last executing test programs: 19m43.641361734s ago: executing program 0 (id=1): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x11}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r3}, 0x38) 19m42.871586344s ago: executing program 0 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) 19m35.976786427s ago: executing program 0 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3e, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, r3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 19m35.890408327s ago: executing program 1 (id=11): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 19m34.737231682s ago: executing program 1 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 19m34.661108234s ago: executing program 1 (id=14): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xffd8) 19m33.444928965s ago: executing program 1 (id=16): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x2, 0x1, 0x11}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r3}, 0x38) 19m25.73014725s ago: executing program 0 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, 0x0}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 19m22.705733474s ago: executing program 0 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000640)='.\x00', 0x80000001) fallocate(0xffffffffffffffff, 0x0, 0x8e14, 0x8ffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0x9, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESDEC=r3], &(0x7f0000000000)='GPL\x00', 0x8, 0x9f, &(0x7f0000000540)=""/159, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) 19m20.967468205s ago: executing program 0 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900001100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) close(r7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, r5}, 0xc) 19m18.766352232s ago: executing program 1 (id=27): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 19m17.327207934s ago: executing program 1 (id=28): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="b9", 0x1}], 0x1}, 0x95) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 19m5.795527195s ago: executing program 32 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900001100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000007d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) socket$key(0xf, 0x3, 0x2) r7 = socket$key(0xf, 0x3, 0x2) close(r7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6, r5}, 0xc) 18m58.411739071s ago: executing program 33 (id=28): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000680)="b9", 0x1}], 0x1}, 0x95) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) 12m59.751443087s ago: executing program 4 (id=394): gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 12m59.44524217s ago: executing program 4 (id=395): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 12m58.33734906s ago: executing program 4 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) setrlimit(0x9, 0x0) 12m57.907614009s ago: executing program 4 (id=399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x54000}], 0x1}, 0x8}], 0x1, 0x40000142, 0x0) 12m57.322697427s ago: executing program 4 (id=401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 12m56.873781063s ago: executing program 4 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a00", 0x12) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 12m41.60530545s ago: executing program 34 (id=402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a00", 0x12) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 13.2203246s ago: executing program 2 (id=1672): r0 = socket(0x10, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write(r0, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000080008000e00000000ff", 0x24) 11.932255915s ago: executing program 6 (id=1678): syz_open_dev$loop(&(0x7f0000001280), 0x8, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8a100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 11.646076001s ago: executing program 2 (id=1679): unshare(0x42000000) 9.361031198s ago: executing program 5 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) 8.194756184s ago: executing program 7 (id=1685): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000860000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.317004615s ago: executing program 6 (id=1686): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 6.611507008s ago: executing program 7 (id=1687): r0 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, 0x0, 0x801) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 6.610385134s ago: executing program 6 (id=1688): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x88001, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x36, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.449080791s ago: executing program 3 (id=1689): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x39, 0x301, 0x70bd2d, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448c3}, 0x4c084) 6.373111416s ago: executing program 6 (id=1690): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$smc(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j>', &(0x7f0000000c40)='\xe6use\xe4\x17\xe2M\xda\xd7y\xf8Gek\v\xf6u%\x9b\x00\x00\xad\xeb\x01\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\x00\x00\x00\x00N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000d00)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13\x1b\xd9\xa9\fV\xaf\xc4__\xc8\xe5\bqQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10149, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x73, 0x0) 6.054336663s ago: executing program 3 (id=1691): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x44004090}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x20000020, 0x0) 5.31022179s ago: executing program 7 (id=1692): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000600)="c9f7b98600000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.241498037s ago: executing program 7 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000cf000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.175844731s