last executing test programs: 31m29.970552197s ago: executing program 4 (id=96): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d", 0x96}, {0x0}], 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) getresgid(&(0x7f0000000380), 0x0, &(0x7f0000000400)) 31m25.025644483s ago: executing program 4 (id=101): eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000900), 0x0, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r6, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x4a, 0x0, 0xa, 0x32e}, 0x28) 31m23.264206703s ago: executing program 4 (id=104): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020800}) 31m19.208594978s ago: executing program 4 (id=108): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, 0x0, 0x24004000) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(r0, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) 31m14.702587369s ago: executing program 4 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800), 0x0, 0x40000000) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000ac0)=""/102392, 0x18ff8) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 31m12.903851482s ago: executing program 4 (id=118): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 30m56.890596537s ago: executing program 32 (id=118): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17m26.534714902s ago: executing program 0 (id=1733): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc00"/32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 17m23.202521181s ago: executing program 0 (id=1739): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(r0, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x7ff, 0xfff, 0x1ed4, 0x0, 0x7, 0x1, 0xe, 0x3fd}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 17m18.552989419s ago: executing program 0 (id=1746): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='memory.stat\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000002900)=[{&(0x7f0000000100)="ec53", 0x2}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1002, 0x200}}}]}, 0x38}}, 0x0) r3 = socket(0x1e, 0x5, 0x0) listen(r3, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0xffffffff}}, 0x10, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000003c0)={0xc, &(0x7f00000000c0)={0x20, 0x24, 0x1d, {0x1d, 0x23, "5cac5a0f375a25b1af7c2df24feccff64d725997d12edfb8f221af"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="ee023f0000"]}, &(0x7f0000000280)={0x24, &(0x7f00000004c0)={0x20, 0xb, 0xcb, "88210f34132959629f20cef8896f217f67ea4f1c8be57b8d4ec4f9b408fad1cc70300d1cee87fcde7c89272dbe6c13d4e098b6d8168683463b4661d3c708a426da858ad647cf750ba735a5489a1d4d08440d741e6a9cb619358c24e30a6061a49d83a91b975f4a97d3721352d799e3a97f1133d02ece9a114ea076b3462e3a1ec849c065a2e331fa21529100f4187ff091fcad20f3168fb5830b2ddcb148790ec6426ac5b362b82e42a2334ff7d6a046b42b794eee595f85b43225378f914d3fc1d2d4220beda541eb0cb6"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000700)=ANY=[], &(0x7f0000000340)={0x20, 0x82, 0x3, '\x00\x00\x00'}, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES8=r3], &(0x7f00000007c0)={0x20, 0x84, 0x4, "603139d0"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "3bae1e"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xc8c6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) 17m13.937487952s ago: executing program 0 (id=1758): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 17m12.685193791s ago: executing program 0 (id=1764): semtimedop(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x8, 0x1) semop(0x0, &(0x7f0000000140)=[{}, {0x0, 0x6}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) 17m10.324404288s ago: executing program 0 (id=1766): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x410001, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfc, "244cb303"}, 0x0, 0x1, {0x0}}) 16m54.622288517s ago: executing program 33 (id=1766): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x410001, 0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000100)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfc, "244cb303"}, 0x0, 0x1, {0x0}}) 24.908409728s ago: executing program 5 (id=3465): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r0, @ANYBLOB="0c009900010000005100000008009f0006c8c365b5"], 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa"]) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 24.90738151s ago: executing program 6 (id=3466): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf653", 0x1f, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e5925b138fec99f91f19d8618037fe2842d248c8d44f425e54da4a668059f5124222cb4955f073d318b2f0dcecec611448d4ec0fd6b9bd0eac6bea1", 0xee, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992e", 0x3d}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.350280938s ago: executing program 5 (id=3472): socket$netlink(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19.026766135s ago: executing program 6 (id=3475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x18}}, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xc}) socket$inet(0x2, 0x2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 17.158827342s ago: executing program 5 (id=3476): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x2, 0xfffd, 0x0, 0xfffffff8, 0x0}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x88}) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom1\x00', 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x60}, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) pselect6(0x40, &(0x7f0000000380)={0x0, 0xe1, 0x0, 0x10, 0x0, 0x3, 0x0, 0x200000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x20, 0x0, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7800000010000104000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000340012800b00010062726964676500002400028008001b0081000000050025000000000008001a"], 0x78}}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@mpls_getroute={0xc4, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x20, 0x80, 0x7, 0xfd, 0x1, 0x0, 0x0, 0x83347f8bb574bbe6}, [@RTA_DST={0x8, 0x1, {0x9}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xd}, @RTA_NEWDST={0x84, 0x13, [{0x401, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0xd9a1}, {}, {0xd, 0x0, 0x1}, {0xffff9}, {0x3, 0x0, 0x1}, {0xe1}, {0x3}, {0xf, 0x0, 0x1}, {0xb3}, {0x1, 0x0, 0x1}, {0x3f0}, {0x5, 0x0, 0x1}, {0x7094}, {0x8, 0x0, 0x1}, {0x4}, {0xe082}, {0x5}, {0xe0000, 0x0, 0x1}, {0x3}, {0x1, 0x0, 0x1}, {0x8}, {0x4, 0x0, 0x1}, {0xffffd, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xfc575}, {0x101, 0x0, 0x1}, {0x80}, {0x3ff, 0x0, 0x1}, {0x5}]}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0xfffa, 0x10, 0x7f}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x0) lseek(r0, 0x1000000, 0x0) 15.950852498s ago: executing program 2 (id=3477): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="f1d872e8ef314a1586ab6a85c82a45cd5651bf040e7212f319e9bca4143629a3831104e01956005f772359d4f64cf101d192254298bac77f7287059c86dc4e07836994673de74ce826b7d761a341dbf0a2076aae1563c47012e826a2b694aaef4bf8e7c75e36d816376ced19cf2b47537ae206bfc276737fdea9d23a88b7cb2060ca866c792706e0c861f40c78ff7d8cd6d786938cffd1402d781271507efbfe", 0xa0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) 15.847822949s ago: executing program 6 (id=3479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r7, &(0x7f0000000180)={@val={0x0, 0x886c}, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, '\x00\x00'}}}}}}, 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sched_setscheduler(r3, 0x0, &(0x7f0000000540)=0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x10004000) socket$nl_generic(0x10, 0x3, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010428bd7000fedbdf25000000", @ANYRES32=0x0, @ANYBLOB="1b2ef4ff00a001001c001006020008000300ffffffffc7c9ce726e3173c7207c793f131b0f3d0d4ea354af805698aa18"], 0x3c}}, 0x20004000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x40}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 14.479516137s ago: executing program 1 (id=3480): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="f1d872e8ef314a1586ab6a85c82a45cd5651bf040e7212f319e9bca4143629a3831104e01956005f772359d4f64cf101d192254298bac77f7287059c86dc4e07836994673de74ce826b7d761a341dbf0a2076aae1563c47012e826a2b694aaef4bf8e7c75e36d816376ced19cf2b47537ae206bfc276737fdea9d23a88b7cb2060ca866c792706e0c861f40c78ff7d8cd6d786938cffd1402d781271507efbfe", 0xa0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x100000, 0x0, 0x0, 0x0, 0x3}) 14.477414315s ago: executing program 6 (id=3481): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = open_tree(r0, &(0x7f0000000300)='./cgroup\x00', 0x89801) r6 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) move_mount(r5, 0x0, r6, 0x0, 0x46) 12.363077003s ago: executing program 6 (id=3482): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12.200180701s ago: executing program 2 (id=3483): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002980)=@delchain={0xb8, 0x65, 0x2, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xa}, {0xffe0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x68}, @TCA_U32_POLICE={0x58, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0xfffffffe, 0x6, 0x1, {0xf6, 0x1, 0xc, 0x8fc, 0xc, 0x5}, {0x4, 0x1, 0x8, 0x9, 0x8, 0x7fff}, 0x8d4, 0x8, 0x8}}]}, @TCA_U32_POLICE={0x18, 0x6, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x200000c0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) mremap(&(0x7f0000666000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7003f00) 12.152489642s ago: executing program 3 (id=3484): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 11.863776887s ago: executing program 5 (id=3485): ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x8890) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 9.130151864s ago: executing program 3 (id=3486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) 9.030043785s ago: executing program 1 (id=3487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 8.851967178s ago: executing program 2 (id=3488): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 8.343094869s ago: executing program 1 (id=3489): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = getpgrp(0x0) syz_emit_ethernet(0xb5, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x7f, 0x0, 0x0, @private2, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d764"}}}}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) 7.127181867s ago: executing program 3 (id=3490): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40840) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/117, 0x75}], 0x1}}], 0x1, 0x40002021, 0x0) 7.121151008s ago: executing program 2 (id=3491): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$UHID_INPUT(r5, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 5.278304889s ago: executing program 3 (id=3492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/3, 0x3}, {&(0x7f00000005c0)=""/117, 0x75}], 0x2}, 0x40012152) 5.275734607s ago: executing program 5 (id=3493): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7ff, 0x2003) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpgrp(r0) close_range(r3, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4802, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000042c0)={0x4, @vbi={0xfa, 0x0, 0xffff, 0x32315258, [0x81, 0x81], [0x0, 0x1], 0x13a}}) 5.130360767s ago: executing program 2 (id=3494): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x1f, 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) close(r0) 4.943525203s ago: executing program 1 (id=3495): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 4.795510165s ago: executing program 3 (id=3496): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x181100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x236af4, 0x3f}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7ff, 0x2003) syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpgrp(r0) close_range(r3, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4802, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000042c0)={0x4, @vbi={0xfa, 0x0, 0xffff, 0x32315258, [0x81, 0x81], [0x0, 0x1], 0x13a}}) 2.841024135s ago: executing program 1 (id=3497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x18}}, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xc}) socket$inet(0x2, 0x2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 2.500344621s ago: executing program 6 (id=3498): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200000c0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c80, 0x7003f00) 1.627499834s ago: executing program 3 (id=3499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 1.394032947s ago: executing program 2 (id=3500): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x80) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(r5, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) 284.305101ms ago: executing program 1 (id=3501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x18}}, 0x80) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0xc}) socket$inet(0x2, 0x2, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@broadcast, @link_local, @val={@val={0x88a8, 0x4, 0x0, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @tcp={0xa, 0x6, "eba828", 0x14, 0x6, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x0, 0x0, 0x7}}}}}}}, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r5, 0x1) 0s ago: executing program 5 (id=3502): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsmount(r1, 0x0, 0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4005, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) kernel console output (not intermixed with test programs): z [ 1415.324048][ T31] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 1415.350830][ T31] usb 4-1: Detected FT4233HP [ 1415.735878][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1415.785728][ T31] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1415.805590][ T31] usb 4-1: USB disconnect, device number 52 [ 1416.048265][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1416.060201][ T31] ftdi_sio 4-1:5.0: device disconnected [ 1417.416721][T14306] fuse: Bad value for 'fd' [ 1418.989702][T12016] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1420.069710][T14311] Bluetooth: hci0: command 0x0406 tx timeout [ 1420.099876][T12016] usb 6-1: Using ep0 maxpacket: 16 [ 1420.107115][T12016] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.107169][T12016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1420.107197][T12016] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1420.107218][T12016] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1420.107238][T12016] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1420.194757][T12016] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1420.194789][T12016] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1420.194810][T12016] usb 6-1: Manufacturer: syz [ 1420.268084][T12016] usb 6-1: config 0 descriptor?? [ 1421.649292][T12016] rc_core: IR keymap rc-hauppauge not found [ 1421.649312][T12016] Registered IR keymap rc-empty [ 1421.649474][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.677265][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.690408][T12016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1421.696756][T12016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 