][ T822] asix 5-1:0.251: probe with driver asix failed with error -22 [ 659.932037][T12106] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2172'. [ 660.043020][ T822] usb 5-1: USB disconnect, device number 8 [ 660.486026][T12110] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 662.789088][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 662.831467][T12147] bond0: entered allmulticast mode [ 662.831507][T12147] bond_slave_0: entered allmulticast mode [ 662.831599][T12147] bond_slave_1: entered allmulticast mode [ 662.831770][T12147] bond_slave_0: entered promiscuous mode [ 662.831828][T12147] bond_slave_1: entered promiscuous mode [ 662.831853][T12147] bond0: entered promiscuous mode [ 662.835349][T12147] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 662.880663][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 663.048025][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 663.155360][ T9] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 663.155391][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 663.155412][ T9] usb 2-1: config 0 has no interface number 0 [ 663.155534][ T9] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 663.155561][ T9] usb 2-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 663.209565][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 663.211166][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.211194][ T9] usb 2-1: Product: syz [ 663.211226][ T9] usb 2-1: Manufacturer: syz [ 663.211242][ T9] usb 2-1: SerialNumber: syz [ 663.263110][ T9] usb 2-1: config 0 descriptor?? [ 663.264123][T12145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 663.295227][ T9] asix 2-1:0.251: probe with driver asix failed with error -22 [ 663.830906][T12153] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2189'. [ 665.829489][ T5743] usb 2-1: USB disconnect, device number 34 [ 666.066395][ T7828] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 666.236582][ T7828] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 666.236615][ T7828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.236636][ T7828] usb 5-1: Product: syz [ 666.236650][ T7828] usb 5-1: Manufacturer: syz [ 666.236665][ T7828] usb 5-1: SerialNumber: syz [ 666.371790][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 666.698511][ T7828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 666.698647][ T7828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 667.308261][ T7828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 667.308326][ T7828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 667.309445][ T7828] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 667.379640][ T7828] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 668.074942][T12194] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2204'. [ 668.415842][ T10] usb 5-1: USB disconnect, device number 9 [ 668.757914][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 668.906241][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 668.908593][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 668.908622][ T9] usb 1-1: config 0 has no interface number 0 [ 668.914812][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 668.914844][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.914865][ T9] usb 1-1: Product: syz [ 668.914879][ T9] usb 1-1: Manufacturer: syz [ 668.914894][ T9] usb 1-1: SerialNumber: syz [ 668.979784][ T9] usb 1-1: config 0 descriptor?? [ 669.156785][T12210] loop8: detected capacity change from 0 to 7 [ 669.309752][T12210] Dev loop8: unable to read RDB block 7 [ 669.310379][T12210] loop8: unable to read partition table [ 669.394106][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 669.394138][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 669.439837][T12210] loop8: partition table beyond EOD, truncated [ 669.439892][T12210] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 669.648706][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 669.874112][T12214] ip6gretap0: entered promiscuous mode [ 669.883992][T12214] macvtap1: entered promiscuous mode [ 669.884278][T12214] macvtap1: entered allmulticast mode [ 669.884301][T12214] ip6gretap0: entered allmulticast mode [ 670.446193][T12224] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2216'. [ 670.665585][T12231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.259631][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 671.259852][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 671.309112][ T9] usb 1-1: USB disconnect, device number 25 [ 671.577727][T12244] binder: 12243:12244 ioctl c0306201 0 returned -14 [ 671.578072][T12244] binder: 12243:12244 ioctl c0306201 200000000640 returned -22 [ 