ago: executing program 6 (id=1694): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x10010400) 5.126022426s ago: executing program 3 (id=1695): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="1400000001090101"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) 3.603925757s ago: executing program 3 (id=1696): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), &(0x7f0000018000)}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 3.219129205s ago: executing program 2 (id=1697): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000860000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.218655484s ago: executing program 7 (id=1698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000005c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}, 0x4008) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) modify_ldt$write2(0x11, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.000154101s ago: executing program 2 (id=1699): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) 1.916789795s ago: executing program 5 (id=1700): openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x88001, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x36, 0x1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.780462037s ago: executing program 2 (id=1701): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x44004090}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x801, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 1.774291088s ago: executing program 3 (id=1702): r0 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, 0x0, 0x801) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 1.662662262s ago: executing program 5 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f00000001c0)='p:s/p ./file0:0', 0xf) 1.661540835s ago: executing program 2 (id=1704): ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x39, {0x0, 0x0, 0x0, 0x7f}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x22, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) 1.028999408s ago: executing program 6 (id=1705): syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc953467", 0xa8) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 682.598122ms ago: executing program 7 (id=1706): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000880)='./dev/gnss0\x00', 0x0, 0xfc559a7289ff8d5e) 678.05926ms ago: executing program 5 (id=1707): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000400)=0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) 593.901548ms ago: executing program 3 (id=1708): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(0x3) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000600)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) 392.173804ms ago: executing program 5 (id=1709): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000860000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 5 (id=1710): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) kernel console output (not intermixed with test programs): miscuous mode [ 944.018189][T10746] veth1_vlan: entered promiscuous mode [ 944.231057][T10746] veth0_macvtap: entered promiscuous mode [ 944.263753][T10746] veth1_macvtap: entered promiscuous mode [ 944.391385][T10746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.444120][T10746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.877575][T10749] veth0_vlan: entered promiscuous mode [ 946.333708][T10749] veth1_vlan: entered promiscuous mode [ 946.351622][ T7807] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.842335][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.846650][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.282452][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.282473][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.358464][T10749] veth0_macvtap: entered promiscuous mode [ 949.423066][T10749] veth1_macvtap: entered promiscuous mode [ 949.548745][ T7789] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.550039][ T7789] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.752049][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.752070][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.756833][T10749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.832132][T10749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.844348][ T7789] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.939562][ T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 950.104252][ T36] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 950.124462][ T36] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 950.124517][ T36] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 950.124540][ T36] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 950.124563][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.124604][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.213224][ T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.223545][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.223989][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.224416][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.193708][ T7768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.193728][ T7768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.463450][ T36] gud 6-1:1.0: USB-1: Failed to add properties (ret=-71) [ 951.463496][ T36] gud 6-1:1.0: Failed to get connectors (error=-71) [ 951.463528][ T36] gud 6-1:1.0: probe with driver gud failed with error -71 [ 951.569921][ T36] usb 6-1: USB disconnect, device number 2 [ 954.396344][ T8911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 954.435019][ T8911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 954.437398][ T8911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 954.461508][ T8911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 954.470509][ T8911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 954.958706][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 