1421.738348][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.750189][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.769369][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.789264][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.809299][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.840018][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.869549][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.890022][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.910875][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.929260][T12016] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1421.954909][T12016] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1421.954931][T12016] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1421.991484][T12016] usb 6-1: USB disconnect, device number 27 [ 1427.139972][ T36] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1427.399922][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 1427.401549][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.401581][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1427.401598][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1427.401612][ T36] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1427.401626][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1427.404314][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1427.404332][ T36] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1427.404344][ T36] usb 3-1: Manufacturer: syz [ 1427.422276][ T36] usb 3-1: config 0 descriptor?? [ 1427.799199][ T36] rc_core: IR keymap rc-hauppauge not found [ 1427.799218][ T36] Registered IR keymap rc-empty [ 1427.799349][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.819550][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.840634][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1427.870549][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53 [ 1427.906762][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.920996][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.940700][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.959452][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1427.992532][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.992603][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.241559][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.259223][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.279903][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.302045][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.351137][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.375829][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1428.705868][ T36] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1428.706156][ T36] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1429.042271][ T36] usb 3-1: USB disconnect, device number 68 [ 1429.750759][T14412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2574'. [ 1432.769228][T10996] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1432.921670][T10996] usb 6-1: Using ep0 maxpacket: 32 [ 1432.923975][T10996] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1432.923998][T10996] usb 6-1: config 0 has no interface number 0 [ 1432.924038][T10996] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1432.926444][T10996] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1432.926472][T10996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.926491][T10996] usb 6-1: Product: syz [ 1432.926505][T10996] usb 6-1: Manufacturer: syz [ 1432.926519][T10996] usb 6-1: SerialNumber: syz [ 1433.086078][T10996] usb 6-1: config 0 descriptor?? [ 1433.105419][T10996] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1433.105471][T10996] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1433.479432][T10996] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1433.479854][T10996] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 1434.410876][T10996] usb 6-1: USB disconnect, device number 28 [ 1436.119579][ T5611] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1436.270882][ T5611] usb 7-1: Using ep0 maxpacket: 16 [ 1436.272869][ T5611] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.272915][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1436.272942][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1436.272963][ T5611] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1436.272984][ T5611] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1436.274605][ T5611] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1436.274632][ T5611] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1436.274653][ T5611] usb 7-1: Manufacturer: syz [ 1436.424480][ T5611] usb 7-1: config 0 descriptor?? [ 1437.805243][ T5611] rc_core: IR keymap rc-hauppauge not found [ 1437.805264][ T5611] Registered IR keymap rc-empty [ 1437.805400][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.819202][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.848351][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1437.870770][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 1437.893579][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.909660][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.929318][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.949258][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.969268][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1437.989273][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.009260][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.029308][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.049242][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.069283][ T5611] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.101915][ T5611] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1438.102003][ T5611] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1438.151808][ T5611] usb 7-1: USB disconnect, device number 36 [ 1439.431831][T11870] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1442.860545][T14486] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1442.861733][T14486] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1457.019892][T12016] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1457.195539][T12016] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1457.195584][T12016] usb 7-1: config 0 has no interface number 0 [ 1457.215427][T12016] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1457.215454][T12016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.215473][T12016] usb 7-1: Product: syz [ 1457.215486][T12016] usb 7-1: Manufacturer: syz [ 1457.215499][T12016] usb 7-1: SerialNumber: syz [ 1457.274039][T12016] usb 7-1: config 0 descriptor?? [ 1458.994397][T12016] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1459.590534][T12016] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1459.739318][T12016] usb 3-1: Using ep0 maxpacket: 32 [ 1459.757537][T12016] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1459.757564][T12016] usb 3-1: config 0 has no interface number 0 [ 1459.757607][T12016] usb 3-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1459.786598][T12016] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1459.786626][T12016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.786645][T12016] usb 3-1: Product: syz [ 1459.786659][T12016] usb 3-1: Manufacturer: syz [ 1459.786672][T12016] usb 3-1: SerialNumber: syz [ 1459.857772][T12016] usb 3-1: config 0 descriptor?? [ 1459.883163][T12016] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1459.883239][T12016] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1460.080710][T12016] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1460.081384][T12016] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 1460.133175][T12016] usb 3-1: USB disconnect, device number 69 [ 1462.915588][ T5882] usb 7-1: USB disconnect, device number 37 [ 1463.239196][T10996] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1463.409948][T10996] usb 3-1: Using ep0 maxpacket: 16 [ 1463.414520][T10996] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.414566][T10996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.414591][T10996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1463.414611][T10996] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1463.414632][T10996] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.416251][T10996] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1463.416276][T10996] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1463.416294][T10996] usb 3-1: Manufacturer: syz [ 1465.422529][T10996] usb 3-1: config 0 descriptor?? [ 1465.919190][T10996] rc_core: IR keymap rc-hauppauge not found [ 1465.919208][T10996] Registered IR keymap rc-empty [ 1465.919344][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1465.939313][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1465.965092][T10996] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1465.985447][T10996] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55 [ 1466.009409][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1466.043150][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1466.059583][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1466.081107][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.605252][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.681557][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.708366][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.735827][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.749312][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.769210][T10996] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1467.799049][T10996] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1467.804272][T10996] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1467.897658][T10996] usb 3-1: USB disconnect, device number 70 [ 1471.745503][T10996] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1472.715918][T10996] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.715946][T10996] usb 4-1: config 0 has no interface number 0 [ 1472.740767][T10996] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1472.740794][T10996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.740812][T10996] usb 4-1: Product: syz [ 1472.740824][T10996] usb 4-1: Manufacturer: syz [ 1472.740836][T10996] usb 4-1: SerialNumber: syz [ 1472.809236][T10996] usb 4-1: config 0 descriptor?? [ 1474.449343][T10996] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1474.963251][ T5882] usb 4-1: USB disconnect, device number 53 [ 1480.397277][T11870] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1482.769652][ T5611] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1482.945087][ T5611] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1482.945328][ T5611] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1482.945589][ T5611] usb 4-1: config 0 has no interface number 0 [ 1483.015059][ T5611] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1483.015390][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.015592][ T5611] usb 4-1: Product: syz [ 1483.015721][ T5611] usb 4-1: Manufacturer: syz [ 1483.015911][ T5611] usb 4-1: SerialNumber: syz [ 1483.539260][ T5611] usb 4-1: config 0 descriptor?? [ 1483.681706][ T5611] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 1483.949176][ T1011] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1484.318636][ T1011] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1484.318673][ T1011] usb 7-1: config 0 has no interface number 0 [ 1484.335625][ T1011] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1484.335652][ T1011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.335669][ T1011] usb 7-1: Product: syz [ 1484.335701][ T1011] usb 7-1: Manufacturer: syz [ 1484.335714][ T1011] usb 7-1: SerialNumber: syz [ 1485.202642][ T1011] usb 7-1: config 0 descriptor?? [ 1485.426581][ T1011] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1485.448308][ T1011] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1485.463141][ T1011] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1485.463196][ T1011] usb 7-1: media controller created [ 1486.685664][ T31] usb 4-1: USB disconnect, device number 54 [ 1486.703982][ T1011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.913789][ T1011] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1489.926496][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.926563][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.178261][ T5882] usb 7-1: USB disconnect, device number 38 [ 1499.084100][T14785] syz.1.2677 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1501.629159][ T1011] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1502.559181][ T1011] usb 7-1: Using ep0 maxpacket: 32 [ 1502.561415][ T1011] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1502.561442][ T1011] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.561463][ T1011] usb 7-1: config 0 has no interface number 0 [ 1502.561508][ T1011] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1502.564238][ T1011] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1502.564262][ T1011] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.564280][ T1011] usb 7-1: Product: syz [ 1502.564292][ T1011] usb 7-1: Manufacturer: syz [ 1502.564305][ T1011] usb 7-1: SerialNumber: syz [ 1502.570793][ T1011] usb 7-1: config 0 descriptor?? [ 1502.608999][ T1011] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1502.610874][ T1011] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1502.775995][ T1011] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1502.776472][ T1011] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 1502.987660][ T5611] usb 7-1: USB disconnect, device number 39 [ 1504.830390][T12016] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1505.759155][T12016] usb 4-1: Using ep0 maxpacket: 16 [ 1505.761568][T12016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.761622][T12016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1505.761654][T12016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1505.761677][T12016] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1505.761702][T12016] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1505.763211][T12016] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1505.763236][T12016] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1505.763254][T12016] usb 4-1: Manufacturer: syz [ 1505.899175][T12016] usb 4-1: config 0 descriptor?? [ 1507.499145][T12016] rc_core: IR keymap rc-hauppauge not found [ 1507.499164][T12016] Registered IR keymap rc-empty [ 1507.499305][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1507.527264][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1507.550760][T12016] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1507.760449][T12016] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56 [ 1507.778638][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1507.789393][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.705582][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.891959][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.919796][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.939585][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.959610][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1508.991077][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1509.021952][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1509.040525][T12016] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1509.079617][T12016] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1509.079640][T12016] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1509.152482][T12016] usb 4-1: USB disconnect, device number 55 [ 1511.199152][ T5882] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1511.831673][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 1512.313112][ T5882] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1512.313141][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.313160][ T5882] usb 4-1: config 0 has no interface number 0 [ 1512.313201][ T5882] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1512.369527][ T5882] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1512.369556][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.369575][ T5882] usb 4-1: Product: syz [ 1512.369589][ T5882] usb 4-1: Manufacturer: syz [ 1512.369603][ T5882] usb 4-1: SerialNumber: syz [ 1512.584892][ T5882] usb 4-1: config 0 descriptor?? [ 1512.604634][ T5882] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1512.604726][ T5882] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1512.798802][ T5882] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1512.809526][ T5882] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1512.841411][ T5882] usb 4-1: USB disconnect, device number 56 [ 1517.359613][ T5611] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1517.958404][ T5611] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1517.958680][ T5611] usb 3-1: config 0 has no interface number 0 [ 1518.034820][ T5611] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1518.035036][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.035192][ T5611] usb 3-1: Product: syz [ 1518.035343][ T5611] usb 3-1: Manufacturer: syz [ 1518.035535][ T5611] usb 3-1: SerialNumber: syz [ 1518.290970][ T5611] usb 3-1: config 0 descriptor?? [ 1518.512114][ T5611] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1518.557086][ T5611] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1518.557289][ T5611] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1518.557322][ T5611] usb 3-1: media controller created [ 1518.633471][ T5611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1519.899302][ T5611] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1520.250797][ T5611] usb 3-1: USB disconnect, device number 71 [ 1520.469387][T12016] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1520.644334][T12016] usb 4-1: Using ep0 maxpacket: 32 [ 1520.646485][T12016] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1520.646508][T12016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.646526][T12016] usb 4-1: config 0 has no interface number 0 [ 1520.646566][T12016] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1520.659125][ T5882] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1520.677193][T12016] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1520.677250][T12016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.677336][T12016] usb 4-1: Product: syz [ 1520.694428][T12016] usb 4-1: Manufacturer: syz [ 1520.694470][T12016] usb 4-1: SerialNumber: syz [ 1520.746103][T12016] usb 4-1: config 0 descriptor?? [ 1520.782629][T12016] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1520.782706][T12016] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1520.809184][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1520.812251][ T5882] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1520.834580][ T5882] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1520.834635][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.834748][ T5882] usb 7-1: Product: syz [ 1520.834764][ T5882] usb 7-1: Manufacturer: syz [ 1520.834779][ T5882] usb 7-1: SerialNumber: syz [ 1520.876035][ T5882] usb 7-1: config 0 descriptor?? [ 1522.509230][T12016] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1522.509832][T12016] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1523.660865][T12016] usb 7-1: USB disconnect, device number 40 [ 1523.978951][T12016] usb 4-1: USB disconnect, device number 57 [ 1526.859361][ T5882] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1528.601648][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1528.601676][ T5882] usb 4-1: config 0 has no interface number 0 [ 1528.607637][ T5882] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1528.607657][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.607671][ T5882] usb 4-1: Product: syz [ 1528.607681][ T5882] usb 4-1: Manufacturer: syz [ 1528.607691][ T5882] usb 4-1: SerialNumber: syz [ 1528.672500][ T5882] usb 4-1: config 0 descriptor?? [ 1528.876298][ T5882] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1528.896734][ T5882] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1528.897092][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1528.897138][ T5882] usb 4-1: media controller created [ 1528.937274][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1529.981649][ T5736] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1530.069475][ T5882] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1530.139247][ T5736] usb 2-1: Using ep0 maxpacket: 8 [ 1530.141517][ T5736] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1530.144497][ T5736] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1530.144524][ T5736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.144543][ T5736] usb 2-1: Product: syz [ 1530.144557][ T5736] usb 2-1: Manufacturer: syz [ 1530.144571][ T5736] usb 2-1: SerialNumber: syz [ 1530.259219][ T5736] usb 2-1: config 0 descriptor?? [ 1530.407146][ T5882] usb 4-1: USB disconnect, device number 58 [ 1532.249266][ T5736] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1532.409160][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 1532.412814][ T5736] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1532.412837][ T5736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.412856][ T5736] usb 4-1: config 0 has no interface number 0 [ 1532.412896][ T5736] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1532.416141][ T5736] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1532.416169][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.416191][ T5736] usb 4-1: Product: syz [ 1532.416206][ T5736] usb 4-1: Manufacturer: syz [ 1532.416233][ T5736] usb 4-1: SerialNumber: syz [ 1532.501321][ T5736] usb 4-1: config 0 descriptor?? [ 1532.516617][ T5736] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1532.516693][ T5736] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1532.715756][ T5736] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1532.716309][ T5736] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 1532.762531][ T31] usb 2-1: USB disconnect, device number 68 [ 1532.933794][ T5882] usb 4-1: USB disconnect, device number 59 [ 1536.772909][ T5882] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1537.290952][ T5882] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1537.290979][ T5882] usb 2-1: config 0 has no interface number 0 [ 1537.294343][ T5882] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1537.294372][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.294386][ T5882] usb 2-1: Product: syz [ 1537.294395][ T5882] usb 2-1: Manufacturer: syz [ 1537.294406][ T5882] usb 2-1: SerialNumber: syz [ 1537.298001][ T5882] usb 2-1: config 0 descriptor?? [ 1537.512429][ T5882] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1537.518944][ T5882] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1537.520033][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1537.520186][ T5882] usb 2-1: media controller created [ 1537.557152][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1538.072809][T12016] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1538.239277][T12016] usb 7-1: Using ep0 maxpacket: 8 [ 1538.271647][T12016] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1538.271678][T12016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.271701][T12016] usb 7-1: Product: syz [ 1538.271727][T12016] usb 7-1: Manufacturer: syz [ 1538.271743][T12016] usb 7-1: SerialNumber: syz [ 1540.028564][ T5882] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1540.039812][T12016] usb 7-1: config 0 descriptor?? [ 1540.100535][T12016] gspca_main: se401-2.14.0 probing 047d:5003 [ 1540.517763][T12016] gspca_se401: Bayer format not supported! [ 1540.569340][ T5882] usb 2-1: USB disconnect, device number 69 [ 1540.724607][T12016] usb 7-1: USB disconnect, device number 41 [ 1550.871543][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.871608][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.933166][T12016] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1552.142720][T12016] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1552.142746][T12016] usb 4-1: config 0 has no interface number 0 [ 1552.144925][T12016] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1552.144950][T12016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.144969][T12016] usb 4-1: Product: syz [ 1552.144978][T12016] usb 4-1: Manufacturer: syz [ 1552.144987][T12016] usb 4-1: SerialNumber: syz [ 1552.209263][T12016] usb 4-1: config 0 descriptor?? [ 1552.750494][T12016] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1552.756096][T12016] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1552.756417][T12016] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1552.756461][T12016] usb 4-1: media controller created [ 1552.814060][T12016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1555.156525][T12016] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1555.347945][T12016] usb 4-1: USB disconnect, device number 60 [ 1559.802168][T11870] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1565.822714][ T5736] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1566.047195][ T5736] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1566.047267][ T5736] usb 7-1: config 0 has no interface number 0 [ 1566.288091][ T5736] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1566.288191][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.288243][ T5736] usb 7-1: Product: syz [ 1566.288315][ T5736] usb 7-1: Manufacturer: syz [ 1566.288373][ T5736] usb 7-1: SerialNumber: syz [ 1566.424477][ T5736] usb 7-1: config 0 descriptor?? [ 1566.640243][ T5736] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1566.645201][ T5736] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1566.645517][ T5736] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1566.645561][ T5736] usb 7-1: media controller created [ 1566.692670][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1567.831242][ T5736] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1567.919379][T11870] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1569.433776][ T5882] usb 7-1: USB disconnect, device number 42 [ 1569.687121][T11870] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1575.246164][T11870] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1576.809155][T12016] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1576.975405][T12016] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1576.975435][T12016] usb 4-1: config 0 has no interface number 0 [ 1576.995346][T12016] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1576.995368][T12016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.995383][T12016] usb 4-1: Product: syz [ 1576.995394][T12016] usb 4-1: Manufacturer: syz [ 1576.995404][T12016] usb 4-1: SerialNumber: syz [ 1577.066961][T12016] usb 4-1: config 0 descriptor?? [ 1577.271503][T12016] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1577.303017][T12016] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1577.303316][T12016] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1577.303362][T12016] usb 4-1: media controller created [ 1577.366028][T12016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.432334][T11870] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1578.549625][T12016] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1578.765628][T12016] usb 4-1: USB disconnect, device number 61 [ 1578.781573][ T7261] udevd[7261]: setting owner of /dev/bus/usb/004/061 to uid=0, gid=0 failed: No such file or directory [ 1583.391174][T11870] Bluetooth: hci5: unexpected event for opcode 0x007f [ 1586.014171][T11870] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1586.659235][ T5736] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1588.012009][ T5736] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1588.012048][ T5736] usb 6-1: config 0 has no interface number 0 [ 1588.043058][ T5736] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1588.043085][ T5736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.043105][ T5736] usb 6-1: Product: syz [ 1588.043118][ T5736] usb 6-1: Manufacturer: syz [ 1588.043132][ T5736] usb 6-1: SerialNumber: syz [ 1588.087965][ T5736] usb 6-1: config 0 descriptor?? [ 1588.314940][ T5736] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1589.182052][ T5736] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1589.182257][ T5736] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1589.182286][ T5736] usb 6-1: media controller created [ 1589.265679][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1589.652493][ T5736] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1589.932234][ T5736] usb 6-1: USB disconnect, device number 29 [ 1593.419130][ T36] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1593.998485][T11870] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1594.170387][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1594.172871][ T36] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1594.172899][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.172919][ T36] usb 3-1: Product: syz [ 1594.172934][ T36] usb 3-1: Manufacturer: syz [ 1594.172948][ T36] usb 3-1: SerialNumber: syz [ 1594.223572][ T36] usb 3-1: config 0 descriptor?? [ 1596.366965][T12016] usb 3-1: USB disconnect, device number 72 [ 1600.382439][T15358] netlink: 'syz.5.2847': attribute type 11 has an invalid length. [ 1601.926001][T11870] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 1606.262753][T11870] Bluetooth: hci0: unexpected event for opcode 0x0c56 [ 1610.022082][T11870] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1612.941799][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.941873][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1625.886135][ T5882] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1626.043142][ T5882] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1626.043171][ T5882] usb 3-1: config 0 has no interface number 0 [ 1626.047075][ T5882] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1626.047105][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.047125][ T5882] usb 3-1: Product: syz [ 1626.047140][ T5882] usb 3-1: Manufacturer: syz [ 1626.047154][ T5882] usb 3-1: SerialNumber: syz [ 1626.112672][ T5882] usb 3-1: config 0 descriptor?? [ 1626.479134][ T5882] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1626.501074][ T5882] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1626.502326][ T5882] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1626.502385][ T5882] usb 3-1: media controller created [ 1627.491533][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1628.117870][T15507] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2885'. [ 1628.579625][ T5882] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1628.824536][ T5882] usb 3-1: USB disconnect, device number 73 [ 1630.007496][T11870] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1636.246050][T15551] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1636.395627][T11870] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1639.989114][T12016] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1640.321234][T12016] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1640.321262][T12016] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.321280][T12016] usb 3-1: config 0 has no interface number 0 [ 1640.325905][T12016] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1640.325934][T12016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.325953][T12016] usb 3-1: Product: syz [ 1640.325967][T12016] usb 3-1: Manufacturer: syz [ 1640.325981][T12016] usb 3-1: SerialNumber: syz [ 1640.353642][T12016] usb 3-1: config 0 