672.326402][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 672.463068][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2227'. [ 672.476355][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 672.497623][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.497681][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 672.497712][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 672.497735][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 672.497760][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 672.523586][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 672.523672][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 672.523726][ T10] usb 3-1: Manufacturer: syz [ 672.602622][ T10] usb 3-1: config 0 descriptor?? [ 672.617519][T12258] ip6gretap0: entered promiscuous mode [ 672.624118][T12258] macvtap1: entered promiscuous mode [ 672.624458][T12258] macvtap1: entered allmulticast mode [ 672.624479][T12258] ip6gretap0: entered allmulticast mode [ 672.916374][ T10] rc_core: IR keymap rc-hauppauge not found [ 672.916398][ T10] Registered IR keymap rc-empty [ 672.916633][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 672.936515][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 672.958615][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 672.960632][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 672.980261][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49 [ 673.012609][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 673.018026][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.038635][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.056938][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.076506][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.097682][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.116440][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.136508][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.237433][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.258369][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.287102][ T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 673.341631][ T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 673.341660][ T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 673.380741][ T10] usb 3-1: USB disconnect, device number 38 [ 673.861530][T12280] binder: 12279:12280 ioctl c0306201 0 returned -14 [ 673.862977][T12280] binder: 12279:12280 ioctl c0306201 200000000640 returned -22 [ 674.907517][ T5729] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 675.099353][ T5729] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 675.099388][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.099411][ T5729] usb 5-1: Product: syz [ 675.099426][ T5729] usb 5-1: Manufacturer: syz [ 675.099442][ T5729] usb 5-1: SerialNumber: syz [ 675.115627][ T5729] usb 5-1: config 0 descriptor?? [ 675.340383][ T5729] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 675.953538][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2246'. [ 676.658937][ T5729] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 676.679570][ T5729] usb 5-1: USB disconnect, device number 10 [ 676.694104][ T5600] udevd[5600]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 677.430824][T12338] loop8: detected capacity change from 0 to 7 [ 677.434290][T12338] Dev loop8: unable to read RDB block 7 [ 677.434333][T12338] loop8: unable to read partition table [ 677.434571][T12338] loop8: partition table beyond EOD, truncated [ 677.434606][T12338] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 678.250707][T12351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2262'. [ 681.191641][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2274'. [ 681.608099][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 681.624904][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 681.665362][T12394] bond0: left allmulticast mode [ 681.665388][T12394] bond_slave_0: left allmulticast mode [ 681.665413][T12394] bond_slave_1: left allmulticast mode [ 681.696843][T12394] bond0: left promiscuous mode [ 681.840098][ T5729] bond_slave_0: left promiscuous mode [ 681.840153][ T5729] bond_slave_1: left promiscuous mode [ 682.774000][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'. [ 683.518727][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 683.523796][T12435] bond0: entered allmulticast mode [ 683.523864][T12435] bond_slave_0: entered allmulticast mode [ 683.523910][T12435] bond_slave_1: entered allmulticast mode [ 683.524046][T12435] bond_slave_0: entered promiscuous mode [ 683.524084][T12435] bond_slave_1: entered promiscuous mode [ 683.524100][T12435] bond0: entered promiscuous mode [ 