955.014255][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 955.016875][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 955.040883][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 955.041823][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 955.714497][T11389] ======================================================= [ 955.714497][T11389] WARNING: The mand mount option has been deprecated and [ 955.714497][T11389] and is ignored by this kernel. Remove the mand [ 955.714497][T11389] option from the mount to silence this warning. [ 955.714497][T11389] ======================================================= [ 955.725593][T11389] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 957.588443][ T8911] Bluetooth: hci1: command tx timeout [ 957.595188][ T8911] Bluetooth: hci4: command tx timeout [ 957.837573][ T4742] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.649180][ T59] Bluetooth: hci4: command tx timeout [ 959.649196][ T8911] Bluetooth: hci1: command tx timeout [ 960.173654][ T4742] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.320246][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 961.421904][T11427] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 961.519083][T11425] hsr_slave_1 (unregistering): left promiscuous mode [ 961.526574][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 963.220757][ T8911] Bluetooth: hci4: command tx timeout [ 963.220791][ T8911] Bluetooth: hci1: command tx timeout [ 963.521771][ T4742] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.960377][T11430] hsr_slave_1 (unregistering): left promiscuous mode [ 964.386906][ T4742] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.892240][ T9128] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 965.309152][ T59] Bluetooth: hci1: command tx timeout [ 965.309265][ T59] Bluetooth: hci4: command tx timeout [ 965.800877][ T9128] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 965.802436][ T9128] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.802488][ T9128] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 965.802510][ T9128] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 965.802534][ T9128] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 965.802584][ T9128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.302526][T11462] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 968.407578][ T9128] gud 6-1:1.0: USB-1: Failed to add properties (ret=-5) [ 968.407632][ T9128] gud 6-1:1.0: Failed to get connectors (error=-5) [ 968.407669][ T9128] gud 6-1:1.0: probe with driver gud failed with error -5 [ 969.482519][ T5593] usb 6-1: USB disconnect, device number 3 [ 973.514159][ T4742] bridge_slave_1: left allmulticast mode [ 973.514192][ T4742] bridge_slave_1: left promiscuous mode [ 973.514454][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.566016][T11503] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 973.920757][ T4742] bridge_slave_0: left allmulticast mode [ 973.920791][ T4742] bridge_slave_0: left promiscuous mode [ 973.921009][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.381796][T11535] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 978.734733][ T4742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.825910][ T4742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.865181][ T4742] bond0 (unregistering): Released all slaves [ 978.931710][T11362] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.931951][T11362] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.932115][T11362] bridge_slave_0: entered allmulticast mode [ 978.934930][T11362] bridge_slave_0: entered promiscuous mode [ 979.013781][T11362] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.013907][T11362] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.014076][T11362] bridge_slave_1: entered allmulticast mode [ 979.017324][T11362] bridge_slave_1: entered promiscuous mode [ 979.135541][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.135630][T11374] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.135741][T11374] bridge_slave_0: entered allmulticast mode [ 979.137760][T11374] bridge_slave_0: entered promiscuous mode [ 979.194862][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.195016][T11374] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.195174][T11374] bridge_slave_1: entered allmulticast mode [ 979.209442][T11374] bridge_slave_1: entered promiscuous mode [ 979.229743][T11362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.269319][T11362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.354265][T11374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.402795][T11374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.405774][T11362] team0: Port device team_slave_0 added [ 979.717599][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 979.717626][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 979.717650][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.717662][ T59] Workqueue: hci0 hci_rx_work [ 979.717796][ T59] Call Trace: [ 979.717811][ T59] [ 979.717820][ T59] dump_stack_lvl+0xe8/0x150 [ 979.717856][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 979.717891][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 979.717930][ T59] ? rt_spin_unlock+0x165/0x200 [ 979.718021][ T59] kobject_add_internal+0x62c/0xce0 [ 979.718111][ T59] kobject_add+0x163/0x240 [ 979.718139][ T59] ? rt_spin_unlock+0x159/0x200 [ 979.718179][ T59] ? __pfx_kobject_add+0x10/0x10 [ 979.718218][ T59] ? get_device_parent+0x370/0x3a0 [ 979.718282][ T59] device_add+0x3fa/0xb80 [ 979.718316][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 979.718410][ T59] le_conn_complete_evt+0xfb7/0x1690 [ 979.718469][ T59] ? le_conn_complete_evt+0x190/0x1690 [ 979.718501][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 979.718532][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 979.718583][ T59] ? rt_mutex_slowunlock+0x219/0x460 [ 979.718618][ T59] ? skb_pull_data+0xf0/0x200 [ 979.718660][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 