last executing test programs: 9.017253047s ago: executing program 3 (id=102): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f010000000000000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.74852271s ago: executing program 1 (id=106): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x7, 0x3, 0x4, 0x3, 0x3e, 0xfffffff6, 0x3da, 0x40, 0x2d1, 0xd2d, 0x5, 0x38, 0x1, 0x78, 0x7, 0x4004}, [{0x3, 0x880, 0x4, 0x6, 0x7f, 0x2, 0x6, 0x7}]}, 0x78) close(0xffffffffffffffff) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000000c0)={r4, 0x0, 0x4, 0x0, 0x8001}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x17, 0x0, 0x20) 5.851840253s ago: executing program 3 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.494186188s ago: executing program 2 (id=109): r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x2, 0x7]) 5.36892197s ago: executing program 2 (id=110): socket$packet(0x11, 0x0, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.247634022s ago: executing program 1 (id=111): socket$netlink(0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000600"], 0x50) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f505010003010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000680)=""/199, 0x11f, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100004, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 4.338839766s ago: executing program 2 (id=114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, 0x0, 0xb) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 3.893352192s ago: executing program 3 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)="e7b65893cde8d8daa2c6907c81b6c7af7a2a6feeb86a359a76b161f85d0079ac6a8b34d5012639741d6b6c3d46e8db58a8a5c6425665f30647ce68c76960c2b338e6072329e035b71ec6855eaeabccbfb89138e4bf864aeafe33d48d6f9fc2ae2104a25652d7b0fb7b74c306f3125dc7ae59d32a3fccb2067243da536ae918d94b3032c8f316c551d60b9672208c", 0x8e, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) 3.444044649s ago: executing program 2 (id=117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f78d9ca38fff4873be521e344880", 0xe}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x4040005) recvmsg(r1, 0x0, 0x150) 3.307706721s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.094163994s ago: executing program 2 (id=119): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff1100000066c1532cc10200000003125ce882cb", 0x26}], 0x1}, 0x4005) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.167532948s ago: executing program 1 (id=120): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.073410219s ago: executing program 0 (id=121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.978604731s ago: executing program 0 (id=122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x8}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/58, 0x3a}, {0xfffffffffffffffe}, {&(0x7f0000000780)=""/24, 0x18}, {0x0}, {&(0x7f0000001980)=""/136, 0x88}, {&(0x7f00000001c0)=""/49, 0x31}], 0x8}, 0x9}], 0x2, 0x40000023, 0x0) 1.973062921s ago: executing program 3 (id=123): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x4004850) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 1.819093213s ago: executing program 0 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1101}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x4, 0x0, &(0x7f00000002c0)=[@enter_looper], 0x1000, 0x0, &(0x7f0000001580)="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"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @local, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}], 0x2, 0xc040) 1.818160083s ago: executing program 1 (id=125): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, 0x0, 0xb) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 1.794256634s ago: executing program 3 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 859.928718ms ago: executing program 1 (id=127): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="f78d9ca38fff4873be521e344880", 0xe}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x4040005) recvmsg(r1, 0x0, 0x150) 794.227769ms ago: executing program 0 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 704.722339ms ago: executing program 1 (id=129): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 551.702962ms ago: executing program 0 (id=130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 474.903703ms ago: executing program 0 (id=131): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000440)="15b71d60541c2e4ef743bfcb8d4c6da0b57433d9075aecb2e71e9a99b6efc865c4b3bcfe2e7a5b02ba745e8804b7281470172252ad797105004b6d28dc9d9f33e7d8b8affb3211e81832106b0f15f2cac33c89df2542bc31e65e7c06e8608b3f8cea7342") syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f00000002c0)) 0s ago: executing program 3 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)="e7b65893cde8d8daa2c6907c81b6c7af7a2a6feeb86a359a76b161f85d0079ac6a8b34d5012639741d6b6c3d46e8db58a8a5c6425665f30647ce68c76960c2b338e6072329e035b71ec6855eaeabccbfb89138e4bf864aeafe33d48d6f9fc2ae2104a25652d7b0fb7b74c306f3125dc7ae59d32a3fccb2067243da536ae918d94b3032c8f316c551d60b9672208c", 0x8e, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, &(0x7f0000000000)) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x3f00000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 77.512250][ T5762] cgroup: Unknown subsys name 'net' [ 77.625697][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.292387][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.191955][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.200980][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.211411][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.220263][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.230236][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.238687][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.247151][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.254639][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.262884][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.271838][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.280638][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.289811][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.298313][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.307049][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.314434][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.322545][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.353460][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.386879][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.418731][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.436695][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.444473][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.446712][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.461927][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.469760][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.957408][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 81.995358][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.029370][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.114517][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 82.250297][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.258136][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.265456][ T5780] bridge_slave_0: entered allmulticast mode [ 82.273004][ T5780] bridge_slave_0: entered promiscuous mode [ 82.292543][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.299870][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.307734][ T5778] bridge_slave_0: entered allmulticast mode [ 82.315243][ T5778] bridge_slave_0: entered promiscuous mode [ 82.335046][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.342565][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.349969][ T5780] bridge_slave_1: entered allmulticast mode [ 82.358214][ T5780] bridge_slave_1: entered promiscuous mode [ 82.377412][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.384586][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.391933][ T5774] bridge_slave_0: entered allmulticast mode [ 82.399578][ T5774] bridge_slave_0: entered promiscuous mode [ 