683.526080][T12435] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 683.572148][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 683.627197][T12435] bond0: left allmulticast mode [ 683.627223][T12435] bond_slave_0: left allmulticast mode [ 683.627250][T12435] bond_slave_1: left allmulticast mode [ 683.627465][T12435] bond0: left promiscuous mode [ 683.693990][ T5729] bond_slave_0: left promiscuous mode [ 683.694054][ T5729] bond_slave_1: left promiscuous mode [ 686.149662][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.149750][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.340434][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2302'. [ 690.667205][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 692.936315][ T5729] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 693.086278][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 693.090105][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.090163][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 693.090192][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 693.090215][ T5729] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 693.090240][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.091906][ T5729] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 693.091935][ T5729] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 693.091956][ T5729] usb 3-1: Manufacturer: syz [ 693.185397][ T5729] usb 3-1: config 0 descriptor?? [ 693.186331][ T6368] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 693.347868][ T6368] usb 5-1: Using ep0 maxpacket: 16 [ 693.354428][ T6368] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.354488][ T6368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 693.354526][ T6368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 693.354549][ T6368] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 693.354575][ T6368] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 693.369240][ T6368] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 693.369330][ T6368] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 693.369354][ T6368] usb 5-1: Manufacturer: syz [ 693.437416][ T6368] usb 5-1: config 0 descriptor?? [ 693.536304][ T5729] rc_core: IR keymap rc-hauppauge not found [ 693.536326][ T5729] Registered IR keymap rc-empty [ 693.536481][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.556858][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.579458][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 693.583309][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50 [ 693.614624][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.626315][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.646480][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.666384][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.686326][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.706757][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.726273][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.746606][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.766834][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.787545][ T5729] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 693.813877][ T5729] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.813906][ T5729] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 693.825981][ T6368] rc_core: IR keymap rc-hauppauge not found [ 693.826029][ T6368] Registered IR keymap rc-empty [ 693.826429][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 693.853581][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 693.874995][ T5729] usb 3-1: USB disconnect, device number 39 [ 693.880270][ T6368] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 693.910819][ T6368] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input51 [ 693.933464][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 693.946345][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 693.978291][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 693.998414][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.026368][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.057437][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.076394][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.096266][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.120266][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.136736][ T6368] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 694.209382][ T6368] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 694.209410][ T6368] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 694.309959][ T6368] usb 5-1: USB disconnect, device number 11 [ 694.664372][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 694.734620][T12543] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 695.079625][T12547] ------------[ cut here ]------------ [ 695.079640][T12547] debug_locks && !