last executing test programs: 14.285717188s ago: executing program 0 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="000000d6df16e665c496b87706630800a290fc7ec0cbfd9c0e46d1fb080bb1059630d0ee2091d1"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="0900000036bfd505aeceacbff28fbd8a0a8f0bd46a30d3f52646fcbda416d285e82eb51e7d7cebdc10d58af0319469d9a10b8fe884e160186d6c1df0c920b560aec258f5a5f391e63835ceff6160ee9f4a2e05f7f78fa7f663e05afacdc4ea", @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000000000006006600c78800002000330078bd0900589733b902f1ffffffffffff0802110000000250be000e80"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fa4523d190386dc10de1c44023ba3718007a3c73232bd6d3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2253eb9c66002c73033c672c2e29329c8d8302c66196d9cf"}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x240c48c0}, 0x48040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r8, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 12.9596568s ago: executing program 3 (id=20): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 12.886950103s ago: executing program 1 (id=21): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda9249a", 0x29}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0x9, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5b8, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0x9, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x9, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.74625051s ago: executing program 1 (id=22): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 10.415857339s ago: executing program 3 (id=28): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="4274aa814c8f6ea8", 0x8}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d046bccc3025bbe70905237ffee5666e0e28cfda924", 0x28}], 0x2}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='0\x00', 0xff47) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x8001, 0xb, 0x3}, 0x3a, [0x8, 0x40, 0xf, 0x101, 0x5, 0x457, 0xc951, 0x9, 0x7, 0x5, 0x2, 0xf, 0xd8b681d, 0x7, 0x8001, 0x401, 0xc9c3, 0x400, 0x431a5f4b, 0x8001, 0x1000, 0x1, 0x9, 0xb1, 0xe0c8, 0x10000709, 0x10001, 0x2, 0x9, 0x4, 0x2, 0x1000, 0x80000001, 0x55, 0x9, 0x7, 0x5, 0x1, 0x6, 0xffff, 0x7fff, 0xa8b, 0x257, 0x6, 0x1, 0x6, 0x1, 0x4, 0x5, 0x1, 0x80, 0x3, 0x9, 0xff, 0x25, 0x2, 0x80000000, 0x8, 0x7, 0xff, 0x8, 0x9, 0x7, 0x51c8], [0x7, 0x6, 0x7ff, 0x2, 0x1, 0xb4, 0x4, 0x7, 0x3, 0x8, 0x4, 0x1, 0x8, 0xffff, 0x9, 0xfffffbb7, 0x5, 0x4, 0x9, 0xfffff27b, 0x7fff, 0x79, 0x6, 0x8, 0xf, 0x100, 0x4, 0x10, 0xfffffffd, 0xf9, 0xfb, 0x60000000, 0xfffffff6, 0x35e, 0x3, 0x10000, 0x9d2, 0x1, 0x7f, 0xa, 0xa7, 0xad1, 0x9, 0x4, 0x4, 0x5, 0x5, 0xfffffff8, 0x1, 0x9a31, 0x2, 0x4, 0x8, 0x0, 0x8, 0x8, 0x5b8, 0x7, 0x2, 0x5, 0x800, 0x1, 0xffff, 0x8], [0xcde, 0x75, 0x1, 0x7, 0x0, 0x2, 0x30, 0x2, 0x5, 0x200, 0xa9b, 0x40, 0x3, 0x9, 0x3, 0xce, 0x1, 0x4, 0x9, 0x7, 0x2, 0x0, 0x1, 0x2, 0xff, 0x8, 0x8, 0x6, 0xffff, 0x40, 0x9a05, 0x9, 0xd38, 0x8, 0x4040, 0x400, 0xe, 0x2600000, 0x0, 0x3, 0x80000001, 0x7fff, 0x1, 0x8b8b, 0x6, 0x200, 0x1, 0x40, 0x2, 0x1, 0x6, 0xe8d6, 0xe, 0x80, 0x0, 0x80, 0x800, 0x9, 0x3ff, 0x6, 0x0, 0x7fffffff, 0xfffffffe, 0x9], [0x6, 0x8, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2, 0x5, 0x6, 0x2, 0x8, 0xffffff7f, 0xfffffffc, 0x6, 0x1, 0x6, 0xfff, 0x2, 0x58c, 0x7, 0x7, 0x400, 0x10001, 0x2, 0x9, 0x1, 0xb, 0x4, 0x5, 0x7, 0x8001, 0x1, 0x401, 0x2, 0x1, 0x2, 0x5, 0x2, 0x829, 0x7, 0x7, 0x61, 0x1, 0x3, 0x2, 0x5, 0x6, 0x5, 0x5, 0xff, 0xfffff36d, 0x9, 0x1ff, 0x0, 0x56, 0xe9, 0x5852, 0x8001, 0x1, 0x5, 0x1, 0x8000, 0x3ff]}, 0x45c) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix_mp={0x9, 0x200, 0x56555959, 0x8, 0xa, [{0x5, 0x3}, {0x0, 0x3}, {0x27, 0x101}, {0x1ff}, {0x1d3, 0xa}, {0x0, 0x4}, {0x1ff, 0xfffffff9}, {0x6, 0x5}], 0x7, 0x9, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x5, 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000001880)="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", 0xd9f}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10.119290146s ago: executing program 0 (id=29): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x10, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) 9.256275199s ago: executing program 3 (id=30): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) 8.675509866s ago: executing program 1 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) 8.305298193s ago: executing program 0 (id=32): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.760464308s ago: executing program 2 (id=34): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f", @ANYRES8=r1, @ANYRES32, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23f"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.647086521s ago: executing program 1 (id=35): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x2, 'q+'}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="401203"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.446805218s ago: executing program 2 (id=36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6.26235509s ago: executing program 3 (id=37): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="401203"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.084206115s ago: executing program 2 (id=38): r0 = socket$inet(0x2, 0x1, 0x100) fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000140)={0x1, 0x3ff, 0x0, 0x2, 0x6, 0x3, 0x0, 0x9}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x1) (async) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000e00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x80, 0x57, {0x8, 0xb, 0x0, 0x1, 0x1, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe45, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x9, 0x8, {0x8, 0x25, 0x1, 0x0, 0x3, 0x6, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x63, 0xa, {0x8, 0x25, 0x1, 0x82, 0xc, 0xd8, 0xe}}}}}}}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) (async) times(0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000726b00000000000000000000000000000a5c000000060a010400000000000000000a00000124000580080001400000005c08000140000000080800010000002f15000740c030e1d87209df35f7820bd95f372900000000000c0006400000000000000005140000001100010000000000000000000000000a000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040000) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)}, 0x2}], 0x1, 0x2, 0x0) listen(r1, 0x8002) 5.053510111s ago: executing program 0 (id=39): modify_ldt$write(0x1, &(0x7f0000000000)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x13f, 0x6}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000003c0)={0x4, 0x202, 0x100, 0x7e}, 0x10) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000400)={0x5, 0x1, 0x9}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x10000050) sendmsg$NL80211_CMD_SET_CHANNEL(r4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b00"], 0xfc}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1, 0x0, 0x3, 0x8000, 0xd, 0x7}) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x7, 0x7, 0x0, &(0x7f0000000000)) 4.444589813s ago: executing program 0 (id=40): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.366542899s ago: executing program 1 (id=41): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x40, 0xf, 0x2, '\x00\x00'}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000080)={0x40, 0x7, 0x1, '_'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.017498114s ago: executing program 3 (id=42): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.626764567s ago: executing program 2 (id=43): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f", @ANYRES8=r1, @ANYRES32, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23f"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1.42835966s ago: executing program 2 (id=44): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f", @ANYRES8=r1, @ANYRES32, @ANYBLOB="14", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401b0270bb64370f5fc9f059290abcd02c1860493cba1de7bc6ecd12ca51b7f564258f5bc71ac337e17056a4d604089fe4d62de21aa1ee9fefcdcea14be7cde39bb656366e22a822683b1bb74b6fbb7f2dcb69c2b50c1334eeecfa3d0a988a5895abed7957094d895633afad1c60579108c2b4412c236e0d4c239bccce62ecdc23f"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.268019377s ago: executing program 0 (id=45): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.047734523s ago: executing program 1 (id=46): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)={0x40, 0x10, 0x1, "e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 948.390044ms ago: executing program 2 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x8, 0x5, 0x4, 0x100, 0x4, {0x77359400}, {0x2, 0x0, 0xc, 0x2, 0x95, 0x4, "60b83100"}, 0x2, 0x4, {0xffffffffffffffff}, 0x10001}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x2, {0xffffffffffffffff}, {0xee00}, 0x8, 0x6}) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000240)) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x1, 0x3, 0x70bdb18e, 0xffff, r2}) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x7fffffff, 0x50400) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000200)={0x3, 0x100, 0x4, 0x7f, 0xe1, 0x3ff}) syz_usb_control_io$hid(r5, &(0x7f0000000700)={0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="76779e"], 0x0, 0x0, 0x0}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 3 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r1, &(0x7f0000000040), 0x0, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. [ 75.702878][ T5590] cgroup: Unknown subsys name 'net' [ 75.943796][ T5590] cgroup: Unknown subsys name 'cpuset' [ 75.999893][ T5590] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.625218][ T5590] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.041762][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.055639][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.075955][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.097642][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.099846][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.101084][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.110863][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.134938][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.139085][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.151853][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.153939][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.154980][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.155885][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.169132][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.174152][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.183098][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.188802][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.189698][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.235073][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.255333][ T4918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.096536][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.097762][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.097920][ T5604] bridge_slave_0: entered allmulticast mode [ 82.102697][ T5604] bridge_slave_0: entered promiscuous mode [ 82.159561][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.159784][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.160429][ T5604] bridge_slave_1: entered allmulticast mode [ 82.162291][ T5604] bridge_slave_1: entered promiscuous mode [ 82.261586][ T5608] Bluetooth: hci2: command tx timeout [ 82.261759][ T5606] Bluetooth: hci3: command tx timeout [ 82.300282][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.339491][ T5608] Bluetooth: hci0: command tx timeout [ 82.339658][ T5606] Bluetooth: hci1: command tx timeout [ 82.350328][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.404948][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.405113][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.405258][ T5603] bridge_slave_0: entered allmulticast mode [ 82.407048][ T5603] bridge_slave_0: entered promiscuous mode [ 82.465981][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.466260][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.466495][ T5603] bridge_slave_1: entered allmulticast mode [ 82.468517][ T5603] bridge_slave_1: entered promiscuous mode [ 82.494516][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.494783][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.495000][ T5602] bridge_slave_0: entered allmulticast mode [ 82.499121][ T5602] bridge_slave_0: entered promiscuous mode [ 82.514226][ T5604] team0: Port device team_slave_0 added [ 82.539275][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.539602][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.539794][ T5601] bridge_slave_0: entered allmulticast mode [ 82.541535][ T5601] bridge_slave_0: entered promiscuous mode [ 82.630564][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.630789][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.631012][ T5602] bridge_slave_1: entered allmulticast mode [ 82.632859][ T5602] bridge_slave_1: entered promiscuous mode [ 82.635827][ T5604] team0: Port device team_slave_1 added [ 82.667551][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.668918][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.669805][ T5601] bridge_slave_1: entered allmulticast mode [ 82.674555][ T5601] bridge_slave_1: entered promiscuous mode [ 82.718051][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.768956][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.796761][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.803872][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.803888][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.803911][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.852487][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.858699][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.862433][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.862446][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.862469][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.902721][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.936795][ T5603] team0: Port device team_slave_0 added [ 82.975025][ T5603] team0: Port device team_slave_1 added [ 83.003681][ T5602] team0: Port device team_slave_0 added [ 83.035381][ T5601] team0: Port device team_slave_0 added [ 83.041156][ T5602] team0: Port device team_slave_1 added [ 83.073391][ T5601] team0: Port device team_slave_1 added [ 83.106242][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.106252][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.106267][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.163817][ T5604] hsr_slave_0: entered promiscuous mode [ 83.165142][ T5604] hsr_slave_1: entered promiscuous mode [ 83.167920][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.167928][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.167942][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.199149][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.199164][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.199188][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.222048][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.222064][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.222093][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.225764][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.225778][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.225802][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.238040][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.238056][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.238080][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.418567][ T5603] hsr_slave_0: entered promiscuous mode [ 83.421553][ T5603] hsr_slave_1: entered promiscuous mode [ 83.430076][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 83.430233][ T5603] Cannot create hsr debugfs directory [ 83.481544][ T5602] hsr_slave_0: entered promiscuous mode [ 83.482727][ T5602] hsr_slave_1: entered promiscuous mode [ 83.483757][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 83.483779][ T5602] Cannot create hsr debugfs directory [ 83.528116][ T5601] hsr_slave_0: entered promiscuous mode [ 83.529273][ T5601] hsr_slave_1: entered promiscuous mode [ 83.532305][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 83.532328][ T5601] Cannot create hsr debugfs directory [ 84.340894][ T5608] Bluetooth: hci2: command tx timeout [ 84.340970][ T5606] Bluetooth: hci3: command tx timeout [ 84.419530][ T5608] Bluetooth: hci0: command tx timeout [ 84.419607][ T5606] Bluetooth: hci1: command tx timeout [ 84.578858][ T5604] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.653306][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.669966][ T5604] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.716081][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.727328][ T5604] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.754014][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.776310][ T5604] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.813246][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.934435][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.965100][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.967927][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.995603][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.006942][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.037096][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.063369][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.103170][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.242981][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.284642][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.297460][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.324480][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.338187][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.364402][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.398139][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.424405][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.554332][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.597188][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.610152][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.642760][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.654130][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.683387][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.698474][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.724300][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.783339][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.881314][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.930501][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.930653][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.957928][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.003695][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.004107][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.095349][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.137622][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.139283][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.151116][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.214801][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.214898][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.287824][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.333822][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.333964][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.345896][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.408865][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.409056][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.420299][ T5608] Bluetooth: hci2: command tx timeout [ 86.420380][ T5606] Bluetooth: hci3: command tx timeout [ 86.499760][ T5608] Bluetooth: hci0: command tx timeout [ 86.499849][ T5606] Bluetooth: hci1: command tx timeout [ 86.544253][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.596234][ T3157] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.596396][ T3157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.667347][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.667503][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.745769][ T930] cfg80211: failed to load regulatory.db [ 87.526153][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.719085][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.950859][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.959236][ T5604] veth0_vlan: entered promiscuous mode [ 88.043262][ T5604] veth1_vlan: entered promiscuous mode [ 88.147528][ T5602] veth0_vlan: entered promiscuous mode [ 88.212456][ T5602] veth1_vlan: entered promiscuous mode [ 88.229278][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.276310][ T5603] veth0_vlan: entered promiscuous mode [ 88.292456][ T5604] veth0_macvtap: entered promiscuous mode [ 88.323721][ T5604] veth1_macvtap: entered promiscuous mode [ 88.335253][ T5603] veth1_vlan: entered promiscuous mode [ 88.414097][ T5602] veth0_macvtap: entered promiscuous mode [ 88.451260][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.473490][ T5602] veth1_macvtap: entered promiscuous mode [ 88.499739][ T5608] Bluetooth: hci2: command tx timeout [ 88.499783][ T5606] Bluetooth: hci3: command tx timeout [ 88.501060][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.534197][ T5601] veth0_vlan: entered promiscuous mode [ 88.563564][ T44] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.581005][ T5608] Bluetooth: hci0: command tx timeout [ 88.581050][ T5606] Bluetooth: hci1: command tx timeout [ 88.583152][ T44] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.588468][ T5603] veth0_macvtap: entered promiscuous mode [ 88.595394][ T44] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.623946][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.624394][ T44] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.650022][ T5601] veth1_vlan: entered promiscuous mode [ 88.658336][ T5603] veth1_macvtap: entered promiscuous mode [ 88.725834][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.828442][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.844833][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872059][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.936472][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.044225][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.166718][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.363112][ T5601] veth0_macvtap: entered promiscuous mode [ 89.398665][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.439040][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.452061][ T1421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.453298][ T1421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.485524][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.485548][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.534774][ T5601] veth1_macvtap: entered promiscuous mode [ 89.753799][ T3157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.753817][ T3157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.762520][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.902147][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.926901][ T3157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.926920][ T3157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.963594][ T3157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.984802][ T3157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.014012][ T3157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.015741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.015758][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.131339][ T3157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337139][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.337157][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.797848][ T1184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.797867][ T1184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.132521][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.132539][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.198604][ T5762] qrtr: Invalid version 0 [ 91.216993][ T5759] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.360651][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.360677][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.876161][ T5771] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 92.588040][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.649772][ T5607] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.830753][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 92.863703][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 92.863720][ T9] usb 2-1: config 0 has no interface number 0 [ 92.863746][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 92.863759][ T9] usb 2-1: config 0 interface 34 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 92.867553][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 92.867580][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.867591][ T9] usb 2-1: Product: syz [ 92.867598][ T9] usb 2-1: Manufacturer: syz [ 92.867606][ T9] usb 2-1: SerialNumber: syz [ 93.020263][ T5607] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.020293][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.020308][ T5607] usb 3-1: Product: syz [ 93.020316][ T5607] usb 3-1: Manufacturer: syz [ 93.020323][ T5607] usb 3-1: SerialNumber: syz [ 93.191517][ T822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.274630][ T9] usb 2-1: config 0 descriptor?? [ 93.291130][ T5607] usb 3-1: config 0 descriptor?? [ 93.312803][ T5766] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.379130][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.379184][ T822] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.379206][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.461465][ T9] asix 2-1:0.34: probe with driver asix failed with error -22 [ 93.526967][ T822] usb 4-1: config 0 descriptor?? [ 93.644958][ T4931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.681596][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 93.891841][ T4931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.891896][ T4931] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 93.891918][ T4931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.931752][ T4931] usb 1-1: config 0 descriptor?? [ 93.981913][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 93.984560][ T822] pwc: recv_control_msg error -32 req 02 val 2700 [ 93.985348][ T4931] pwc: Askey VC010 type 2 USB webcam detected. [ 93.988858][ T822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 94.015599][ T822] pwc: recv_control_msg error -32 req 04 val 1000 [ 94.040438][ T822] pwc: recv_control_msg error -32 req 04 val 1300 [ 94.052296][ T822] pwc: recv_control_msg error -32 req 04 val 1400 [ 94.055171][ T822] pwc: recv_control_msg error -32 req 02 val 2000 [ 94.063725][ T822] pwc: recv_control_msg error -32 req 02 val 2100 [ 94.070623][ T822] pwc: recv_control_msg error -32 req 04 val 1500 [ 94.080358][ T822] pwc: recv_control_msg error -32 req 02 val 2500 [ 94.300594][ T822] pwc: recv_control_msg error -32 req 02 val 2600 [ 94.303315][ T822] pwc: recv_control_msg error -32 req 02 val 2900 [ 94.546803][ T822] pwc: recv_control_msg error -71 req 04 val 1100 [ 94.547367][ T822] pwc: recv_control_msg error -71 req 04 val 1200 [ 94.655031][ T4931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 94.655936][ T4931] pwc: recv_control_msg error -32 req 02 val 2700 [ 94.656877][ T4931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 94.685436][ T4931] pwc: recv_control_msg error -32 req 04 val 1000 [ 94.699991][ T4931] pwc: recv_control_msg error -32 req 04 val 1300 [ 94.711859][ T4931] pwc: recv_control_msg error -32 req 04 val 1400 [ 94.713922][ T4931] pwc: recv_control_msg error -32 req 02 val 2000 [ 94.733565][ T4931] pwc: recv_control_msg error -32 req 02 val 2100 [ 94.734710][ T4931] pwc: recv_control_msg error -32 req 04 val 1500 [ 94.738984][ T5716] usb 2-1: USB