descriptor?? [ 1640.508271][T12016] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 1641.229243][T12016] usb 3-1: USB disconnect, device number 74 [ 1643.830343][T15598] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1650.759136][ T5611] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1650.974777][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 1650.976520][ T5611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.976567][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1650.976586][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1650.976601][ T5611] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1650.976616][ T5611] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1650.977777][ T5611] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1650.977798][ T5611] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1650.977812][ T5611] usb 3-1: Manufacturer: syz [ 1651.073766][ T5611] usb 3-1: config 0 descriptor?? [ 1651.347084][T15641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2923'. [ 1651.347108][T15641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2923'. [ 1651.449154][ T5611] rc_core: IR keymap rc-hauppauge not found [ 1651.449173][ T5611] Registered IR keymap rc-empty [ 1651.449316][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.478755][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.493405][ T5611] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1651.497919][ T5611] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input57 [ 1651.536231][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.550108][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.569202][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.589228][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.609162][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.629759][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.649155][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.669326][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.689229][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.709165][ T5611] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1651.737742][ T5611] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1651.737766][ T5611] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1651.873604][ T5611] usb 3-1: USB disconnect, device number 75 [ 1652.280563][ T36] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1652.430557][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 1652.437631][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.437670][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1652.437691][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1652.437706][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1652.437724][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1652.447319][ T36] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1652.447337][ T36] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1652.447349][ T36] usb 2-1: Manufacturer: syz [ 1652.554229][ T36] usb 2-1: config 0 descriptor?? [ 1652.909129][ T36] rc_core: IR keymap rc-hauppauge not found [ 1652.909143][ T36] Registered IR keymap rc-empty [ 1652.909243][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1652.929187][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1652.957363][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1652.975322][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input58 [ 1653.071183][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.090136][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.109552][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.133125][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.149408][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.169403][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.189176][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.209194][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.229460][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.393573][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1653.989493][ T36] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1653.989512][ T36] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1654.022852][ T36] usb 2-1: USB disconnect, device number 70 [ 1657.874018][ T31] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1658.039595][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1658.046403][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.046452][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1658.046477][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1658.046497][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1658.046519][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.071331][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1658.071352][ T31] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1658.071366][ T31] usb 2-1: Manufacturer: syz [ 1658.236788][ T31] usb 2-1: config 0 descriptor?? [ 1658.529211][ T31] rc_core: IR keymap rc-hauppauge not found [ 1658.529232][ T31] Registered IR keymap rc-empty [ 1658.529498][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.549644][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.585049][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1658.605501][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input59 [ 1658.625012][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.639139][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.660705][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.679473][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.700281][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.719167][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.739646][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.760574][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.779869][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.799630][ T31] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1658.829538][ T31] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1658.829621][ T31] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1658.842469][T15688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1658.842513][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1658.906640][ T31] usb 2-1: USB disconnect, device number 71 [ 1667.042799][T15724] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1667.042816][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1670.571225][ T36] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1671.042488][ T36] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1671.042520][ T36] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1671.042538][ T36] usb 2-1: config 0 has no interface number 0 [ 1671.045069][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1671.045094][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.045113][ T36] usb 2-1: Product: syz [ 1671.045131][ T36] usb 2-1: Manufacturer: syz [ 1671.045146][ T36] usb 2-1: SerialNumber: syz [ 1671.112282][ T36] usb 2-1: config 0 descriptor?? [ 1671.602756][ T36] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1671.602791][ T36] uvcvideo 2-1:0.64: No valid video chain found. [ 1671.628559][ T36] usb 2-1: USB disconnect, device number 72 [ 1673.754872][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.754938][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.079114][ T5611] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1682.231313][ T5611] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1682.231340][ T5611] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1682.231358][ T5611] usb 7-1: config 0 has no interface number 0 [ 1682.236617][ T5611] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1682.236646][ T5611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.236665][ T5611] usb 7-1: Product: syz [ 1682.236679][ T5611] usb 7-1: Manufacturer: syz [ 1682.236693][ T5611] usb 7-1: SerialNumber: syz [ 1682.318375][ T5611] usb 7-1: config 0 descriptor?? [ 1682.859856][ T5611] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1682.859890][ T5611] uvcvideo 7-1:0.64: No valid video chain found. [ 1683.840878][ T5611] usb 7-1: USB disconnect, device number 43 [ 1688.229131][ T31] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1688.384993][ T31] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1688.385023][ T31] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1688.385042][ T31] usb 7-1: Product: syz [ 1688.430332][ T31] ftdi_sio 7-1:5.0: FTDI USB Serial Device converter detected [ 1688.447094][ T31] usb 7-1: Detected FT4233HP [ 1689.691445][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1689.707075][ T31] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1689.733595][ T31] usb 7-1: USB disconnect, device number 44 [ 1689.790640][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1689.792686][ T31] ftdi_sio 7-1:5.0: device disconnected [ 1689.867045][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1694.647684][ T5736] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1694.886638][T11870] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1694.893041][ T5736] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1694.893068][ T5736] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1694.893126][ T5736] usb 3-1: config 0 has no interface number 0 [ 1694.896731][ T5736] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1694.896759][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.896789][ T5736] usb 3-1: Product: syz [ 1694.896841][ T5736] usb 3-1: Manufacturer: syz [ 1694.896879][ T5736] usb 3-1: SerialNumber: syz [ 1694.979755][ T5736] usb 3-1: config 0 descriptor?? [ 1697.510665][ T5736] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1697.510699][ T5736] uvcvideo 3-1:0.64: No valid video chain found. [ 1697.515387][ T5736] usb 3-1: USB disconnect, device number 76 [ 1697.801168][T15883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'. [ 1699.492541][T12016] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1700.027313][T12016] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1700.027339][T12016] usb 2-1: config 0 has no interface number 0 [ 1700.305902][T12016] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1700.305935][T12016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.305955][T12016] usb 2-1: Product: syz [ 1700.305971][T12016] usb 2-1: Manufacturer: syz [ 1700.305986][T12016] usb 2-1: SerialNumber: syz [ 1700.349514][T12016] usb 2-1: config 0 descriptor?? [ 1700.557183][T12016] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1700.586495][T12016] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1700.586855][T12016] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1700.586900][T12016] usb 2-1: media controller created [ 1700.666069][T12016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1704.189120][ T5882] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1704.339085][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 1704.344194][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.344243][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1704.344268][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1704.344289][ T5882] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1704.344304][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1704.348425][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1704.348454][ T5882] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1704.348477][ T5882] usb 3-1: Manufacturer: syz [ 1704.443129][ T5882] usb 3-1: config 0 descriptor?? [ 1704.663817][T12016] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1704.821432][ T5882] rc_core: IR keymap rc-hauppauge not found [ 1704.821452][ T5882] Registered IR keymap rc-empty [ 1704.821587][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.839178][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.864446][ T5882] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1704.884586][ T5882] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input60 [ 1704.905407][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.919358][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.941757][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.959289][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.979609][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1704.999151][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1705.019175][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1705.039143][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1705.059416][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1705.079181][ T5882] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1705.103973][ T5882] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1705.103995][ T5882] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1705.152960][T12016] usb 2-1: USB disconnect, device number 73 [ 1705.195067][ T5882] usb 3-1: USB disconnect, device number 77 [ 1705.253490][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1706.854880][T11870] Bluetooth: hci2: unexpected event for opcode 0x007f [ 1707.499065][T12016] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1708.048430][T12016] usb 4-1: Using ep0 maxpacket: 8 [ 1708.070268][T12016] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1708.070296][T12016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.070315][T12016] usb 4-1: Product: syz [ 1708.070328][T12016] usb 4-1: Manufacturer: syz [ 1708.070341][T12016] usb 4-1: SerialNumber: syz [ 1708.075387][T12016] usb 4-1: config 0 descriptor?? [ 1708.129831][T12016] gspca_main: se401-2.14.0 probing 047d:5003 [ 1708.689264][ T5736] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1708.831958][T12016] gspca_se401: Wrong descriptor type [ 1708.861830][ T5736] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1708.861856][ T5736] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1708.861875][ T5736] usb 3-1: config 0 has no interface number 0 [ 1708.865837][ T5736] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1708.865858][ T5736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.865873][ T5736] usb 3-1: Product: syz [ 1708.865883][ T5736] usb 3-1: Manufacturer: syz [ 1708.865895][ T5736] usb 3-1: SerialNumber: syz [ 1708.910294][ T5736] usb 3-1: config 0 descriptor?? [ 1708.953526][T11870] Bluetooth: hci2: unexpected event for opcode 0x001b [ 1709.790172][ T31] usb 4-1: USB disconnect, device number 62 [ 1710.258242][ T5736] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1710.258279][ T5736] uvcvideo 3-1:0.64: No valid video chain found. [ 1710.311516][ T5736] usb 3-1: USB disconnect, device number 78 [ 1713.111902][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1713.912335][ T31] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1714.219072][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1714.221201][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.221249][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1714.221295][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1714.221317][ T31] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1714.221341][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1714.222495][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1714.222521][ T31] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1714.222541][ T31] usb 6-1: Manufacturer: syz [ 1714.325808][ T31] usb 6-1: config 0 descriptor?? [ 1714.578140][T15976] loop2: detected capacity change from 0 to 7 [ 1714.647260][T15976] Dev loop2: unable to read RDB block 7 [ 1714.647313][T15976] loop2: unable to read partition table [ 1714.647574][T15976] loop2: partition table beyond EOD, truncated [ 