(!get_current()->pi_blocked_on) [ 695.079657][T12547] WARNING: kernel/locking/spinlock_rt.c:40 at rt_spin_lock+0x31c/0x400, CPU#0: syz.3.2331/12547 [ 695.079711][T12547] Modules linked in: [ 695.079744][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.3.2331 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 695.079776][T12547] Tainted: [L]=SOFTLOCKUP [ 695.079784][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.079807][T12547] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 695.079832][T12547] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 1a c1 13 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 fe c0 13 f6 [ 695.079853][T12547] RSP: 0018:ffffc90005c0f5a0 EFLAGS: 00010282 [ 695.079872][T12547] RAX: 1ffff11005a8fcef RBX: 1ffff92000b81eb8 RCX: 0000000000000046 [ 695.079889][T12547] RDX: 0000000000000000 RSI: ffffffff8d8651fc RDI: ffffffff8ba752e0 [ 695.079904][T12547] RBP: ffffc90005c0f660 R08: ffffffff8220fc74 R09: ffff88801a02a758 [ 695.079921][T12547] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: ffff88802d47e778 [ 695.079937][T12547] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc90005c0f5e0 [ 695.079953][T12547] FS: 00007fd290a5e6c0(0000) GS:ffff888126173000(0000) knlGS:0000000000000000 [ 695.079972][T12547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.079987][T12547] CR2: 0000000000000000 CR3: 000000005bfc2000 CR4: 00000000003526f0 [ 695.080006][T12547] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 695.080021][T12547] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 695.080036][T12547] Call Trace: [ 695.080045][T12547] [ 695.080060][T12547] ? __pfx_rt_spin_lock+0x10/0x10 [ 695.080085][T12547] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 695.080116][T12547] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.080147][T12547] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.080192][T12547] ? fill_pool+0x156/0x580 [ 695.080215][T12547] get_from_partial_node+0x54/0x480 [ 695.080271][T12547] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 695.080306][T12547] ? fill_pool+0x156/0x580 [ 695.080326][T12547] ___slab_alloc+0xb2/0x670 [ 695.080372][T12547] kmem_cache_alloc_noprof+0xea/0x680 [ 695.080398][T12547] ? fill_pool+0x156/0x580 [ 695.080423][T12547] fill_pool+0x156/0x580 [ 695.080451][T12547] ? __pfx_fill_pool+0x10/0x10 [ 695.080479][T12547] ? debug_objects_fill_pool+0x6f/0xd0 [ 695.080512][T12547] ? debug_objects_fill_pool+0x6f/0xd0 [ 695.080550][T12547] debug_objects_fill_pool+0x97/0xd0 [ 695.080585][T12547] debug_object_assert_init+0x34/0x340 [ 695.080626][T12547] hrtimer_start_range_ns+0x3f/0xef0 [ 695.080660][T12547] ? preempt_schedule_thunk+0x16/0x30 [ 695.080696][T12547] ? preempt_schedule_common+0x82/0xd0 [ 695.080735][T12547] futex_lock_pi+0x8df/0xb10 [ 695.080801][T12547] ? __pfx_futex_lock_pi+0x10/0x10 [ 695.080834][T12547] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 695.080859][T12547] ? __lock_acquire+0x6b5/0x2cf0 [ 695.080912][T12547] ? __pfx_futex_wake_mark+0x10/0x10 [ 695.080986][T12547] do_futex+0x292/0x420 [ 695.081028][T12547] ? __pfx_do_futex+0x10/0x10 [ 695.081070][T12547] __se_sys_futex+0x3a8/0x450 [ 695.081112][T12547] ? __pfx___se_sys_futex+0x10/0x10 [ 695.081147][T12547] ? __task_pid_nr_ns+0x28/0x470 [ 695.081197][T12547] ? __x64_sys_futex+0x21/0xf0 [ 695.081222][T12547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.081241][T12547] do_syscall_64+0x15f/0xf80 [ 695.081262][T12547] ? trace_irq_disable+0x3b/0x140 [ 695.081282][T12547] ? clear_bhb_loop+0x40/0x90 [ 695.081302][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.081318][T12547] RIP: 0033:0x7fd29280ce59 [ 695.081340][T12547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.081354][T12547] RSP: 002b:00007fd290a5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 695.081371][T12547] RAX: ffffffffffffffda RBX: 00007fd292a85fa0 RCX: 00007fd29280ce59 [ 695.081383][T12547] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 695.081394][T12547] RBP: 00007fd2928a2d6f R08: 0000000000000000 R09: 0000000000000001 [ 695.081404][T12547] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 695.081416][T12547] R13: 00007fd292a86038 R14: 00007fd292a85fa0 R15: 00007fff446ac3f8 [ 695.081445][T12547] [ 695.081453][T12547] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 695.081467][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.3.2331 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 695.081489][T12547] Tainted: [L]=SOFTLOCKUP [ 695.081495][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 