82.408464][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.415628][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.423325][ T5778] bridge_slave_1: entered allmulticast mode [ 82.431109][ T5778] bridge_slave_1: entered promiscuous mode [ 82.475870][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.484712][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.495013][ T5774] bridge_slave_1: entered allmulticast mode [ 82.502242][ T5774] bridge_slave_1: entered promiscuous mode [ 82.523858][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.580334][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.591807][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.607018][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.620120][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.629862][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.638194][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.645451][ T5775] bridge_slave_0: entered allmulticast mode [ 82.652680][ T5775] bridge_slave_0: entered promiscuous mode [ 82.662593][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.726305][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.733465][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.740895][ T5775] bridge_slave_1: entered allmulticast mode [ 82.748509][ T5775] bridge_slave_1: entered promiscuous mode [ 82.768383][ T5774] team0: Port device team_slave_0 added [ 82.777781][ T5778] team0: Port device team_slave_0 added [ 82.787400][ T5778] team0: Port device team_slave_1 added [ 82.796871][ T5780] team0: Port device team_slave_0 added [ 82.816220][ T5774] team0: Port device team_slave_1 added [ 82.833260][ T5780] team0: Port device team_slave_1 added [ 82.917534][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.930353][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.940930][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.948377][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.974566][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.988553][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.995541][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.022129][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.035331][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.042805][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.069018][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.082563][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.089697][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.116080][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.140507][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.148539][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.182236][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.195520][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.206029][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.232082][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.279319][ T5775] team0: Port device team_slave_0 added [ 83.305059][ T5775] team0: Port device team_slave_1 added [ 83.336728][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.343728][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.371104][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.396996][ T5789] Bluetooth: hci3: command tx timeout [ 83.432937][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.440071][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.466180][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.490769][ T5774] hsr_slave_0: entered promiscuous mode [ 83.498918][ T5774] hsr_slave_1: entered promiscuous mode [ 83.512469][ T5780] hsr_slave_0: entered promiscuous mode [ 83.519073][ T5780] hsr_slave_1: entered promiscuous mode [ 83.525337][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.533345][ T5780] Cannot create hsr debugfs directory [ 83.556123][ T5789] Bluetooth: hci0: command tx timeout [ 83.556157][ T5783] Bluetooth: hci1: command tx timeout [ 83.556435][ T5783] Bluetooth: hci2: command tx timeout [ 83.576241][ T5778] hsr_slave_0: entered promiscuous mode [ 83.582684][ T5778] hsr_slave_1: entered promiscuous mode [ 83.591499][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.599693][ T5778] Cannot create hsr debugfs directory [ 83.731750][ T5775] hsr_slave_0: entered promiscuous mode [ 83.738226][ T5775] hsr_slave_1: entered promiscuous mode [ 83.744415][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.752707][ T5775] Cannot create hsr debugfs directory [ 84.165660][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.181729][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.193414][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.220602][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.282080][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.294327][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.314373][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.327348][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.414638][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.439041][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.452267][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.467133][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.559599][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.590839][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.619745][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.632362][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.672021][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.749780][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.767991][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.793357][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.800719][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.841103][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.848281][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.894706][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.917931][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.925110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.972926][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.980148][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.999999][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.023507][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.127334][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.147367][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.188295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.195890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.218654][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.225855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.259288][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.266530][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.291791][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.299014][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.478337][ T5783] Bluetooth: hci3: command tx timeout [ 85.614462][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.636963][ T5783] Bluetooth: hci0: command tx timeout [ 85.638707][ T5084] Bluetooth: hci1: command tx timeout [ 85.642410][ T5783] Bluetooth: hci2: command tx timeout [ 85.749572][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.815672][ T5780] veth0_vlan: entered promiscuous mode [ 85.860271][ T5780] veth1_vlan: entered promiscuous mode [ 85.906519][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.947956][ T5775] veth0_vlan: entered promiscuous mode [ 85.972664][ T5775] veth1_vlan: entered promiscuous mode [ 86.028765][ T5780] veth0_macvtap: entered promiscuous mode [ 86.043588][ T5780] veth1_macvtap: entered promiscuous mode [ 86.077495][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.089019][ T5775] veth0_macvtap: entered promiscuous mode [ 86.103442][ T5775] veth1_macvtap: entered promiscuous mode [ 86.154325][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.177183][ T5778] veth0_vlan: entered promiscuous mode [ 