1714.647628][T15976] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1714.669029][ T31] rc_core: IR keymap rc-hauppauge not found [ 1714.669045][ T31] Registered IR keymap rc-empty [ 1714.669228][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.694589][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.711939][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1714.731177][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input61 [ 1714.738902][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.761790][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.779150][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.799110][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.819120][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.839155][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.859120][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.879153][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.899180][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.919153][ T31] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1714.971125][ T31] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1714.971152][ T31] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1715.012659][ T31] usb 6-1: USB disconnect, device number 30 [ 1722.779226][T11870] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1723.681733][T16026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1723.838616][T16028] loop2: detected capacity change from 0 to 7 [ 1723.853914][T16028] Dev loop2: unable to read RDB block 7 [ 1723.853954][T16028] loop2: unable to read partition table [ 1723.854154][T16028] loop2: partition table beyond EOD, truncated [ 1723.854170][T16028] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1723.898168][ T5882] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1725.105435][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.105490][ T5882] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1725.105513][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.110819][ T5882] usb 2-1: config 0 descriptor?? [ 1725.864394][ T5882] usbhid 2-1:0.0: can't add hid device: -71 [ 1725.864532][ T5882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1725.888883][ T5882] usb 2-1: USB disconnect, device number 74 [ 1726.259194][ T1011] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1726.630141][ T5882] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1727.159020][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 1727.162261][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.162309][ T5882] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1727.162341][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.204055][ T5882] usb 2-1: config 0 descriptor?? [ 1727.289008][ T1011] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1727.289039][ T1011] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1727.289059][ T1011] usb 4-1: config 0 has no interface number 0 [ 1727.291962][ T1011] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1727.291991][ T1011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.292013][ T1011] usb 4-1: Product: syz [ 1727.292028][ T1011] usb 4-1: Manufacturer: syz [ 1727.292043][ T1011] usb 4-1: SerialNumber: syz [ 1727.307444][ T1011] usb 4-1: config 0 descriptor?? [ 1727.453088][ T5882] usb 2-1: can't set config #0, error -71 [ 1727.473106][ T5882] usb 2-1: USB disconnect, device number 75 [ 1727.716882][ T1011] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1727.716913][ T1011] uvcvideo 4-1:0.64: No valid video chain found. [ 1727.741826][ T1011] usb 4-1: USB disconnect, device number 63 [ 1730.746863][ T5611] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1732.379132][T11870] Bluetooth: hci1: unexpected event for opcode 0x007f [ 1736.463345][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.463413][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.679228][ T5611] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1737.301067][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.301117][ T5611] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1737.301140][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.345161][ T5611] usb 7-1: config 0 descriptor?? [ 1737.577962][ T5611] usbhid 7-1:0.0: can't add hid device: -71 [ 1737.578087][ T5611] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1738.134414][ T5611] usb 7-1: USB disconnect, device number 45 [ 1740.889242][T16101] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1741.208018][T16101] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1741.208223][T16101] usb 2-1: config 0 has no interface number 0 [ 1741.302296][T16101] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1741.302356][T16101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.302377][T16101] usb 2-1: Product: syz [ 1741.302392][T16101] usb 2-1: Manufacturer: syz [ 1741.302406][T16101] usb 2-1: SerialNumber: syz [ 1741.841283][T16101] usb 2-1: config 0 descriptor?? [ 1743.041340][T16101] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1743.277353][T12016] usb 2-1: USB disconnect, device number 76 [ 1755.313318][ T5882] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1755.333322][T11870] Bluetooth: hci2: unexpected event for opcode 0x0c56 [ 1756.246610][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.246657][ T5882] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1756.246680][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.270934][ T5882] usb 4-1: config 0 descriptor?? [ 1756.499671][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 1756.499842][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1756.542440][ T5882] usb 4-1: USB disconnect, device number 64 [ 1758.569132][T15871] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1758.620580][T16165] loop2: detected capacity change from 0 to 7 [ 1758.623247][T16165] Dev loop2: unable to read RDB block 7 [ 1758.623267][T16165] loop2: AHDI p1 p2 p3 [ 1758.623286][T16165] loop2: partition table partially beyond EOD, truncated [ 1758.623467][T16165] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1758.623479][T16165] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1758.719104][ T1011] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1758.740138][T15871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1758.740163][T15871] usb 3-1: config 0 has no interface number 0 [ 1758.744880][T15871] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1758.744906][T15871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.744926][T15871] usb 3-1: Product: syz [ 1758.744939][T15871] usb 3-1: Manufacturer: syz [ 1758.744953][T15871] usb 3-1: SerialNumber: syz [ 1758.803128][T15871] usb 3-1: config 0 descriptor?? [ 1758.869402][ T1011] usb 4-1: Using ep0 maxpacket: 32 [ 1758.875824][ T1011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.876295][ T1011] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1758.876322][ T1011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.213755][T15871] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1759.216607][ T1011] usb 4-1: config 0 descriptor?? [ 1759.240130][ T1011] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1759.243478][T15871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1759.243986][T15871] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1759.244032][T15871] usb 3-1: media controller created [ 1760.317055][T15871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1760.363801][ T1011] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1760.415034][ T1011] usb 4-1: USB disconnect, device number 65 [ 1761.626555][T15871] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1761.628203][ T1011] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1763.417371][T15871] usb 3-1: USB disconnect, device number 80 [ 1773.610465][ T31] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1778.584087][T11870] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 1780.500567][ T5736] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1780.650788][ T5736] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1780.650816][ T5736] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1780.650835][ T5736] usb 4-1: config 0 has no interface number 0 [ 1780.653290][ T5736] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1780.653314][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.653336][ T5736] usb 4-1: Product: syz [ 1780.653345][ T5736] usb 4-1: Manufacturer: syz [ 1780.653354][ T5736] usb 4-1: SerialNumber: syz [ 1780.726323][ T5736] usb 4-1: config 0 descriptor?? [ 1780.937325][ T5736] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1780.937360][ T5736] uvcvideo 4-1:0.64: No valid video chain found. [ 1780.988334][ T5736] usb 4-1: USB disconnect, device number 66 [ 1783.044354][T16293] mmap: syz.2.3105 (16293) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1783.044574][T16293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3105'. [ 1783.057658][T16293] capability: warning: `syz.2.3105' uses deprecated v2 capabilities in a way that may be insecure [ 1785.008890][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1790.010089][ T5882] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1790.161574][ T5882] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1790.161602][ T5882] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1790.161621][ T5882] usb 2-1: config 0 has no interface number 0 [ 1790.164473][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1790.164500][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.164521][ T5882] usb 2-1: Product: syz [ 1790.164535][ T5882] usb 2-1: Manufacturer: syz [ 1790.164549][ T5882] usb 2-1: SerialNumber: syz [ 1790.211794][ T5882] usb 2-1: config 0 descriptor?? [ 1791.045192][ T5882] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1791.045226][ T5882] uvcvideo 2-1:0.64: No valid video chain found. [ 1791.374632][ T5882] usb 2-1: USB disconnect, device number 77 [ 1792.171953][T15871] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1792.822012][T15871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1792.822040][T15871] usb 3-1: config 0 has no interface number 0 [ 1792.826855][T15871] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1792.826884][T15871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.826906][T15871] usb 3-1: Product: syz [ 1792.826921][T15871] usb 3-1: Manufacturer: syz [ 1792.826936][T15871] usb 3-1: SerialNumber: syz [ 1792.883550][T15871] usb 3-1: config 0 descriptor?? [ 1793.266733][T15871] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1793.302877][T15871] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1793.303098][T15871] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1793.303128][T15871] usb 3-1: media controller created [ 1794.157109][T15871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1795.890955][T15871] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1797.105787][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.105837][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.231996][T15871] usb 3-1: USB disconnect, device number 81 [ 1799.020372][ T5882] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1799.274903][ T5882] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1799.275269][ T5882] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1799.275388][ T5882] usb 7-1: config 0 has no interface number 0 [ 1799.366567][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1799.366897][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.366943][ T5882] usb 7-1: Product: syz [ 1799.366985][ T5882] usb 7-1: Manufacturer: syz [ 1799.366999][ T5882] usb 7-1: SerialNumber: syz [ 1799.653609][ T5882] usb 7-1: config 0 descriptor?? [ 1800.263893][ T5882] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1800.263925][ T5882] uvcvideo 7-1:0.64: No valid video chain found. [ 1800.459781][ T5882] usb 7-1: USB disconnect, device number 47 [ 1805.150813][ T5736] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1805.301458][ T5736] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1805.301485][ T5736] usb 4-1: config 0 has no interface number 0 [ 1805.306337][ T5736] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1805.306362][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.306382][ T5736] usb 4-1: Product: syz [ 1805.306396][ T5736] usb 4-1: Manufacturer: syz [ 1805.306409][ T5736] usb 4-1: SerialNumber: syz [ 1805.482814][ T5736] usb 4-1: config 0 descriptor?? [ 1806.229256][ T5736] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1806.481517][ T5736] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1806.481830][ T5736] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1806.481874][ T5736] usb 4-1: media controller created [ 1806.517406][ T5736] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1807.551569][ T5736] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1809.799458][ T5736] usb 4-1: USB disconnect, device number 67 [ 1812.372282][T16472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3152'. [ 1820.825091][T16510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3162'. [ 1825.021123][T11870] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1827.976260][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3171'. [ 1831.840251][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1831.896823][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1831.929451][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1831.960642][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1831.961690][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1833.089477][T16572] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3169'. [ 1834.079219][ T60] Bluetooth: hci3: command tx timeout [ 1834.089421][ T1011] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1834.242413][ T1011] usb 4-1: Using ep0 maxpacket: 16 [ 1834.248686][ T1011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.248752][ T1011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1834.248783][ T1011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1834.248824][ T1011] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1834.248847][ T1011] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1834.256303][ T1011] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1834.256375][ T1011] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1834.256442][ T1011] usb 4-1: Manufacturer: syz [ 1834.352241][ T1011] usb 4-1: config 0 descriptor?? [ 1835.829609][ T1011] rc_core: IR keymap rc-hauppauge not found [ 1835.829623][ T1011] Registered IR keymap rc-empty [ 1835.829731][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1835.849949][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1835.880805][ T1011] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1835.901191][ T1011] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input62 [ 1835.947332][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1835.969339][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1835.992115][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.009087][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.029168][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.055824][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.073943][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.106125][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.119107][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.139062][ T1011] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1836.149129][ T60] Bluetooth: hci3: command tx timeout [ 1836.196617][ T1011] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1836.196641][ T1011] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1836.251008][ T1011] usb 4-1: USB disconnect, device number 68 [ 1836.649057][ T5882] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1836.717386][T16552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.717582][T16552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.717808][T16552] bridge_slave_0: entered allmulticast mode [ 1836.744808][T16552] bridge_slave_0: entered promiscuous mode [ 1836.757450][T16552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.757670][T16552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.757875][T16552] bridge_slave_1: entered allmulticast mode [ 1836.782776][T16552] bridge_slave_1: entered promiscuous mode [ 1836.819474][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 1836.823282][ T5882] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1836.827313][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1836.827338][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.827357][ T5882] usb 6-1: Product: syz [ 1836.827371][ T5882] usb 6-1: Manufacturer: syz [ 1836.827384][ T5882] usb 6-1: SerialNumber: syz [ 1837.102337][T16552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1837.142112][T16552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1837.216014][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input63 [ 1837.258673][ T4947] bcm5974 6-1:1.0: could not read from device [ 1837.302087][ T5882] usb 6-1: USB disconnect, device number 32 [ 1837.326257][T16552] team0: Port device team_slave_0 added [ 1837.339891][T16552] team0: Port device team_slave_1 added [ 1837.389623][T16552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.389642][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.389667][T16552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.392217][T16552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.392227][T16552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.392245][T16552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1837.541683][T16552] hsr_slave_0: entered promiscuous mode [ 1837.542865][T16552] hsr_slave_1: entered promiscuous mode [ 1837.543745][T16552] debugfs: 'hsr0' already exists in 'hsr' [ 1837.543769][T16552] Cannot create hsr debugfs directory [ 1838.230984][ T60] Bluetooth: hci3: command tx timeout [ 1840.452943][ T60] Bluetooth: hci3: command tx timeout [ 1840.544167][T16552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.141350][ T60] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1843.207586][T16552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.493239][ T60] Bluetooth: hci0: unexpected event for opcode 0x007f [ 1844.527843][T16552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.194752][T16552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.689080][T16319] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1846.845346][T16319] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1846.845373][T16319] usb 7-1: config 0 has no interface number 0 [ 1846.863741][T16319] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1846.863768][T16319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.863787][T16319] usb 7-1: Product: syz [ 1846.863805][T16319] usb 7-1: Manufacturer: syz [ 1846.863815][T16319] usb 7-1: SerialNumber: syz [ 1846.985226][T16319] usb 7-1: config 0 descriptor?? [ 1848.074661][T16319] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1848.094208][T16319] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1848.094574][T16319] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1848.094625][T16319] usb 7-1: media controller created [ 1848.151988][T16319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1848.924750][T16552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1849.100091][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1849.904369][T16319] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1850.039955][T16552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1850.089251][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1850.090931][T16552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1850.132950][T10996] usb 7-1: USB disconnect, device number 48 [ 1850.166914][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1850.177792][T16552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1850.247018][T16552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1851.782306][T16552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.820985][T16552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1851.862444][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.862660][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1851.865589][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.865703][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.997790][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1857.995533][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3209'. [ 1858.335501][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.335568][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1860.217775][T16552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.303840][T16552] veth0_vlan: entered promiscuous mode [ 1860.325350][T16552] veth1_vlan: entered promiscuous mode [ 1860.390968][T15871] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1860.636561][T16552] veth0_macvtap: entered promiscuous mode [ 1860.657549][T16552] veth1_macvtap: entered promiscuous mode [ 1861.468763][T15871] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1861.468795][T15871] usb 7-1: config 0 has no interface number 0 [ 1861.496310][T15871] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1861.496337][T15871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.496356][T15871] usb 7-1: Product: syz [ 1861.496370][T15871] usb 7-1: Manufacturer: syz [ 1861.496384][T15871] usb 7-1: SerialNumber: syz [ 1861.543439][T15871] usb 7-1: config 0 descriptor?? [ 1861.658769][T16552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.712144][T16552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1862.014687][T15871] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1862.018484][T15871] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1862.039218][T13999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.061843][T13999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.067307][T13999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.067774][T13999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1862.104383][T15871] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1862.104430][T15871] usb 7-1: media controller created [ 1862.138121][T15871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1863.299084][T15871] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1863.951518][ T1572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1863.951538][ T1572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.571742][T16756] 9p: Could not find request transport: fd0x0000000000000005 [ 1865.452399][ T5798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.452423][ T5798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.477121][ T5882] usb 7-1: USB disconnect, device number 49 [ 1870.986770][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3228'. [ 1872.498495][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3231'. [ 1873.801704][T11870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1873.849457][T11870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1873.888093][T11870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1873.907206][T11870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1873.908168][T11870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1874.030124][T16818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3233'. [ 1877.910225][T11870] Bluetooth: hci4: command tx timeout [ 1880.187537][T11870] Bluetooth: hci4: command tx timeout [ 1881.868240][T11870] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 1882.059016][T15871] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1882.209140][T15871] usb 6-1: Using ep0 maxpacket: 16 [ 1882.211540][T15871] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.211594][T15871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1882.211624][T15871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1882.211647][T15871] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1882.211672][T15871] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1882.218539][T15871] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1882.218568][T15871] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1882.218590][T15871] usb 6-1: Manufacturer: syz [ 1882.229303][T11870] Bluetooth: hci4: command tx timeout [ 1882.237827][T15871] usb 6-1: config 0 descriptor?? [ 1882.941538][T15871] rc_core: IR keymap rc-hauppauge not found [ 1882.941558][T15871] Registered IR keymap rc-empty [ 1882.942393][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1882.961790][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1882.993850][T15871] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1883.013215][T15871] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input64 [ 1883.022702][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.042735][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.059218][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.080867][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.109168][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.139123][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.159076][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.179240][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.199075][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.219529][T15871] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1883.276619][T15871] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1883.276645][T15871] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1883.694455][T15871] usb 6-1: USB disconnect, device number 33 [ 1884.060907][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.060994][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.061170][T16810] bridge_slave_0: entered allmulticast mode [ 1884.069518][T16810] bridge_slave_0: entered promiscuous mode [ 1884.099096][ T31] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1884.160298][T16810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.160380][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1884.160585][T16810] bridge_slave_1: entered allmulticast mode [ 1884.167359][T16810] bridge_slave_1: entered promiscuous mode [ 1884.290934][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.290987][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1884.291013][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.329645][ T31] usb 7-1: config 0 descriptor?? [ 1884.389064][T11870] Bluetooth: hci4: command tx timeout [ 1884.423073][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.453223][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.564553][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1884.564673][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1884.592730][ T31] usb 7-1: USB disconnect, device number 50 [ 1885.917020][T16810] team0: Port device team_slave_0 added [ 1885.990289][T16810] team0: Port device team_slave_1 added [ 1886.167432][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.167448][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.167474][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1886.174998][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1886.175033][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1886.175091][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.179375][ T31] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1886.578317][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1886.598271][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1886.598328][ T31] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1886.598346][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.465818][ T31] usb 7-1: config 0 descriptor?? [ 1887.619187][ T31] usb 7-1: can't set config #0, error -71 [ 1887.645610][ T31] usb 7-1: USB disconnect, device number 51 [ 1887.764995][T16810] hsr_slave_0: entered promiscuous mode [ 1887.767200][T16810] hsr_slave_1: entered promiscuous mode [ 1887.789462][T16810] debugfs: 'hsr0' already exists in 'hsr' [ 1887.789486][T16810] Cannot create hsr debugfs directory [ 1891.189138][ T5882] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1892.041263][ T5882] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1892.041292][ T5882] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1892.041313][ T5882] usb 7-1: config 0 has no interface number 0 [ 1892.044264][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1892.044290][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.044309][ T5882] usb 7-1: Product: syz [ 1892.044324][ T5882] usb 7-1: Manufacturer: syz [ 1892.044338][ T5882] usb 7-1: SerialNumber: syz [ 1893.120232][ T5882] usb 7-1: config 0 descriptor?? [ 1893.532483][ T5882] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1893.532518][ T5882] uvcvideo 7-1:0.64: No valid video chain found. [ 1893.573603][ T5882] usb 7-1: USB disconnect, device number 52 [ 1894.917335][T16810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.372499][T16810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.036597][T16810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.876864][T16810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.360077][T11870] Bluetooth: hci2: unexpected event for opcode 0x001b [ 1900.769013][ T36] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1900.789886][ T5882] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1900.919831][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 1900.925723][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.925774][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1900.925793][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1900.925808][ T36] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1900.925823][ T36] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1900.927357][ T36] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1900.927383][ T36] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1900.927403][ T36] usb 6-1: Manufacturer: syz [ 1901.030333][ T5882] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 1901.030359][ T5882] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1901.030380][ T5882] usb 7-1: config 0 has no interface number 0 [ 1901.033497][ T5882] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1901.033522][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.033542][ T5882] usb 7-1: Product: syz [ 1901.033555][ T5882] usb 7-1: Manufacturer: syz [ 1901.033569][ T5882] usb 7-1: SerialNumber: syz [ 1901.101291][ T36] usb 6-1: config 0 descriptor?? [ 1901.131374][ T5882] usb 7-1: config 0 descriptor?? [ 1901.616341][ T5882] uvcvideo 7-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1901.616386][ T5882] uvcvideo 7-1:0.64: No valid video chain found. [ 1901.694198][ T5882] usb 7-1: USB disconnect, device number 53 [ 1901.873954][ T36] rc_core: IR keymap rc-hauppauge not found [ 1901.873977][ T36] Registered IR keymap rc-empty [ 1901.874143][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1901.889341][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1901.914278][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1901.939871][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65 [ 