disconnect, device number 2 [ 94.904455][ T822] pwc: Registered as video103. [ 94.946313][ T4931] pwc: recv_control_msg error -32 req 02 val 2400 [ 94.957671][ T4931] pwc: recv_control_msg error -32 req 02 val 2600 [ 94.972940][ T4931] pwc: recv_control_msg error -32 req 02 val 2900 [ 95.072043][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 95.254044][ T4931] pwc: recv_control_msg error -71 req 04 val 1100 [ 95.263241][ T4931] pwc: recv_control_msg error -71 req 04 val 1200 [ 95.263355][ T4931] videodev: could not get a free minor [ 95.263362][ T4931] pwc: Failed to register as video device (-23). [ 95.268969][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 95.311874][ T4931] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -23 [ 95.426585][ T4931] usb 1-1: USB disconnect, device number 2 [ 95.554010][ T10] usb 3-1: USB disconnect, device number 2 [ 95.699259][ T822] usb 4-1: USB disconnect, device number 2 [ 96.304370][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.369562][ T32] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 96.482169][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.482200][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.482232][ T10] usb 3-1: Product: syz [ 96.482245][ T10] usb 3-1: Manufacturer: syz [ 96.482259][ T10] usb 3-1: SerialNumber: syz [ 96.486921][ T822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.502759][ T10] usb 3-1: config 0 descriptor?? [ 96.544696][ T32] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 96.544726][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.544745][ T32] usb 1-1: Product: syz [ 96.544758][ T32] usb 1-1: Manufacturer: syz [ 96.544772][ T32] usb 1-1: SerialNumber: syz [ 96.595334][ T32] usb 1-1: config 0 descriptor?? [ 96.639598][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 96.657122][ T822] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 96.657204][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.771811][ T822] usb 4-1: config 0 descriptor?? [ 96.904131][ T32] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 96.904573][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.096359][ T822] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 97.736355][ T822] gspca_sonixj: reg_r err -32 [ 97.736437][ T822] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 98.020553][ T4931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.236565][ T4931] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.236599][ T4931] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.236674][ T4931] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.236716][ T4931] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 98.236737][ T4931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.284978][ T5808] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 98.362579][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 98.400293][ T10] usb 3-1: USB disconnect, device number 3 [ 98.793868][ T5708] usb 4-1: USB disconnect, device number 3 [ 98.851352][ T32] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 98.917822][ T32] usb 1-1: USB disconnect, device number 3 [ 99.209450][ T5708] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.309501][ T5592] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 99.359520][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 99.361414][ T5708] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.361439][ T5708] usb 4-1: config 0 has no interface number 0 [ 99.361484][ T5708] usb 4-1: config 0 interface 184 has no altsetting 0 [ 99.363578][ T5708] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.363605][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.363624][ T5708] usb 4-1: Product: syz [ 99.363639][ T5708] usb 4-1: Manufacturer: syz [ 99.363653][ T5708] usb 4-1: SerialNumber: syz [ 99.368570][ T5708] usb 4-1: config 0 descriptor?? [ 99.494433][ T5592] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.494451][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.494461][ T5592] usb 3-1: Product: syz [ 99.494469][ T5592] usb 3-1: Manufacturer: syz [ 99.494476][ T5592] usb 3-1: SerialNumber: syz [ 99.611270][ T5592] usb 3-1: config 0 descriptor?? [ 99.832894][ T5592] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 100.091593][ T5708] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 100.091612][ T5708] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.181023][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.240664][ T5592] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 100.301308][ T5592] usb 3-1: USB disconnect, device number 4 [ 100.354748][ T10] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.354779][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.377672][ T10] usb 1-1: config 0 descriptor?? [ 100.405565][ T10] cp210x 1-1:0.0: cp210x converter detected [ 100.496852][ T5708] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 100.496880][ T5708] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 100.496896][ T5708] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.497307][ T5708] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 100.544436][ T5708] usb 4-1: USB disconnect, device number 4 [ 100.605152][ T10] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 100.605194][ T10] cp210x 1-1:0.0: querying part number failed [ 100.675706][ T10] usb 1-1: cp210x converter now attached to ttyUSB0 [ 100.804353][ T4931] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 100.827272][ T4931] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 101.045686][ T4931] usb 2-1: USB disconnect, device number 3 [ 101.045778][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 101.129823][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.298468][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.298526][ T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 101.298550][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.352649][ T10] usb 3-1: config 0 descriptor?? [ 101.385511][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 101.541913][ T5829] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.18'. [ 101.765856][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.766489][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.767241][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.767888][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.768624][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 101.769140][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 101.772050][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 101.773008][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.773954][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 101.775042][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.775847][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 101.776489][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.777604][ T10] pwc: recv_control_msg error -32 req 02 val 2900 [ 101.778554][ T10] pwc: recv_control_msg error -32 req 02 val 2800 [ 101.993185][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.042408][ T10] pwc: Registered as video103. [ 102.053915][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 102.075790][ T10] usb 3-1: USB disconnect, device number 5 [ 102.639487][ T5716] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.800165][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 102.802692][ T5716] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 102.802711][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.815876][ T5716] usb 2-1: config 0 descriptor?? [ 102.862477][ T5716] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 103.340255][ T5592] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.459519][ T5606] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.490028][ T5592] usb 3-1: Using ep0 maxpacket: 16 [ 103.499024][ T5592] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 103.499050][ T5592] usb 3-1: config 0 has no interface number 0 [ 103.499102][ T5592] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 103.499139][ T5592] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 103.513339][ T5592] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 103.513369][ T5592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.513389][ T5592] usb 3-1: Product: syz [ 103.513403][ T5592] usb 3-1: Manufacturer: syz [ 103.513417][ T5592] usb 3-1: SerialNumber: syz [ 103.535828][ T5592] usb 3-1: config 0 descriptor?? [ 103.536814][ T5844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.536985][ T5844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.702247][ T5606] Bluetooth: hci5: command 0x1003 tx timeout [ 103.734186][ T5608] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.745260][ T5844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.745429][ T5844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 103.953337][ T5592] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 103.953507][ T5592] asix 3-1:0.34: probe with driver asix failed with error -61 [ 103.959861][ T4931] usb 1-1: USB disconnect, device number 4 [ 104.073160][ T4931] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 104.088407][ T4931] cp210x 1-1:0.0: device disconnected [ 104.401905][ T4931] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 104.553640][ T4931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.553670][ T4931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.553689][ T4931] usb 1-1: Product: syz [ 104.553700][ T4931] usb 1-1: Manufacturer: syz [ 104.553713][ T4931] usb 1-1: SerialNumber: syz [ 104.556731][ T4931] usb 1-1: config 0 descriptor?? [ 104.864652][ T4931] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.169444][ T10] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 105.273542][ T4931] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 105.281737][ T4931] usb 1-1: USB disconnect, device number 5 [ 105.323706][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.323735][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.323755][ T10] usb 4-1: Product: syz [ 105.323768][ T10] usb 4-1: Manufacturer: syz [ 105.323775][ T10] usb 4-1: SerialNumber: syz [ 105.378006][ T10] usb 4-1: config 0 descriptor?? [ 105.441337][ T5708] usb 2-1: USB disconnect, device number 4 [ 105.586509][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.131835][ T5716] usb 3-1: USB disconnect, device number 6 [ 106.166501][ T4931] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.322592][ T4931] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.322624][ T4931] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.322649][ T4931] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.322690][ T4931] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 106.322713][ T4931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.339068][ T5863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 106.889621][ T5716] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.061262][ T5716] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.061294][ T5716] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.061347][ T5716] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.061372][ T5716] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 107.061384][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.103589][ T5870] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.184572][ T4931] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 107.195289][ T4931] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input8 [ 107.218426][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.279073][ T10] usb 4-1: USB disconnect, device number 5 [ 108.003298][ T5716] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 108.007446][ T5716] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9 [ 108.199707][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.372541][ T10] usb 4-1: config 17 has an invalid interface number: 255 but max is 0 [ 108.372670][ T10] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 108.372690][ T10] usb 4-1: config 17 has no interface number 0 [ 108.372721][ T10] usb 4-1: too many endpoints for config 17 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 108.372759][ T10] usb 4-1: config 17 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.372886][ T10] usb 4-1: config 17 interface 255 has no altsetting 0 [ 108.372909][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 108.372921][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.556521][ T10] aiptek 4-1:17.255: interface has no int in endpoints, but must have minimum 1 [ 108.821041][ T5606] Bluetooth: hci4: command 0x1003 tx timeout [ 108.842935][ T5608] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 109.018693][ T10] usb 1-1: USB disconnect, device number 6 [ 109.018847][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 109.294421][ T5882] Zero length message leads to an empty skb [ 109.317277][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 109.317329][ T5882] netlink: 72 bytes leftover after parsing attributes in process `syz.0.39'. [ 109.569508][ T5716] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.732479][ T4931] usb 2-1: USB disconnect, device number 5 [ 109.732604][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 109.754700][ T5716] usb 3-1: Using ep0 maxpacket: 16 [ 109.772814][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.793065][ T5716] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 109.793095][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.793115][ T5716] usb 3-1: Product: syz [ 109.793130][ T5716] usb 3-1: Manufacturer: syz [ 109.793145][ T5716] usb 3-1: SerialNumber: syz [ 110.079455][ T930] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 110.234786][ T930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.234816][ T930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.234835][ T930] usb 1-1: Product: syz [ 110.234849][ T930] usb 1-1: Manufacturer: syz [ 110.234863][ T930] usb 1-1: SerialNumber: syz [ 110.240979][ T930] usb 1-1: config 0 descriptor?? [ 110.269491][ T4931] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.429378][ T4931] usb 2-1: Using ep0 maxpacket: 16 [ 110.431673][ T4931] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 110.431696][ T4931] usb 2-1: config 0 has no interface number 0 [ 110.431739][ T4931] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 110.431816][ T4931] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 110.434736][ T4931] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 110.434763][ T4931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.434864][ T4931] usb 2-1: Product: syz [ 110.434879][ T4931] usb 2-1: Manufacturer: syz [ 110.434893][ T4931] usb 2-1: SerialNumber: syz [ 110.455345][ T4931] usb 2-1: config 0 descriptor?? [ 110.522398][ T5897] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 110.522745][ T5897] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 110.622031][ T930] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 110.733957][ T5897] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 110.734199][ T5897] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 110.936036][ T4931] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 110.936696][ T4931] asix 2-1:0.34: probe with driver asix failed with error -61 [ 111.031714][ T4931] usb 4-1: USB disconnect, device number 6 [ 111.499540][ T4931] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 111.654536][ T4931] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.654567][ T4931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.654587][ T4931] usb 4-1: Product: syz [ 111.654601][ T4931] usb 4-1: Manufacturer: syz [ 111.654685][ T4931] usb 4-1: SerialNumber: syz [ 111.663623][ T4931] usb 4-1: config 0 descriptor?? [ 111.902300][ T4931] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 112.252375][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 112.252657][ T930] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 112.306397][ T930] usb 1-1: USB disconnect, device number 7 [ 112.720837][ T5716] usb 3-1: USB disconnect, device number 7 [ 113.035879][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.053278][ T930] usb 2-1: USB disconnect, device number 6 [ 113.394796][ T5716] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 113.553161][ T4931] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 113.565860][ T930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.579430][ T4931] usb 4-1: USB disconnect, device number 7 [ 113.580030][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.585306][ T5716] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.585335][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.585353][ T5716] usb 1-1: Product: syz [ 113.585368][ T5716] usb 1-1: Manufacturer: syz [ 113.585382][ T5716] usb 1-1: SerialNumber: syz [ 113.652469][ T5716] usb 1-1: config 0 descriptor?? [ 113.712990][ T930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.713046][ T930] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 113.713070][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.717795][ T930] usb 2-1: config 0 descriptor?? [ 113.756695][ T930] pwc: Askey VC010 type 2 USB webcam detected. [ 113.769558][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 113.777265][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.777296][ T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.801147][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.801172][ T10] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 113.801196][ T10] usb 3-1: Product: syz [ 113.801339][ T10] usb 3-1: Manufacturer: syz [ 113.850010][ T10] hub 3-1:4.0: USB hub found [ 113.878585][ T5716] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.046682][ T10] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 114.137469][ T930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 114.138294][ T930] pwc: recv_control_msg error -32 req 02 val 2700 [ 114.138967][ T930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 114.146065][ T930] pwc: recv_control_msg error -32 req 04 val 1000 [ 114.146736][ T930] pwc: recv_control_msg error -32 req 04 val 1300 [ 114.147681][ T930] pwc: recv_control_msg error -32 req 04 val 1400 [ 114.149680][ T930] pwc: recv_control_msg error -32 req 02 val 2000 [ 114.150963][ T930] pwc: recv_control_msg error -32 req 02 val 2100 [ 114.153111][ T930] pwc: recv_control_msg error -32 req 04 val 1500 [ 114.153947][ T930] pwc: recv_control_msg error -32 req 02 val 2500 [ 114.355880][ T930] pwc: recv_control_msg error -32 req 02 val 2600 [ 114.358716][ T930] pwc: recv_control_msg error -32 req 02 val 2900 [ 114.359455][ T930] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.361525][ T930] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.361999][ T930] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.403642][ T930] pwc: Registered as video103. [ 114.465037][ T930] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 114.523888][ T5927] FAULT_INJECTION: forcing a failure. [ 114.523888][ T5927] name failslab, interval 1, probability 0, space 0, times 1 [ 114.523936][ T5927] CPU: 1 UID: 0 PID: 5927 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.523953][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.523968][ T5927] Call Trace: [ 114.523977][ T5927] [ 114.523983][ T5927] dump_stack_lvl+0xe8/0x150 [ 114.524006][ T5927] should_fail_ex+0x46b/0x600 [ 114.524031][ T5927] should_failslab+0xa8/0x100 [ 114.524049][ T5927] kmem_cache_alloc_noprof+0x87/0x680 [ 114.524065][ T5927] ? security_inode_alloc+0x39/0x310 [ 114.524085][ T5927] security_inode_alloc+0x39/0x310 [ 114.524102][ T5927] inode_init_always_gfp+0x99a/0xd50 [ 114.524127][ T5927] ? __pfx_sock_alloc_inode+0x10/0x10 [ 114.524147][ T5927] alloc_inode+0x82/0x1b0 [ 114.524169][ T5927] do_accept+0x147/0x930 [ 114.524191][ T5927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.524213][ T5927] ? __pfx_do_accept+0x10/0x10 [ 114.524247][ T5927] __sys_accept4+0x139/0x230 [ 114.524267][ T5927] ? __pfx___sys_accept4+0x10/0x10 [ 114.524296][ T5927] __x64_sys_accept4+0x9a/0xb0 [ 114.524314][ T5927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.524329][ T5927] do_syscall_64+0x15f/0x560 [ 114.524342][ T5927] ? trace_irq_disable+0x3b/0x140 [ 114.524358][ T5927] ? clear_bhb_loop+0x40/0x90 [ 114.524375][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.524388][ T5927] RIP: 0033:0x7f99d9e1ce59 [ 114.524413][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.524425][ T5927] RSP: 002b:00007f99d804d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 114.524441][ T5927] RAX: ffffffffffffffda RBX: 00007f99da096090 RCX: 00007f99d9e1ce59 [ 114.524452][ T5927] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 114.524462][ T5927] RBP: 00007f99d804d090 R08: 0000000000000000 R09: 0000000000000000 [ 114.524471][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.524479][ T5927] R13: 00007f99da096128 R14: 00007f99da096090 R15: 00007ffd19434978 [ 114.524501][ T5927] [ 114.614216][ T930] usb 2-1: USB disconnect, device number 7 [ 114.908793][ T5924] [ 114.908804][ T5924] ====================================================== [ 114.908811][ T5924] WARNING: possible circular locking dependency detected [ 114.908827][ T5924] syzkaller #0 Not tainted [ 114.908840][ T5924] ------------------------------------------------------ [ 114.908847][ T5924] syz.3.48/5924 is trying to acquire lock: [ 114.908857][ T5924] ffff8880345f77b0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 114.908887][ T5924] [ 114.908887][ T5924] but task is already holding lock: [ 114.908890][ T5924] ffff88805ffda1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 114.908922][ T5924] [ 114.908922][ T5924] which lock already depends on the new lock. [ 114.908922][ T5924] [ 114.908928][ T5924] [ 114.908928][ T5924] the existing dependency chain (in reverse order) is: [ 114.908935][ T5924] [ 114.908935][ T5924] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 114.908962][ T5924] lock_sock_nested+0x41/0x130 [ 114.908985][ T5924] smc_listen_out+0x109/0x3e0 [ 114.909001][ T5924] smc_listen_work+0x813/0x13f0 [ 114.909017][ T5924] process_one_work+0x98b/0x1630 [ 114.909031][ T5924] worker_thread+0xb49/0x1140 [ 114.909044][ T5924] kthread+0x388/0x470 [ 114.909054][ T5924] ret_from_fork+0x514/0xb70 [ 114.909066][ T5924] ret_from_fork_asm+0x1a/0x30 [ 114.909087][ T5924] [ 114.909087][ T5924] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 114.909120][ T5924] __lock_acquire+0x15a5/0x2d10 [ 114.909138][ T5924] lock_acquire+0x106/0x350 [ 114.909153][ T5924] __flush_work+0x6df/0xda0 [ 114.909166][ T5924] __cancel_work_sync+0xbe/0x110 [ 114.909181][ T5924] smc_clcsock_release+0x60/0xf0 [ 114.909197][ T5924] __smc_release+0x6a0/0x810 [ 114.909217][ T5924] smc_close_non_accepted+0xd5/0x1f0 [ 114.909240][ T5924] smc_close_active+0xb9b/0xf40 [ 114.909256][ T5924] __smc_release+0xa0/0x810 [ 114.909275][ T5924] smc_release+0x2eb/0x5a0 [ 114.909296][ T5924] __sock_release+0xb9/0x250 [ 114.909313][ T5924] sock_close+0x1c/0x30 [ 114.909329][ T5924] __fput+0x461/0xa70 [ 114.909343][ T5924] task_work_run+0x1d9/0x270 [ 114.909363][ T5924] exit_to_user_mode_loop+0xf3/0x4d0 [ 114.909381][ T5924] do_syscall_64+0x33e/0x560 [ 114.909397][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.909415][ T5924] [ 114.909415][ T5924] other info that might help us debug this: [ 114.909415][ T5924] [ 114.909421][ T5924] Possible unsafe locking scenario: [ 114.909421][ T5924] [ 114.909427][ T5924] CPU0 CPU1 [ 114.909433][ T5924] ---- ---- [ 114.909438][ T5924] lock(sk_lock-AF_SMC/1); [ 114.909455][ T5924] lock((work_completion)(&new_smc->smc_listen_work)); [ 114.909470][ T5924] lock(sk_lock-AF_SMC/1); [ 114.909482][ T5924] lock((work_completion)(&new_smc->smc_listen_work)); [ 114.909489][ T5924] [ 114.909489][ T5924] *** DEADLOCK *** [ 114.909489][ T5924] [ 114.909492][ T5924] 3 locks held by syz.3.48/5924: [ 114.909498][ T5924] #0: ffff88805c1c02b8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 114.909526][ T5924] #1: ffff88805ffda1d8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 114.909572][ T5924] #2: ffffffff8e1cacc0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 114.909613][ T5924] [ 114.909613][ T5924] stack backtrace: [ 114.909624][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.909641][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.909648][ T5924] Call Trace: [ 114.909652][ T5924] [ 114.909657][ T5924] dump_stack_lvl+0xe8/0x150 [ 114.909669][ T5924] print_circular_bug+0x2e1/0x300 [ 114.909683][ T5924] check_noncircular+0x12e/0x150 [ 114.909704][ T5924] __lock_acquire+0x15a5/0x2d10 [ 114.909726][ T5924] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.909749][ T5924] ? do_raw_spin_unlock+0xf5/0x210 [ 114.909768][ T5924] ? __flush_work+0x104/0xda0 [ 114.909784][ T5924] lock_acquire+0x106/0x350 [ 114.909799][ T5924] ? __flush_work+0x104/0xda0 [ 114.909810][ T5924] ? __flush_work+0x104/0xda0 [ 114.909819][ T5924] __flush_work+0x6df/0xda0 [ 114.909828][ T5924] ? __flush_work+0x104/0xda0 [ 114.909836][ T5924] ? __flush_work+0x104/0xda0 [ 114.909846][ T5924] ? __pfx___flush_work+0x10/0x10 [ 114.909862][ T5924] ? __pfx_wq_barrier_func+0x10/0x10 [ 114.909895][ T5924] ? __cancel_work_sync+0x5c/0x110 [ 114.909914][ T5924] __cancel_work_sync+0xbe/0x110 [ 114.909933][ T5924] smc_clcsock_release+0x60/0xf0 [ 114.909951][ T5924] __smc_release+0x6a0/0x810 [ 114.909964][ T5924] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.909979][ T5924] smc_close_non_accepted+0xd5/0x1f0 [ 114.909993][ T5924] smc_close_active+0xb9b/0xf40 [ 114.910003][ T5924] ? smc_close_active+0x420/0xf40 [ 114.910019][ T5924] ? __pfx_sock_def_readable+0x10/0x10 [ 114.910042][ T5924] __smc_release+0xa0/0x810 [ 114.910065][ T5924] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 114.910093][ T5924] smc_release+0x2eb/0x5a0 [ 114.910117][ T5924] __sock_release+0xb9/0x250 [ 114.910128][ T5924] ? __pfx_sock_close+0x10/0x10 [ 114.910139][ T5924] sock_close+0x1c/0x30 [ 114.910149][ T5924] __fput+0x461/0xa70 [ 114.910160][ T5924] task_work_run+0x1d9/0x270 [ 114.910180][ T5924] ? __pfx_task_work_run+0x10/0x10 [ 114.910204][ T5924] exit_to_user_mode_loop+0xf3/0x4d0 [ 114.910224][ T5924] ? rcu_is_watching+0x15/0xb0 [ 114.910248][ T5924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.910265][ T5924] do_syscall_64+0x33e/0x560 [ 114.910274][ T5924] ? trace_irq_disable+0x3b/0x140 [ 114.910285][ T5924] ? clear_bhb_loop+0x40/0x90 [ 114.910295][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.910305][ T5924] RIP: 0033:0x7f99d9e1ce59 [ 114.910315][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.910327][ T5924] RSP: 002b:00007ffd19434ad8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 114.910345][ T5924] RAX: 0000000000000000 RBX: 00007f99da097da0 RCX: 00007f99d9e1ce59 [ 114.910357][ T5924] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 114.910368][ T5924] RBP: 00007f99da097da0 R08: 00007f99da096038 R09: 0000000000000000 [ 114.910379][ T5924] R10: 000000000003fd94 R11: 0000000000000246 R12: 000000000001c158 [ 114.910391][ T5924] R13: 00007f99da09609c R14: 000000000001be96 R15: 00007f99da096090 [ 114.910411][ T5924] [ 115.299441][ T930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 115.451056][ T930] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.451101][ T930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.451126][ T930] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.451170][ T930] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 115.451191][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.454711][ T5932] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.615513][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 115.615652][ T5716] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 115.628123][ T5716] usb 1-1: USB disconnect, device number 8 [ 116.269999][ T930] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 116.270965][ T930] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input12 [ 116.419670][ T10] usb 3-1: USB disconnect, device number 8 [ 118.006447][ T5716] usb 2-1: USB disconnect, device number 8 [ 118.006445][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19