86.191653][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.203055][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.215823][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.235117][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.260168][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.269660][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.279323][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.288932][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.309433][ T5778] veth1_vlan: entered promiscuous mode [ 86.330053][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.341444][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.354208][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.384853][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.395736][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.406528][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.415277][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.429206][ T5774] veth0_vlan: entered promiscuous mode [ 86.491128][ T5778] veth0_macvtap: entered promiscuous mode [ 86.525235][ T5774] veth1_vlan: entered promiscuous mode [ 86.547502][ T5778] veth1_macvtap: entered promiscuous mode [ 86.614149][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.622816][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.662270][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.676934][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.687596][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.700108][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711789][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.764461][ T5774] veth0_macvtap: entered promiscuous mode [ 86.781520][ T5774] veth1_macvtap: entered promiscuous mode [ 86.795779][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.807462][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.808889][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.826201][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.835502][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.846669][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.859046][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.882309][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.892174][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.905244][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.914283][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.936003][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.943983][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.979485][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.994413][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.016041][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.040049][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.050658][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.067308][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.091072][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.104783][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.134656][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.172890][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.204236][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.214329][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.230024][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.240385][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.251242][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.277872][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.329356][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.353316][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.363642][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.372887][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.556430][ T5783] Bluetooth: hci3: command tx timeout [ 87.678722][ T5841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.716412][ T5783] Bluetooth: hci1: command tx timeout [ 87.716431][ T5084] Bluetooth: hci0: command tx timeout [ 87.721889][ T5783] Bluetooth: hci2: command tx timeout [ 87.800125][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.812218][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.915117][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.951020][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.069562][ T5841] Zero length message leads to an empty skb [ 88.079038][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.106835][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.193817][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.231927][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.917173][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.146537][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 89.179799][ T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.199271][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.216050][ T23] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 89.237015][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.283116][ T23] usb 1-1: config 0 descriptor?? [ 89.356330][ T5820] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.550382][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 89.578565][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.610834][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18176, setting to 1024 [ 89.637107][ T5783] Bluetooth: hci3: command tx timeout [ 89.646612][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.660204][ T5820] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.696674][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.764125][ T5820] usb 3-1: config 0 descriptor?? [ 89.796724][ T5783] Bluetooth: hci0: command tx timeout [ 89.796753][ T5789] Bluetooth: hci2: command tx timeout [ 89.807865][ T5084] Bluetooth: hci1: command tx timeout [ 89.816566][ T5856] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 89.876870][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.931156][ T23] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 90.302513][ T5820] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 90.449845][ T5820] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 90.473264][ T23] usb 1-1: USB disconnect, device number 2 [ 90.728772][ T5818] usb 3-1: USB disconnect, device number 2 [ 91.255793][ T5881] binder: 5880:5881 ioctl c0306201 0 returned -14 [ 91.517976][ T5885] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12'. [ 91.797848][ T5155] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.846778][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.029809][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.040309][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 92.048539][ T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.056821][ T23] usb 1-1: config 0 has no interface number 0 [ 92.092273][ T23] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 92.106070][ T5155] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.109710][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.129899][ T23] usb 1-1: Product: syz [ 92.134130][ T23] usb 1-1: Manufacturer: syz [ 92.141196][ T23] usb 1-1: SerialNumber: syz [ 92.146099][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.155553][ T8] cfg80211: failed to load regulatory.db [ 92.168013][ T23] usb 1-1: config 0 descriptor?? [ 92.194192][ T5155] usb 3-1: config 0 descriptor?? [ 92.208646][ T23] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 92.277188][ T5818] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.479126][ T5818] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 92.500695][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.530295][ T5818] usb 4-1: config 0 descriptor?? [ 92.684979][ T5155] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 92.723750][ T23] gspca_spca1528: reg_w err -110 [ 92.736953][ T5155] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 92.757520][ T23] spca1528: probe of 1-1:0.1 failed with error -110 [ 93.052617][ T5155] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 93.257694][ T5155] usb 3-1: USB disconnect, device number 3 [ 93.382317][ T5896] fido_id[5896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 93.398740][ T5818] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 93.415197][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 93.418149][ T5818] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 93.438552][ T5818] [drm:udl_init] *ERROR* Selecting channel failed [ 93.500003][ T5818] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 93.516139][ T5818] [drm] Initialized udl on minor 2 [ 93.542571][ T5818] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 93.573588][ T5818] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 93.605194][ T23] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 93.614374][ T5818] usb 4-1: USB disconnect, device number 2 [ 93.637080][ T23] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 93.653721][ T5885] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 93.812995][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.998308][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 94.012377][ T5786] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 94.023694][ T5786] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 94.035272][ T5786] usb 2-1: config 166 has no interface number 0 [ 94.045567][ T5786] usb 2-1: config 166 has no interface number 1 [ 94.059836][ T5786] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 94.072143][ T5786] usb 2-1: config 166 interface 177 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 94.087982][ T5786] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 94.100334][ T5786] usb 2-1: config 166 interface 34 altsetting 1 has an invalid endpoint with address 0xA6, skipping [ 94.112060][ T5786] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 94.125413][ T5786] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 94.135639][ T5155] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.147588][ T5786] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.161471][ T5786] usb 2-1: config 166 interface 177 has no altsetting 0 [ 94.168635][ T5786] usb 2-1: config 166 interface 34 has no altsetting 0 [ 94.183920][ T5786] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 94.204631][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.213758][ T5786] usb 2-1: Product: syz [ 94.218303][ T5786] usb 2-1: Manufacturer: syz [ 94.223034][ T5786] usb 2-1: SerialNumber: syz [ 94.279891][ T5912] binder: 5911:5912 ioctl c0306201 0 returned -14 [ 94.333829][ T5155] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.366791][ T5155] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 94.381573][ T5155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 94.390923][ T5155] usb 3-1: Product: syz [ 94.395210][ T5155] usb 3-1: Manufacturer: syz [ 94.401381][ T5155] usb 3-1: SerialNumber: syz [ 94.444121][ T5786] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 94.525116][ T5786] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 94.599457][ T5786] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 94.606603][ T5786] usb 2-1: No valid video chain found. [ 94.617950][ T5786] usb 2-1: USB disconnect, device number 2 [ 94.651165][ T5155] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.681539][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.876117][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 94.888063][ T8] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.899470][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.907133][ T8] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 94.916471][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.929223][ T8] usb 4-1: config 0 descriptor?? [ 95.013854][ T5818] usb 1-1: USB disconnect, device number 3 [ 95.382962][ T8] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 95.858815][ T5818] usb 4-1: USB disconnect, device number 3 [ 96.306131][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.506059][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 96.533446][ T23] usb 1-1: config 0 has no interfaces? [ 96.560254][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 96.581402][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.593883][ T23] usb 1-1: Product: syz [ 96.609737][ T23] usb 1-1: Manufacturer: syz [ 96.619305][ T23] usb 1-1: SerialNumber: syz [ 96.649882][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 96.776030][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.927393][ T28] usb 3-1: USB disconnect, device number 4 [ 96.968220][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.981713][ T28] usblp0: removed [ 96.998571][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.041170][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.072125][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 97.093833][ T8] usb 4-1: config 0 descriptor?? [ 97.110477][ T23] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 97.534673][ T8] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 97.558417][ T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input7 [ 97.806041][ T8] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 97.862069][ T5947] binder: 5946:5947 ioctl c0306201 0 returned -14 [ 98.130265][ T23] usb 4-1: USB disconnect, device number 4 [ 98.910066][ T5955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.31'. [ 99.077765][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.236230][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.243925][ T23] usb 1-1: device descriptor read/64, error -71 [ 99.436820][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 99.465153][ T28] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.484922][ T28] usb 4-1: config 0 has no interface number 0 [ 99.510754][ T28] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 99.526097][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.548170][ T28] usb 4-1: Product: syz [ 99.556102][ T28] usb 4-1: Manufacturer: syz [ 99.561871][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 99.580519][ T28] usb 4-1: SerialNumber: syz [ 99.595668][ T28] usb 4-1: config 0 descriptor?? [ 99.614716][ T28] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 99.746193][ T23] usb 1-1: device descriptor read/64, error -71 [ 99.897717][ T23] usb usb1-port1: attempt power cycle [ 100.136207][ T28] gspca_spca1528: reg_w err -110 [ 100.186338][ T28] spca1528: probe of 4-1:0.1 failed with error -110 [ 100.390334][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.449652][ T23] usb 1-1: device descriptor read/8, error -71 [ 100.576125][ T5955] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 100.766469][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 100.826432][ T23] usb 1-1: device descriptor read/8, error -71 [ 100.956990][ T23] usb usb1-port1: unable to enumerate USB device [ 101.126521][ T5155] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.316128][ T5155] usb 3-1: Using ep0 maxpacket: 16 [ 101.323778][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.335139][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18176, setting to 1024 [ 101.346486][ T5155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.361862][ T5155] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.371069][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.382094][ T5155] usb 3-1: config 0 descriptor?? [ 101.391721][ T5969] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 101.526090][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.710440][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.726573][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 101.735583][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.751704][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.760964][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.774382][ T8] usb 2-1: Product: syz [ 101.780473][ T8] usb 2-1: Manufacturer: syz [ 101.785162][ T8] usb 2-1: SerialNumber: syz [ 101.837882][ T8] cdc_mbim 2-1:1.0: skipping garbage [ 101.843272][ T8] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 101.853052][ T5155] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0006/input/input8 [ 101.886172][ T8] cdc_mbim 2-1:1.0: bind() failure [ 101.983558][ T5155] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 102.033839][ T5818] usb 3-1: USB disconnect, device number 5 [ 102.141821][ T5974] fido_id[5974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.226113][ T28] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.254384][ T5155] usb 4-1: USB disconnect, device number 5 [ 102.416158][ T28] usb 1-1: Using ep0 maxpacket: 16 [ 102.425359][ T28] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.437035][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.443717][ T28] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 102.453188][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.465731][ T28] usb 1-1: config 0 descriptor?? [ 102.697991][ T5155] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.898181][ T5155] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.917806][ T28] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 102.952056][ T5155] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.965818][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.990058][ T5155] usb 4-1: Product: syz [ 103.008157][ T5155] usb 4-1: Manufacturer: syz [ 103.012870][ T5155] usb 4-1: SerialNumber: syz [ 103.246157][ T56] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 103.448978][ T56] usb 3-1: config 0 has no interfaces? [ 103.458210][ T56] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 103.467729][ T56] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 103.477818][ T56] usb 3-1: Manufacturer: syz [ 103.483048][ T56] usb 3-1: SerialNumber: syz [ 103.491827][ T56] usb 3-1: config 0 descriptor?? [ 104.290774][ T5837] usb 2-1: USB disconnect, device number 3 [ 104.736028][ T5837] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.921555][ T56] usb 1-1: USB disconnect, device number 9 [ 104.949790][ T5837] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.970094][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.983830][ T5837] usb 2-1: Product: syz [ 104.993816][ T5837] usb 2-1: Manufacturer: syz [ 105.001876][ T5837] usb 2-1: SerialNumber: syz [ 105.227676][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.248126][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.356672][ T5155] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 105.389703][ T5155] usb 4-1: USB disconnect, device number 6 [ 105.421099][ T5155] usblp0: removed [ 105.457676][ T27] audit: type=1326 audit(1782457439.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.3.43" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eee79ce59 code=0x0 [ 105.491389][ T5994] loop9: detected capacity change from 0 to 8 [ 105.539249][ T5994] loop9: detected capacity change from 8 to 7 [ 105.549429][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.584075][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.593577][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.603292][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.612573][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.626439][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.635685][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.648858][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.658138][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.667024][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.669743][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 105.676232][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.705366][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 105.734266][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.745953][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.755200][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.763072][ C0] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.772238][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 105.780131][ C0] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 105.789715][ C0] Buffer I/O error on dev loop9, logical block 2, async page read [ 105.797590][ C0] Buffer I/O error on dev loop9, logical block 3, async page read [ 105.805444][ C0] Buffer I/O error on dev loop9, logical block 4, async page read [ 105.824808][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 105.850331][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.869535][ T5837] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.898181][ T5999] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 105.898369][ T5837] lan78xx: probe of 2-1:1.0 failed with error -71 [ 105.940917][ T5837] usb 2-1: USB disconnect, device number 4 [ 106.032004][ T5155] usb 3-1: USB disconnect, device number 6 [ 106.357286][ T5837] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.549691][ T5837] usb 2-1: device descriptor read/64, error -71 [ 106.826007][ T5837] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.886011][ T5786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.986042][ T5837] usb 2-1: device descriptor read/64, error -71 [ 107.068044][ T5786] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 107.084390][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.122861][ T5837] usb usb2-port1: attempt power cycle [ 107.128773][ T5786] usb 3-1: config 0 descriptor?? [ 107.246032][ T28] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.446099][ T28] usb 4-1: Using ep0 maxpacket: 16 [ 107.483969][ T28] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.503584][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.514315][ T28] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 107.530852][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.556297][ T5837] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.582391][ T28] usb 4-1: config 0 descriptor?? [ 107.597123][ T5837] usb 2-1: device descriptor read/8, error -71 [ 107.629698][ T5786] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 107.649663][ T5786] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 107.662369][ T5786] [drm:udl_init] *ERROR* Selecting channel failed [ 107.704663][ T5786] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 107.714675][ T5786] [drm] Initialized udl on minor 2 [ 107.721496][ T5786] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.741751][ T5786] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 107.758009][ T5155] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 107.773946][ T5786] usb 3-1: USB disconnect, device number 7 [ 107.780245][ T5155] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 107.876079][ T5837] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.912473][ T5837] usb 2-1: device descriptor read/8, error -71 [ 107.986079][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.025217][ T28] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 108.037316][ T5837] usb usb2-port1: unable to enumerate USB device [ 108.168550][ T23] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 108.182605][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.196033][ T23] usb 1-1: config 0 descriptor?? [ 108.529988][ T23] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 108.545047][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 108.554143][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 108.578984][ T23] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 108.591284][ T23] [drm] Initialized udl on minor 2 [ 108.598000][ T23] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 108.606918][ T23] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 108.619788][ T23] usb 1-1: USB disconnect, device number 10 [ 108.626478][ T5820] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 108.638747][ T5820] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 109.366115][ T5786] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 109.559272][ T5786] usb 2-1: config 0 has no interfaces? [ 109.582062][ T5786] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 109.592446][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 109.606517][ T5786] usb 2-1: Manufacturer: syz [ 109.613754][ T5786] usb 2-1: SerialNumber: syz [ 109.636631][ T5786] usb 2-1: config 0 descriptor?? [ 109.816104][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 109.998952][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.034463][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.061334][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 110.071584][ T5786] usb 4-1: USB disconnect, device number 7 [ 110.082072][ T23] usb 3-1: Product: syz [ 110.092155][ T23] usb 3-1: Manufacturer: syz [ 110.115819][ T23] usb 3-1: SerialNumber: syz [ 110.365662][ T23] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 110.636834][ T23] usb 3-1: USB disconnect, device number 8 [ 110.695728][ T23] usblp0: removed [ 111.446990][ T5155] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.486030][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.636028][ T23] usb 4-1: device descriptor read/64, error -71 [ 111.645381][ T5155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.656781][ T5155] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.666072][ T5155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.677937][ T5155] usb 1-1: config 0 descriptor?? [ 111.906214][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.980756][ T28] usb 2-1: USB disconnect, device number 9 [ 112.066365][ T23] usb 4-1: device descriptor read/64, error -71 [ 112.106979][ T5155] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 112.142400][ T5155] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input9 [ 112.186271][ T23] usb usb4-port1: attempt power cycle [ 112.287420][ T5155] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 112.533814][ T5155] usb 1-1: USB disconnect, device number 11 [ 112.599955][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.639283][ T23] usb 4-1: device descriptor read/8, error -71 [ 112.726116][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 112.816090][ T5786] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 112.912609][ T28] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 112.922868][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 112.931059][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.942198][ T28] usb 3-1: config 0 descriptor?? [ 112.980078][ T23] usb 4-1: device descriptor read/8, error -71 [ 112.996157][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 113.003602][ T5786] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.015131][ T5786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.021895][ T5786] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.032945][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.043867][ T5786] usb 2-1: config 0 descriptor?? [ 113.117058][ T23] usb usb4-port1: unable to enumerate USB device [ 113.340753][ T28] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 113.353574][ T28] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 113.389411][ T28] [drm:udl_init] *ERROR* Selecting channel failed [ 113.417515][ T28] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 113.436629][ T28] [drm] Initialized udl on minor 2 [ 113.452972][ T28] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.469349][ T28] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 113.477894][ T23] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.505569][ T23] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 113.525375][ T28] usb 3-1: USB disconnect, device number 9 [ 113.534581][ T23] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 113.554332][ T5786] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 114.948857][ T5786] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 115.039069][ T6091] syz.0.73[6091]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 115.078591][ T6093] fuse: Unknown parameter 'group_id00000000000000000000' [ 115.171605][ T5786] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.201091][ T5786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 115.220237][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 115.231309][ T5786] usb 4-1: Product: syz [ 115.235678][ T5786] usb 4-1: Manufacturer: syz [ 115.247649][ T5786] usb 4-1: SerialNumber: syz [ 115.326883][ T56] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.474150][ T5786] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.526702][ T56] usb 1-1: Using ep0 maxpacket: 16 [ 115.545086][ T5786] usb 2-1: USB disconnect, device number 10 [ 115.554859][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.577415][ T56] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.611235][ T56] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.627090][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.636588][ T56] usb 1-1: Product: syz [ 115.641313][ T56] usb 1-1: Manufacturer: syz [ 115.655942][ T56] usb 1-1: SerialNumber: syz [ 115.730887][ T5155] usb 4-1: USB disconnect, device number 12 [ 115.762956][ T5155] usblp0: removed [ 115.891328][ T56] usb 1-1: 0:2 : does not exist [ 115.911135][ T56] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 115.955975][ T56] usb 1-1: USB disconnect, device number 12 [ 116.013762][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.050582][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.242902][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.261686][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 116.271376][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.295435][ T9] usb 3-1: config 0 descriptor?? [ 116.309372][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.509261][ T6118] binder: BINDER_SET_CONTEXT_MGR already set [ 116.526197][ T6118] binder: 6117:6118 ioctl 4018620d 200000000380 returned -16 [ 117.119192][ T6135] EXT4-fs: Conflicting test_dummy_encryption options [ 117.393231][ T6145] syzkaller0: entered promiscuous mode [ 117.401940][ T6145] syzkaller0: entered allmulticast mode [ 118.020008][ T5155] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 118.208396][ T5155] usb 2-1: config 0 has no interfaces? [ 118.221056][ T5155] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 118.230777][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 118.239771][ T5155] usb 2-1: Manufacturer: syz [ 118.244487][ T5155] usb 2-1: SerialNumber: syz [ 118.252696][ T5155] usb 2-1: config 0 descriptor?? [ 118.386782][ T5786] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 118.578689][ T5786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.590021][ T5786] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.600980][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.614448][ T5786] usb 1-1: config 0 descriptor?? [ 118.783299][ T5820] usb 3-1: USB disconnect, device number 10 [ 118.840460][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 119.043695][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.047064][ T5786] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 119.067705][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 119.081625][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 119.083486][ T5786] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input10 [ 119.109015][ T23] usb 4-1: Product: syz [ 119.119347][ T23] usb 4-1: Manufacturer: syz [ 119.129155][ T23] usb 4-1: SerialNumber: syz [ 119.210728][ T5786] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 119.351796][ T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.376112][ T5820] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.471720][ T23] usb 1-1: USB disconnect, device number 13 [ 119.547704][ T5820] usb 3-1: device descriptor read/64, error -71 [ 119.615041][ T56] usb 4-1: USB disconnect, device number 13 [ 119.642533][ T56] usblp0: removed [ 119.846148][ T5820] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.996189][ T5820] usb 3-1: device descriptor read/64, error -71 [ 120.116608][ T5820] usb usb3-port1: attempt power cycle [ 120.122750][ T6168] binder: BINDER_SET_CONTEXT_MGR already set [ 120.129508][ T6168] binder: 6167:6168 ioctl 4018620d 200000000380 returned -16 [ 120.275050][ T6172] syzkaller0: entered promiscuous mode [ 120.282785][ T6172] syzkaller0: entered allmulticast mode [ 120.566108][ T5820] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.611858][ T5820] usb 3-1: device descriptor read/8, error -71 [ 120.720914][ T56] usb 2-1: USB disconnect, device number 11 [ 120.896133][ T5820] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.931707][ T5820] usb 3-1: device descriptor read/8, error -71 [ 121.066437][ T5820] usb usb3-port1: unable to enumerate USB device [ 122.068983][ T5786] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 122.326817][ T5786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.345260][ T5786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.356136][ T56] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 122.376479][ T5786] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.407335][ T5786] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.420014][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.428149][ T5786] usb 4-1: Product: syz [ 122.436076][ T5786] usb 4-1: Manufacturer: syz [ 122.440761][ T5786] usb 4-1: SerialNumber: syz [ 122.472786][ T5786] cdc_mbim 4-1:1.0: skipping garbage [ 122.478327][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.493874][ T5786] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 122.512452][ T5786] cdc_mbim 4-1:1.0: bind() failure [ 122.531489][ T27] audit: type=1326 audit(1782457456.717:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6205 comm="syz.1.105" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8eaef9ce59 code=0x0 [ 122.556162][ T56] usb 1-1: device descriptor read/64, error -71 [ 122.618325][ T6207] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 122.627032][ T6207] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 122.635413][ T6207] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 122.688295][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.704979][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 122.714257][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 122.722771][ T9] usb 3-1: Product: syz [ 122.727052][ T9] usb 3-1: Manufacturer: syz [ 122.731832][ T9] usb 3-1: SerialNumber: syz [ 122.826112][ T56] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.986090][ T56] usb 1-1: device descriptor read/64, error -71 [ 123.107310][ T56] usb usb1-port1: attempt power cycle [ 123.516208][ T56] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.550960][ T56] usb 1-1: device descriptor read/8, error -71 [ 123.826105][ T56] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 123.867468][ T56] usb 1-1: device descriptor read/8, error -71 [ 123.986454][ T56] usb usb1-port1: unable to enumerate USB device [ 124.336137][ T56] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.528267][ T56] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.537490][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.549379][ T56] usb 2-1: config 0 descriptor?? [ 124.839563][ T8] usb 4-1: USB disconnect, device number 14 [ 124.872442][ T56] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 124.887158][ T56] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 124.911191][ T56] [drm:udl_init] *ERROR* Selecting channel failed [ 124.959909][ T56] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 124.975781][ T56] [drm] Initialized udl on minor 2 [ 124.982412][ T56] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.993455][ T56] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 125.003239][ T28] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.021058][ T56] usb 2-1: USB disconnect, device number 12 [ 125.034077][ T28] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 125.200466][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 125.244696][ T9] usb 3-1: USB disconnect, device number 15 [ 125.262855][ T9] usblp0: removed [ 125.416393][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 125.609328][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.629292][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 125.640621][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 125.653697][ T8] usb 4-1: Product: syz [ 125.658980][ T8] usb 4-1: Manufacturer: syz [ 125.664512][ T8] usb 4-1: SerialNumber: syz [ 125.787018][ T28] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 125.796966][ T6236] binder: BINDER_SET_CONTEXT_MGR already set [ 125.803237][ T6236] binder: 6235:6236 ioctl 4018620d 200000000380 returned -16 [ 125.908277][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 125.999131][ T28] usb 2-1: config 0 has no interfaces? [ 126.008496][ T28] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 126.023838][ T28] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 126.032636][ T28] usb 2-1: Manufacturer: syz [ 126.044028][ T28] usb 2-1: SerialNumber: syz [ 126.052155][ T28] usb 2-1: config 0 descriptor?? [ 126.205747][ T8] usb 4-1: USB disconnect, device number 15 [ 126.241527][ T8] usblp0: removed [ 126.986256][ T28] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 127.168045][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.180267][ T28] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.190288][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.201779][ T28] usb 1-1: config 0 descriptor?? [ 127.207107][ T56] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 127.422079][ T56] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.441185][ T6253] syzkaller0: entered promiscuous mode [ 127.447939][ T6253] syzkaller0: entered allmulticast mode [ 127.455787][ T56] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 127.472362][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.482638][ T56] usb 4-1: Product: syz [ 127.487421][ T56] usb 4-1: Manufacturer: syz [ 127.493109][ T56] usb 4-1: SerialNumber: syz [ 127.644351][ T28] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 127.668286][ T28] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input11 [ 127.737090][ T56] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.773582][ T28] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 127.984198][ T28] usb 4-1: USB disconnect, device number 16 [ 127.986269][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.013898][ T28] usblp0: removed [ 128.083059][ T9] usb 1-1: USB disconnect, device number 18 [ 128.188909][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.205266][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.218182][ T8] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.227660][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.238793][ T8] usb 3-1: config 0 descriptor?? [ 128.455640][ T28] usb 3-1: USB disconnect, device number 16 [ 128.532948][ T8] usb 2-1: USB disconnect, device number 13 [ 128.996913][ T6270] binder: BINDER_SET_CONTEXT_MGR already set [ 129.016042][ T6270] binder: 6268:6270 ioctl 4018620d 200000000380 returned -16 [ 129.046706][ T28] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 129.228146][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.239337][ T28] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.248568][ T28] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 129.259118][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.272080][ T28] usb 3-1: config 0 descriptor?? [ 129.356231][ T56] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.540280][ T56] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.560177][ T56] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 129.572151][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 129.581398][ T56] usb 4-1: Product: syz [ 129.585623][ T56] usb 4-1: Manufacturer: syz [ 129.590606][ T56] usb 4-1: SerialNumber: syz [ 129.813995][ T56] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.016317][ T6282] syzkaller0: entered promiscuous mode [ 130.021985][ T6282] syzkaller0: entered allmulticast mode [ 130.068931][ T28] usb 4-1: USB disconnect, device number 17 [ 130.097506][ T28] usblp0: removed [ 130.356287][ T5786] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 130.536114][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 130.552681][ T5786] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 130.568923][ T5786] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 130.578339][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.589468][ T5786] usb 2-1: config 0 descriptor?? [ 130.599554][ T5786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 130.718012][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.736131][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.745793][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.759753][ T9] usb 1-1: config 0 descriptor?? [ 130.846237][ T49] ------------[ cut here ]------------ [ 130.852226][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 130.863326][ T49] Modules linked in: [ 130.867366][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 130.874785][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.885009][ T49] Workqueue: phy3 ieee80211_csa_finalize_work [ 130.891231][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 130.898639][ T49] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 130.918811][ T49] RSP: 0018:ffffc90000b9f9c0 EFLAGS: 00010293 [ 130.924954][ T49] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88801d671e00 [ 130.933063][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 130.941151][ T49] RBP: dffffc0000000000 R08: ffff88805de7162f R09: 1ffff1100bbce2c5 [ 130.949483][ T49] R10: dffffc0000000000 R11: ffffed100bbce2c6 R12: 0000000000000001 [ 130.951017][ C0] ------------[ cut here ]------------ [ 130.957635][ T49] R13: ffff88805de72659 R14: ffff88807a142d48 R15: ffff888026148d00 [ 130.957698][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 130.963348][ C0] WARNING: CPU: 0 PID: 55 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1141/0x1520 [ 130.971381][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.971402][ T49] CR2: 00002000000c1038 CR3: 000000007c0c7000 CR4: 00000000003526e0 [ 130.980393][ C0] Modules linked in: [ 130.990393][ T49] Call Trace: [ 130.996854][ C0] CPU: 0 PID: 55 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 130.996875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.996888][ C0] Workqueue: bat_events batadv_nc_worker [ 130.996922][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 130.996957][ C0] Code: f7 4c 89 ef e8 b0 a4 c2 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 7b c6 84 f7 0f 0b e9 61 f8 ff ff e8 6f c6 84 f7 <0f> 0b e9 85 fb ff ff e8 63 c6 84 f7 48 c7 c7 40 50 64 8e 4c 89 e6 [ 130.996975][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00010246 [ 130.996996][ C0] RAX: ffffffff8a021ee1 RBX: dffffc0000000000 RCX: ffff88801ea7da00 [ 130.997020][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.997034][ C0] RBP: 0000000000000000 R08: ffff88801ea7da00 R09: 0000000000000003 [ 130.997049][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805de72440 [ 130.997065][ C0] R13: ffff88805ea58424 R14: ffff88805de72930 R15: ffff88805ea58400 [ 130.997083][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 131.005059][ T49] [ 131.005138][ T49] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 131.008998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.009027][ C0] CR2: 000000110c30209c CR3: 000000007c0c7000 CR4: 00000000003526f0 [ 131.012331][ T49] ieee80211_csa_finalize+0x571/0xeb0 [ 131.019779][ C0] Call Trace: [ 131.029965][ T49] ? mutex_lock_nested+0x20/0x20 [ 131.035510][ C0] [ 131.035523][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 131.041978][ T49] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.061534][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 131.061574][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 131.061619][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 131.061656][ C0] __iterate_interfaces+0x225/0x4c0 [ 131.061683][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.061714][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 131.067840][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 131.075914][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 131.075947][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 131.075979][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 131.076013][ C0] ? hw_scan_work+0xf10/0xf10 [ 131.076041][ C0] __hrtimer_run_queues+0x525/0xc10 [ 131.084020][ T49] ? read_lock_is_recursive+0x20/0x20 [ 131.092132][ C0] ? hrtimer_interrupt+0x980/0x980 [ 131.100217][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 131.108169][ C0] ? read_tsc+0x9/0x20 [ 131.117229][ T49] ? process_scheduled_works+0x975/0x1600 [ 131.120102][ C0] hrtimer_run_softirq+0x177/0x290 [ 131.126637][ T49] process_scheduled_works+0xa60/0x1600 [ 131.133262][ C0] handle_softirqs+0x27d/0x820 [ 131.141416][ T49] ? worker_attach_to_pool+0x370/0x370 [ 131.146693][ C0] ? do_softirq+0xfa/0x1a0 [ 131.149993][ T49] ? assign_work+0x3cc/0x5d0 [ 131.154945][ C0] ? do_softirq+0x1a0/0x1a0 [ 131.154975][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 131.155011][ C0] do_softirq+0xfa/0x1a0 [ 131.155032][ C0] [ 131.155040][ C0] [ 131.155050][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 131.155073][ C0] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 131.155105][ C0] ? rcu_is_watching+0x15/0xb0 [ 131.155137][ C0] __local_bh_enable_ip+0x184/0x1c0 [ 131.158043][ T49] worker_thread+0xa5e/0xfe0 [ 131.158146][ T49] kthread+0x2fa/0x390 [ 131.163645][ C0] ? _local_bh_enable+0xa0/0xa0 [ 131.170550][ T49] ? pr_cont_work+0x550/0x550 [ 131.175175][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 131.182309][ T49] ? kthread_blkcg+0xd0/0xd0 [ 131.187572][ C0] ? batadv_nc_purge_paths+0x300/0x3a0 [ 131.192804][ T49] ret_from_fork+0x48/0x80 [ 131.199098][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 131.206327][ T49] ? kthread_blkcg+0xd0/0xd0 [ 131.212321][ C0] batadv_nc_purge_paths+0x300/0x3a0 [ 131.218603][ T49] ret_from_fork_asm+0x11/0x20 [ 131.225672][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 131.231074][ T49] [ 131.235605][ C0] batadv_nc_worker+0x322/0x600 [ 131.240836][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 131.240849][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 131.240923][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.240968][ T49] Workqueue: phy3 ieee80211_csa_finalize_work [ 131.241070][ T49] Call Trace: [ 131.241087][ T49] [ 131.241108][ T49] dump_stack_lvl+0x18c/0x250 [ 131.241191][ T49] ? show_regs_print_info+0x20/0x20 [ 131.241255][ T49] ? load_image+0x420/0x420 [ 131.241342][ T49] panic+0x2ca/0x720 [ 131.241445][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 131.241553][ T49] ? ret_from_fork_asm+0x11/0x20 [ 131.241647][ T49] __warn+0x2e0/0x470 [ 131.241723][ T49] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 131.241806][ T49] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 131.241890][ T49] report_bug+0x2be/0x4f0 [ 131.241962][ T49] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 131.242046][ T49] ? ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 131.242125][ T49] ? ieee80211_vif_use_reserved_switch+0x1110/0x2900 [ 131.242207][ T49] handle_bug+0xcf/0x120 [ 131.242273][ T49] exc_invalid_op+0x1a/0x50 [ 131.242353][ T49] asm_exc_invalid_op+0x1a/0x20 [ 131.242455][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 131.242547][ T49] Code: 48 89 df e8 a4 8d d8 f7 e9 d6 fc ff ff e8 4a 19 80 f7 eb 24 e8 43 19 80 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 32 19 80 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 24 19 80 f7 48 8b 7c 24 08 4c 8b 74 [ 131.242590][ T49] RSP: 0018:ffffc90000b9f9c0 EFLAGS: 00010293 [ 131.242641][ T49] RAX: ffffffff8a06c812 RBX: 0000000000000001 RCX: ffff88801d671e00 [ 131.242676][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 131.242708][ T49] RBP: dffffc0000000000 R08: ffff88805de7162f R09: 1ffff1100bbce2c5 [ 131.242750][ T49] R10: dffffc0000000000 R11: ffffed100bbce2c6 R12: 0000000000000001 [ 131.242783][ T49] R13: ffff88805de72659 R14: ffff88807a142d48 R15: ffff888026148d00 [ 131.242847][ T49] ? ieee80211_vif_use_reserved_switch+0xd02/0x2900 [ 131.242995][ T49] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 131.243078][ T49] ieee80211_csa_finalize+0x571/0xeb0 [ 131.243163][ T49] ? mutex_lock_nested+0x20/0x20 [ 131.243237][ T49] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 131.243300][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 131.243385][ T49] ? read_lock_is_recursive+0x20/0x20 [ 131.243471][ T49] ieee80211_csa_finalize_work+0xf6/0x140 [ 131.243553][ T49] ? process_scheduled_works+0x975/0x1600 [ 131.243638][ T49] process_scheduled_works+0xa60/0x1600 [ 131.243828][ T49] ? worker_attach_to_pool+0x370/0x370 [ 131.243920][ T49] ? assign_work+0x3cc/0x5d0 [ 131.244006][ T49] worker_thread+0xa5e/0xfe0 [ 131.244157][ T49] kthread+0x2fa/0x390 [ 131.244209][ T49] ? pr_cont_work+0x550/0x550 [ 131.244274][ T49] ? kthread_blkcg+0xd0/0xd0 [ 131.244334][ T49] ret_from_fork+0x48/0x80 [ 131.244398][ T49] ? kthread_blkcg+0xd0/0xd0 [ 131.244452][ T49] ret_from_fork_asm+0x11/0x20 [ 131.244571][ T49] [ 131.246344][ T49] Kernel Offset: disabled