1901.943448][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1901.975984][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1901.989152][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.009396][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.030077][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.069249][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.189221][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.209142][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.235221][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.249184][ T36] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1902.280919][ T36] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1902.280947][ T36] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1902.334307][ T36] usb 6-1: USB disconnect, device number 34 [ 1905.613087][T16810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1905.646540][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1905.657457][T16810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1905.686025][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1905.687123][T16810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1905.737059][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1905.759625][T16810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1905.964509][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1906.169048][T16101] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1906.437037][T16810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1907.259023][T16101] usb 7-1: Using ep0 maxpacket: 16 [ 1907.261662][T16101] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.261712][T16101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1907.261742][T16101] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1907.261764][T16101] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1907.261788][T16101] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1907.264355][T16101] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1907.264376][T16101] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1907.264391][T16101] usb 7-1: Manufacturer: syz [ 1907.374054][T16101] usb 7-1: config 0 descriptor?? [ 1907.460709][T16810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1907.511495][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.511619][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.575627][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.575743][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1907.749627][T16101] rc_core: IR keymap rc-hauppauge not found [ 1907.749650][T16101] Registered IR keymap rc-empty [ 1907.749802][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.769061][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.794226][T16101] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1907.813771][T16101] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input66 [ 1907.840645][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.859161][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.879383][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.899166][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.920214][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.941836][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.959183][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.980896][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1907.999687][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1908.025414][T16101] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1908.060440][T16101] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1908.060466][T16101] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1908.119115][T16101] usb 7-1: USB disconnect, device number 54 [ 1910.156341][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1910.245107][T16810] veth0_vlan: entered promiscuous mode [ 1910.264494][T16810] veth1_vlan: entered promiscuous mode [ 1910.332499][T16810] veth0_macvtap: entered promiscuous mode [ 1910.356070][T16810] veth1_macvtap: entered promiscuous mode [ 1910.386145][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1911.459794][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1911.885686][T13999] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.888697][T13999] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.890883][T13999] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1911.891987][T13999] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1912.959943][ T1572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.959961][ T1572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.655048][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3286'. [ 1914.497327][ T1572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.497357][ T1572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.876387][T17054] loop2: detected capacity change from 0 to 7 [ 1916.894104][T17054] Dev loop2: unable to read RDB block 7 [ 1916.894145][T17054] loop2: unable to read partition table [ 1916.894364][T17054] loop2: partition table beyond EOD, truncated [ 1916.894383][T17054] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1917.640956][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1918.212531][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1918.419115][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1918.421910][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1918.426462][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1919.662801][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.662852][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.765225][T11870] Bluetooth: hci1: command tx timeout [ 1922.099176][ T36] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1922.251412][ T36] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1922.251442][ T36] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1922.251465][ T36] usb 3-1: config 0 has no interface number 0 [ 1922.257346][ T36] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1922.257372][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.257392][ T36] usb 3-1: Product: syz [ 1922.257413][ T36] usb 3-1: Manufacturer: syz [ 1922.257427][ T36] usb 3-1: SerialNumber: syz [ 1922.293545][ T36] usb 3-1: config 0 descriptor?? [ 1922.701616][ T36] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1922.701653][ T36] uvcvideo 3-1:0.64: No valid video chain found. [ 1924.141800][T11870] Bluetooth: hci1: command tx timeout [ 1924.336484][ T36] usb 3-1: USB disconnect, device number 82 [ 1924.494227][T17058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1924.494475][T17058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1924.494686][T17058] bridge_slave_0: entered allmulticast mode [ 1924.498084][T17058] bridge_slave_0: entered promiscuous mode [ 1924.505914][T17058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1924.506239][T17058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.506445][T17058] bridge_slave_1: entered allmulticast mode [ 1924.512929][T17058] bridge_slave_1: entered promiscuous mode [ 1924.766054][T17058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1924.792491][T17058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.149726][T11870] Bluetooth: hci1: command tx timeout [ 1926.212784][T17058] team0: Port device team_slave_0 added [ 1926.228259][T17058] team0: Port device team_slave_1 added [ 1926.284911][T17058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1926.284929][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.284960][T17058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1926.287328][T17058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1926.287343][T17058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1926.287372][T17058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1927.970708][T17058] hsr_slave_0: entered promiscuous mode [ 1927.972043][T17058] hsr_slave_1: entered promiscuous mode [ 1927.973239][T17058] debugfs: 'hsr0' already exists in 'hsr' [ 1927.973257][T17058] Cannot create hsr debugfs directory [ 1928.235687][T11870] Bluetooth: hci1: command tx timeout [ 1930.912518][ T5736] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1931.128172][ T5736] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1931.128205][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1931.128229][ T5736] usb 7-1: Product: syz [ 1931.273636][ T5736] ftdi_sio 7-1:5.0: FTDI USB Serial Device converter detected [ 1931.300697][ T5736] usb 7-1: Detected FT4233HP [ 1931.659958][ T5736] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1931.760459][ T5736] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1931.799952][ T5736] usb 7-1: USB disconnect, device number 55 [ 1932.069190][ T5736] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1932.138728][ T5736] ftdi_sio 7-1:5.0: device disconnected [ 1932.452906][T17058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.117185][T17138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1934.090768][T17058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.141508][T17058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1939.312827][T17058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.049525][T13411] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1941.102499][T17058] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1941.147027][T17058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1941.148382][T17058] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1941.197169][T17058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1941.198558][T17058] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1941.205198][T13411] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1941.205226][T13411] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1941.205291][T13411] usb 3-1: config 0 has no interface number 0 [ 1941.212210][T13411] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1941.212236][T13411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.212257][T13411] usb 3-1: Product: syz [ 1941.212271][T13411] usb 3-1: Manufacturer: syz [ 1941.212292][T13411] usb 3-1: SerialNumber: syz [ 1941.267598][T13411] usb 3-1: config 0 descriptor?? [ 1943.166953][T13411] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1943.166987][T13411] uvcvideo 3-1:0.64: No valid video chain found. [ 1943.737174][T13411] usb 3-1: USB disconnect, device number 83 [ 1943.852650][T17058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1943.873899][T17058] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1943.895574][T17058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1947.105828][T17058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1947.174657][T17058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1947.395088][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.395180][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1948.416722][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.416845][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1949.253942][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1951.204515][T17058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.330026][T17058] veth0_vlan: entered promiscuous mode [ 1951.352390][T17058] veth1_vlan: entered promiscuous mode [ 1952.542227][T17058] veth0_macvtap: entered promiscuous mode [ 1952.548301][T17058] veth1_macvtap: entered promiscuous mode [ 1952.601095][T17058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1952.626880][T17058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1952.647264][ T1572] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.656520][ T1572] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.657257][ T1572] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.682488][ T1572] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.240306][ T5882] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1953.965947][ T5882] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1953.965977][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1953.965997][ T5882] usb 6-1: Product: syz [ 1954.037818][ T5882] ftdi_sio 6-1:5.0: FTDI USB Serial Device converter detected [ 1954.049890][ T5882] usb 6-1: Detected FT4233HP [ 1954.475444][ T5882] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1954.477643][ T5882] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1954.580820][ T5882] usb 6-1: USB disconnect, device number 35 [ 1954.908351][ T5882] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1955.139225][ T5882] ftdi_sio 6-1:5.0: device disconnected [ 1956.500069][T11902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.500091][T11902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.655540][ T5917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.655564][ T5917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1959.502900][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 1960.688971][ T1011] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1960.851652][ T1011] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1960.851674][ T1011] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1960.851688][ T1011] usb 6-1: Product: syz [ 1960.917477][ T1011] ftdi_sio 6-1:5.0: FTDI USB Serial Device converter detected [ 1960.930122][ T1011] usb 6-1: Detected FT4233HP [ 1962.726811][ T1011] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1962.741362][ T1011] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1962.772675][ T1011] usb 6-1: USB disconnect, device number 36 [ 1962.948359][ T1011] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1962.960575][ T1011] ftdi_sio 6-1:5.0: device disconnected [ 1967.984270][T11870] Bluetooth: hci1: link tx timeout [ 1967.984674][T11870] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1969.691017][ T36] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1970.786620][ T36] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1972.697266][T11870] Bluetooth: hci1: command 0x0406 tx timeout [ 1972.728884][ T36] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1972.728917][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.728939][ T36] usb 7-1: Product: syz [ 1972.907268][ T36] usb 7-1: config 0 descriptor?? [ 1972.909347][ T36] usb 7-1: can't set config #0, error -71 [ 1972.935113][ T36] usb 7-1: USB disconnect, device number 56 [ 1972.972561][ T7263] udevd[7263]: setting owner of /dev/bus/usb/007/056 to uid=0, gid=0 failed: No such file or directory [ 1973.671882][T16752] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1973.843555][T16752] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1973.843588][T16752] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1973.843611][T16752] usb 4-1: Product: syz [ 1973.889525][T16752] ftdi_sio 4-1:5.0: FTDI USB Serial Device converter detected [ 1973.893546][T16752] usb 4-1: Detected FT4233HP [ 1974.297998][T16752] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1974.317457][T16752] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1974.339238][T16752] usb 4-1: USB disconnect, device number 69 [ 1974.380554][T16752] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1974.409448][ T1011] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1974.431885][T16752] ftdi_sio 4-1:5.0: device disconnected [ 1974.563639][ T1011] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 1974.567794][ T1011] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1974.567825][ T1011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1974.567849][ T1011] usb 2-1: Product: syz [ 1974.567866][ T1011] usb 2-1: Manufacturer: syz [ 1974.567883][ T1011] usb 2-1: SerialNumber: syz [ 1974.622513][ T1011] usb 2-1: config 0 descriptor?? [ 1975.015839][T16752] usb 2-1: USB disconnect, device number 78 [ 1975.952854][T16553] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 1979.187103][T17385] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1979.648462][T17385] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1979.651654][T17385] overlayfs: failed to look up (tracing) for ino (-66) [ 1980.526110][T16553] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1980.993028][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.993475][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1982.933063][T16553] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 1983.043263][T16553] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 1984.209024][ T36] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1984.359102][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 1984.377228][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1984.377266][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1984.377286][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1984.377302][ T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1984.377319][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1984.435918][ T36] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1984.435940][ T36] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1984.435954][ T36] usb 2-1: Manufacturer: syz [ 1984.474037][ T36] usb 2-1: config 0 descriptor?? [ 1984.930958][ T36] rc_core: IR keymap rc-hauppauge not found [ 1984.930979][ T36] Registered IR keymap rc-empty [ 1984.955272][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1984.969086][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1984.992688][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1985.019471][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input67 [ 1985.027524][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.051359][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.069156][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.089102][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.109155][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.130666][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.149467][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.176412][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.192369][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.211860][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.229089][ T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1985.317224][ T36] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1985.317249][ T36] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1985.381676][ T36] usb 2-1: USB disconnect, device number 79 [ 1992.027250][T12016] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1992.093096][T17465] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1992.192975][T12016] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1992.193004][T12016] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1992.193030][T12016] usb 3-1: config 0 has no interface number 0 [ 1992.195319][T12016] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1992.195349][T12016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.195362][T12016] usb 3-1: Product: syz [ 1992.195372][T12016] usb 3-1: Manufacturer: syz [ 1992.195381][T12016] usb 3-1: SerialNumber: syz [ 1992.231568][T12016] usb 3-1: config 0 descriptor?? [ 1992.643982][T12016] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1992.644009][T12016] uvcvideo 3-1:0.64: No valid video chain found. [ 1992.956643][T10996] usb 3-1: USB disconnect, device number 84 [ 1997.252320][T16553] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 2001.645017][T17509] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3421'. [ 2013.012474][T17546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3428'. [ 2013.012510][T17546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 2014.775742][T17546] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2014.775883][T17546] bridge1: entered promiscuous mode [ 2014.775905][T17546] bridge1: entered allmulticast mode [ 2016.767459][T17567] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3434'. [ 2017.224853][T16553] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 2017.537314][T17574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3441'. [ 2017.537339][T17574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 2017.562710][T17574] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 2017.562731][T17574] bridge2: entered promiscuous mode [ 2017.562745][T17574] bridge2: entered allmulticast mode [ 2024.919364][T17599] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3452'. [ 2033.395888][T16553] Bluetooth: hci4: unexpected event for opcode 0x0c56 [ 2033.519583][T17647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3464'. [ 2033.519621][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 2033.682417][T17647] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 2033.682450][T17647] bridge3: entered promiscuous mode [ 2033.682473][T17647] bridge3: entered allmulticast mode [ 2033.889030][T10996] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2034.049113][T10996] usb 6-1: Using ep0 maxpacket: 16 [ 2034.051476][T10996] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2034.051548][T10996] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2034.054121][T10996] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2034.054150][T10996] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2034.054173][T10996] usb 6-1: Manufacturer: syz [ 2034.145155][T10996] usb 6-1: config 0 descriptor?? [ 2034.256119][T16553] Bluetooth: hci3: unexpected event for opcode 0x007f [ 2035.454105][T17336] Bluetooth: hci5: unexpected event for opcode 0x007f [ 2037.616618][T10996] usb 6-1: USB disconnect, device number 37 [ 2042.397245][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.397317][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.566904][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3479'. [ 2043.649276][ T1011] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2045.500528][ T1011] usb 3-1: Using ep0 maxpacket: 8 [ 2045.671831][T12016] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2045.728380][ T1011] usb 3-1: device descriptor read/all, error -71 [ 2045.860684][T12016] usb 2-1: Using ep0 maxpacket: 8 [ 2045.874495][T12016] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2045.874556][T12016] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2045.874582][T12016] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2045.874624][T12016] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2045.874656][T12016] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2045.874702][T12016] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2045.874727][T12016] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.926134][T17703] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3476'. [ 2045.926237][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 2046.015830][T17703] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 2046.015862][T17703] bridge1: entered promiscuous mode [ 2046.015884][T17703] bridge1: entered allmulticast mode [ 2046.220371][T12016] usb 2-1: GET_CAPABILITIES returned 0 [ 2046.220435][T12016] usbtmc 2-1:16.0: can't read capabilities [ 2047.766685][T16752] usb 2-1: USB disconnect, device number 80 [ 2049.229062][T16101] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2049.379045][T16101] usb 6-1: Using ep0 maxpacket: 16 [ 2049.381041][T16101] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.381096][T16101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2049.381125][T16101] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2049.381141][T16101] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2049.381159][T16101] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2049.382379][T16101] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2049.382413][T16101] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2049.382428][T16101] usb 6-1: Manufacturer: syz [ 2049.388389][T16101] usb 6-1: config 0 descriptor?? [ 2049.695118][T17726] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2049.695528][T17726] overlayfs: overlapping lowerdir path [ 2049.709021][T16101] rc_core: IR keymap rc-hauppauge not found [ 2049.709043][T16101] Registered IR keymap rc-empty [ 2049.709209][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2049.734554][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2049.894583][T16101] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2049.933962][T16101] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68 [ 2050.906047][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2050.919094][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2050.939110][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2050.959118][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2050.979090][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2050.999052][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2051.019076][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2051.039095][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2051.059481][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2051.080200][T16101] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 2051.470586][T16101] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2051.470614][T16101] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2052.442900][T16101] usb 6-1: USB disconnect, device number 38 [ 2059.200589][T10996] ------------[ cut here ]------------ [ 2059.200637][T10996] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 2059.200664][T10996] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:0/10996 [ 2059.200874][T10996] Modules linked in: [ 2059.200907][T10996] CPU: 0 UID: 0 PID: 10996 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2059.200941][T10996] Tainted: [L]=SOFTLOCKUP [ 2059.200950][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2059.200966][T10996] Workqueue: events drm_fb_helper_damage_work [ 2059.201053][T10996] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 2059.201083][T10996] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 2059.201104][T10996] RSP: 0018:ffffc900065af8c0 EFLAGS: 00010246 [ 2059.201136][T10996] RAX: 1ffff11004c98800 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 2059.201153][T10996] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 2059.201171][T10996] RBP: ffffc900065af9a8 R08: 0000000000000000 R09: 0000000000000000 [ 2059.201186][T10996] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 2059.201204][T10996] R13: ffff8880264c4000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 2059.201221][T10996] FS: 0000000000000000(0000) GS:ffff888126170000(0000) knlGS:0000000000000000 [ 2059.201240][T10996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2059.201256][T10996] CR2: 000055555a25d4e8 CR3: 0000000072e3e000 CR4: 00000000003526f0 [ 2059.201275][T10996] Call Trace: [ 2059.201285][T10996] [ 2059.201300][T10996] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 2059.201330][T10996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2059.201445][T10996] ? rt_spin_unlock+0x160/0x200 [ 2059.201568][T10996] ? drm_vblank_get+0x147/0x260 [ 2059.201596][T10996] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 2059.201657][T10996] drm_fb_helper_damage_work+0x131/0x6f0 [ 2059.201689][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.201772][T10996] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 2059.201807][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.201831][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.201858][T10996] process_scheduled_works+0xb5d/0x1860 [ 2059.201919][T10996] ? __pfx_process_scheduled_works+0x10/0x10 [ 2059.201952][T10996] ? assign_work+0x3d5/0x5e0 [ 2059.201983][T10996] worker_thread+0xa53/0xfc0 [ 2059.202062][T10996] kthread+0x388/0x470 [ 2059.202117][T10996] ? __pfx_worker_thread+0x10/0x10 [ 2059.202141][T10996] ? __pfx_kthread+0x10/0x10 [ 2059.202173][T10996] ret_from_fork+0x514/0xb70 [ 2059.202223][T10996] ? __pfx_ret_from_fork+0x10/0x10 [ 2059.202250][T10996] ? __switch_to+0xc79/0x1410 [ 2059.202287][T10996] ? __pfx_kthread+0x10/0x10 [ 2059.202320][T10996] ret_from_fork_asm+0x1a/0x30 [ 2059.202384][T10996] [ 2059.202396][T10996] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2059.202419][T10996] CPU: 0 UID: 0 PID: 10996 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2059.202450][T10996] Tainted: [L]=SOFTLOCKUP [ 2059.202458][T10996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2059.202473][T10996] Workqueue: events drm_fb_helper_damage_work [ 2059.202501][T10996] Call Trace: [ 2059.202510][T10996] [ 2059.202519][T10996] vpanic+0x56c/0xa60 [ 2059.202560][T10996] ? __pfx__printk+0x10/0x10 [ 2059.202593][T10996] ? __pfx_vpanic+0x10/0x10 [ 2059.202620][T10996] ? is_bpf_text_address+0x292/0x2b0 [ 2059.202714][T10996] ? is_bpf_text_address+0x26/0x2b0 [ 2059.202756][T10996] panic+0xc5/0xd0 [ 2059.202784][T10996] ? __pfx_panic+0x10/0x10 [ 2059.202822][T10996] ? ret_from_fork_asm+0x1a/0x30 [ 2059.202857][T10996] __warn+0x315/0x4c0 [ 2059.202883][T10996] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 2059.202913][T10996] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 2059.202943][T10996] __report_bug+0x29a/0x540 [ 2059.203054][T10996] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 2059.203084][T10996] ? __pfx___report_bug+0x10/0x10 [ 2059.203127][T10996] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 2059.203154][T10996] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 2059.203193][T10996] report_bug_entry+0x19a/0x290 [ 2059.203226][T10996] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 2059.203253][T10996] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 2059.203282][T10996] handle_bug+0xce/0x200 [ 2059.203327][T10996] exc_invalid_op+0x1a/0x50 [ 2059.203351][T10996] asm_exc_invalid_op+0x1a/0x20 [ 2059.203395][T10996] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 2059.203424][T10996] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 2059.203445][T10996] RSP: 0018:ffffc900065af8c0 EFLAGS: 00010246 [ 2059.203465][T10996] RAX: 1ffff11004c98800 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 2059.203483][T10996] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 2059.203501][T10996] RBP: ffffc900065af9a8 R08: 0000000000000000 R09: 0000000000000000 [ 2059.203516][T10996] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 2059.203539][T10996] R13: ffff8880264c4000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 2059.203581][T10996] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 2059.203612][T10996] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2059.203656][T10996] ? rt_spin_unlock+0x160/0x200 [ 2059.203685][T10996] ? drm_vblank_get+0x147/0x260 [ 2059.203714][T10996] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 2059.203753][T10996] drm_fb_helper_damage_work+0x131/0x6f0 [ 2059.203785][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.203815][T10996] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 2059.203868][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.203899][T10996] ? process_scheduled_works+0xa70/0x1860 [ 2059.203927][T10996] process_scheduled_works+0xb5d/0x1860 [ 2059.203989][T10996] ? __pfx_process_scheduled_works+0x10/0x10 [ 2059.204024][T10996] ? assign_work+0x3d5/0x5e0 [ 2059.204056][T10996] worker_thread+0xa53/0xfc0 [ 2059.204115][T10996] kthread+0x388/0x470 [ 2059.204147][T10996] ? __pfx_worker_thread+0x10/0x10 [ 2059.204171][T10996] ? __pfx_kthread+0x10/0x10 [ 2059.204205][T10996] ret_from_fork+0x514/0xb70 [ 2059.204234][T10996] ? __pfx_ret_from_fork+0x10/0x10 [ 2059.204262][T10996] ? __switch_to+0xc79/0x1410 [ 2059.204300][T10996] ? __pfx_kthread+0x10/0x10 [ 2059.204333][T10996] ret_from_fork_asm+0x1a/0x30 [ 2059.204382][T10996] [ 2059.204808][T10996] Kernel Offset: disabled