695.081505][T12547] Call Trace: [ 695.081510][T12547] [ 695.081517][T12547] vpanic+0x56c/0xa60 [ 695.081538][T12547] ? __pfx__printk+0x10/0x10 [ 695.081561][T12547] ? __pfx_vpanic+0x10/0x10 [ 695.081580][T12547] ? is_bpf_text_address+0x292/0x2b0 [ 695.081603][T12547] ? is_bpf_text_address+0x26/0x2b0 [ 695.081631][T12547] panic+0xc5/0xd0 [ 695.081650][T12547] ? __pfx_panic+0x10/0x10 [ 695.081683][T12547] __warn+0x315/0x4c0 [ 695.081701][T12547] ? rt_spin_lock+0x31c/0x400 [ 695.081718][T12547] ? rt_spin_lock+0x31c/0x400 [ 695.081735][T12547] __report_bug+0x29a/0x540 [ 695.081760][T12547] ? rt_spin_lock+0x31c/0x400 [ 695.081776][T12547] ? __pfx___report_bug+0x10/0x10 [ 695.081797][T12547] ? __lock_acquire+0x6b5/0x2cf0 [ 695.081821][T12547] ? __lock_acquire+0x6b5/0x2cf0 [ 695.081847][T12547] ? __lock_acquire+0x6b5/0x2cf0 [ 695.081870][T12547] ? rt_spin_lock+0x31c/0x400 [ 695.081885][T12547] report_bug+0x16a/0x220 [ 695.081906][T12547] ? rt_spin_lock+0x31c/0x400 [ 695.081920][T12547] ? rt_spin_lock+0x31e/0x400 [ 695.081935][T12547] handle_bug+0x9c/0x200 [ 695.081959][T12547] exc_invalid_op+0x1a/0x50 [ 695.081984][T12547] asm_exc_invalid_op+0x1a/0x20 [ 695.081998][T12547] RIP: 0010:rt_spin_lock+0x31c/0x400 [ 695.082015][T12547] Code: 48 3b 44 24 60 0f 85 98 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d0 70 01 00 cc e8 1a c1 13 f6 e9 ac fe ff ff 90 <0f> 0b 90 e9 f6 fd ff ff 90 0f 0b 90 e9 3f ff ff ff e8 fe c0 13 f6 [ 695.082028][T12547] RSP: 0018:ffffc90005c0f5a0 EFLAGS: 00010282 [ 695.082042][T12547] RAX: 1ffff11005a8fcef RBX: 1ffff92000b81eb8 RCX: 0000000000000046 [ 695.082054][T12547] RDX: 0000000000000000 RSI: ffffffff8d8651fc RDI: ffffffff8ba752e0 [ 695.082065][T12547] RBP: ffffc90005c0f660 R08: ffffffff8220fc74 R09: ffff88801a02a758 [ 695.082077][T12547] R10: dffffc0000000000 R11: fffffbfff1f11fbf R12: ffff88802d47e778 [ 695.082089][T12547] R13: dffffc0000000000 R14: ffff88801a02a700 R15: ffffc90005c0f5e0 [ 695.082107][T12547] ? get_from_partial_node+0x54/0x480 [ 695.082140][T12547] ? __pfx_rt_spin_lock+0x10/0x10 [ 695.082221][T12547] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 695.082243][T12547] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.082265][T12547] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 695.082289][T12547] ? fill_pool+0x156/0x580 [ 695.082303][T12547] get_from_partial_node+0x54/0x480 [ 695.082329][T12547] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 695.082353][T12547] ? fill_pool+0x156/0x580 [ 695.082367][T12547] ___slab_alloc+0xb2/0x670 [ 695.082398][T12547] kmem_cache_alloc_noprof+0xea/0x680 [ 695.082418][T12547] ? fill_pool+0x156/0x580 [ 695.082435][T12547] fill_pool+0x156/0x580 [ 695.082454][T12547] ? __pfx_fill_pool+0x10/0x10 [ 695.082474][T12547] ? debug_objects_fill_pool+0x6f/0xd0 [ 695.082498][T12547] ? debug_objects_fill_pool+0x6f/0xd0 [ 695.082525][T12547] debug_objects_fill_pool+0x97/0xd0 [ 695.082550][T12547] debug_object_assert_init+0x34/0x340 [ 695.082580][T12547] hrtimer_start_range_ns+0x3f/0xef0 [ 695.082605][T12547] ? preempt_schedule_thunk+0x16/0x30 [ 695.082630][T12547] ? preempt_schedule_common+0x82/0xd0 [ 695.082657][T12547] futex_lock_pi+0x8df/0xb10 [ 695.082683][T12547] ? __pfx_futex_lock_pi+0x10/0x10 [ 695.082704][T12547] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 695.082720][T12547] ? __lock_acquire+0x6b5/0x2cf0 [ 695.082758][T12547] ? __pfx_futex_wake_mark+0x10/0x10 [ 695.082793][T12547] do_futex+0x292/0x420 [ 695.082821][T12547] ? __pfx_do_futex+0x10/0x10 [ 695.082852][T12547] __se_sys_futex+0x3a8/0x450 [ 695.082881][T12547] ? __pfx___se_sys_futex+0x10/0x10 [ 695.082906][T12547] ? __task_pid_nr_ns+0x28/0x470 [ 695.082933][T12547] ? __x64_sys_futex+0x21/0xf0 [ 695.082957][T12547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.082974][T12547] do_syscall_64+0x15f/0xf80 [ 695.082995][T12547] ? trace_irq_disable+0x3b/0x140 [ 695.083014][T12547] ? clear_bhb_loop+0x40/0x90 [ 695.083033][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.083049][T12547] RIP: 0033:0x7fd29280ce59 [ 695.083063][T12547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.083076][T12547] RSP: 002b:00007fd290a5e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 695.083091][T12547] RAX: ffffffffffffffda RBX: 00007fd292a85fa0 RCX: 00007fd29280ce59 [ 695.083103][T12547] RDX: 00000000000000f2 RSI: 0000000000000006 RDI: 0000200000000200 [ 695.083113][T12547] RBP: 00007fd2928a2d6f R08: 0000000000000000 R09: 0000000000000001 [ 695.083124][T12547] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 695.083134][T12547] R13: 00007fd292a86038 R14: 00007fd292a85fa0 R15: 00007fff446ac3f8 [ 695.083163][T12547] [ 695.083895][T12547] Kernel Offset: disabled