979.718696][ T59] hci_event_packet+0x67a/0xf10 [ 979.718739][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 979.718789][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 979.718832][ T59] ? rt_spin_unlock+0x159/0x200 [ 979.718876][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 979.718911][ T59] hci_rx_work+0x3ee/0x1020 [ 979.718955][ T59] ? process_scheduled_works+0x97a/0x1630 [ 979.719002][ T59] process_scheduled_works+0xc3d/0x1630 [ 979.719068][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 979.719106][ T59] ? assign_work+0x3cf/0x5d0 [ 979.719140][ T59] worker_thread+0xa47/0xfb0 [ 979.719220][ T59] kthread+0x38b/0x470 [ 979.719250][ T59] ? __pfx_worker_thread+0x10/0x10 [ 979.719273][ T59] ? __pfx_kthread+0x10/0x10 [ 979.719303][ T59] ret_from_fork+0x514/0xb70 [ 979.719346][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 979.719376][ T59] ? __switch_to+0xc89/0x1420 [ 979.719404][ T59] ? __pfx_kthread+0x10/0x10 [ 979.719435][ T59] ret_from_fork_asm+0x1a/0x30 [ 979.719470][ T59] [ 979.719699][ T59] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 979.719740][ T59] Bluetooth: hci0: failed to register connection device [ 983.359284][ T8911] Bluetooth: hci0: command 0x0406 tx timeout [ 985.607699][T11362] team0: Port device team_slave_1 added [ 987.060867][ T8911] Bluetooth: hci0: command 0x0406 tx timeout [ 987.527021][T11374] team0: Port device team_slave_0 added [ 987.570351][T11374] team0: Port device team_slave_1 added [ 987.603660][T11362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.603677][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.603706][T11362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.734994][T11362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.735013][T11362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.735042][T11362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.991196][T11586] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 990.318141][T11374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.318161][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.318191][T11374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.413304][T11374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.413321][T11374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 990.413349][T11374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.524990][T11362] hsr_slave_0: entered promiscuous mode [ 993.526554][T11362] hsr_slave_1: entered promiscuous mode [ 995.401251][ T4742] hsr_slave_0: left promiscuous mode [ 995.439084][ T4742] hsr_slave_1: left promiscuous mode [ 995.440191][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.440213][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.502135][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.502160][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 995.666028][ T4742] veth1_macvtap: left promiscuous mode [ 995.666101][ T4742] veth0_macvtap: left promiscuous mode [ 995.692567][ T4742] veth1_vlan: left promiscuous mode [ 995.692844][ T4742] veth0_vlan: left promiscuous mode [ 996.197138][T11634] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 997.649648][ T4742] team0 (unregistering): Port device team_slave_1 removed [ 997.703280][ T4742] team0 (unregistering): Port device team_slave_0 removed [ 997.900256][T11374] hsr_slave_0: entered promiscuous mode [ 997.901751][T11374] hsr_slave_1: entered promiscuous mode [ 997.902825][T11374] debugfs: 'hsr0' already exists in 'hsr' [ 997.902851][T11374] Cannot create hsr debugfs directory [ 997.907188][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 997.971826][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.971906][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.396413][T11659] overlayfs: overlapping lowerdir path [ 999.409463][T11661] overlayfs: overlapping lowerdir path [ 1000.186605][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 1000.916519][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1138'. [ 1004.236520][T11684] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1005.862813][ T4742] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.983258][T11713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1142'. [ 1007.413695][T11725] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1147'. [ 1007.703706][ T4742] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.104623][ T4742] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.444922][T11763] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1011.578275][ T4742] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.054145][T11769] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1012.578160][ T4742] bridge_slave_1: left allmulticast mode [ 1012.578200][ T4742] bridge_slave_1: left promiscuous mode [ 1012.578474][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.731802][ T4742] bridge_slave_0: left allmulticast mode [ 1012.731839][ T4742] bridge_slave_0: left promiscuous mode [ 1012.732070][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.374411][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.403474][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.428667][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.440981][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.443548][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1013.860544][ T4742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.919647][ T4742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.964881][ T4742] bond0 (unregistering): Released all slaves [ 1015.434784][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1015.447727][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1015.720025][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1016.357060][ T59] Bluetooth: hci5: command tx timeout [ 1016.357348][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1016.427663][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1016.431095][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1017.559329][T11837] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1018.428770][T11563] Bluetooth: hci5: command tx timeout [ 1019.160330][T11563] Bluetooth: hci6: command tx timeout [ 1020.815997][T11563] Bluetooth: hci5: command tx timeout [ 1021.078318][ T5244] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1021.180044][T11563] Bluetooth: hci6: command tx timeout [ 1022.526191][T11893] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1022.641548][T11894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1175'. [ 1022.849148][T11563] Bluetooth: hci5: command tx timeout [ 1023.734081][T11563] Bluetooth: hci6: command tx timeout [ 1027.293328][ T59] Bluetooth: hci6: command tx timeout [ 1027.317552][ T4742] hsr_slave_0: left promiscuous mode [ 1027.359668][ T4742] hsr_slave_1: left promiscuous mode [ 1027.360840][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.360864][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.415348][ T4742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.415372][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.471448][ T4742] veth1_macvtap: left promiscuous mode [ 1027.471512][ T4742] veth0_macvtap: left promiscuous mode [ 1027.471714][ T4742] veth1_vlan: left promiscuous mode [ 1027.471851][ T4742] veth0_vlan: left promiscuous mode [ 1027.509143][T11924] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1028.149400][ T4742] team0 (unregistering): Port device team_slave_1 removed [ 1028.189939][ T4742] team0 (unregistering): Port device team_slave_0 removed [ 1028.377323][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 1032.853112][T11977] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1033.259343][T11985] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1197'. [ 1033.262454][T11988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1198'. [ 1033.503217][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.503428][T11794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.503629][T11794] bridge_slave_0: entered allmulticast mode [ 1033.508693][T11794] bridge_slave_0: entered promiscuous mode [ 1033.934014][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1199'. [ 1033.934086][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1199'. [ 1035.232090][T11794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.232226][T11794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.232397][T11794] bridge_slave_1: entered allmulticast mode [ 1035.235011][T11794] bridge_slave_1: entered promiscuous mode [ 1035.610526][ T4742] bridge_slave_1: left allmulticast mode [ 1035.610565][ T4742] bridge_slave_1: left promiscuous mode [ 1035.610843][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.809802][ T4742] bridge_slave_0: left allmulticast mode [ 1035.809835][ T4742] bridge_slave_0: left promiscuous mode [ 1035.810079][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.849554][ T4742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.087779][ T4742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.142824][ T4742] bond0 (unregistering): Released all slaves [ 1038.211922][T11808] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.212043][T11808] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.212242][T11808] bridge_slave_0: entered allmulticast mode [ 1038.215357][T11808] bridge_slave_0: entered promiscuous mode [ 1038.374550][T12051] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1038.559670][T11808] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.559790][T11808] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.559934][T11808] bridge_slave_1: entered allmulticast mode [ 1038.562003][T11808] bridge_slave_1: entered promiscuous mode [ 1038.567243][T11794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.572525][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1208'. [ 1038.904592][T11794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.488966][ T4742] hsr_slave_0: left promiscuous mode [ 1040.715688][ T4742] hsr_slave_1: left promiscuous mode [ 1040.716574][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.761054][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.629515][ T4742] team0 (unregistering): Port device team_slave_1 removed [ 1041.699709][ T4742] team0 (unregistering): Port device team_slave_0 removed [ 1041.982795][T11808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.055939][T11808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.058609][T11794] team0: Port device team_slave_0 added [ 1042.105252][T11794] team0: Port device team_slave_1 added [ 1042.269509][T11808] team0: Port device team_slave_0 added [ 1042.336976][T11808] team0: Port device team_slave_1 added [ 1042.337696][T11794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.337707][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.337729][T11794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.412808][T11794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.412835][T11794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.412861][T11794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.415221][T12082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 1042.539813][T11808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.539828][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.539845][T11808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.542631][T11808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.542641][T11808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.542662][T11808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.705189][T12084] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1042.765290][T11794] hsr_slave_0: entered promiscuous mode [ 1042.766456][T11794] hsr_slave_1: entered promiscuous mode [ 1042.767357][T11794] debugfs: 'hsr0' already exists in 'hsr' [ 1042.767377][T11794] Cannot create hsr debugfs directory [ 1042.872806][T11808] hsr_slave_0: entered promiscuous mode [ 1042.874175][T11808] hsr_slave_1: entered promiscuous mode [ 1042.875293][T11808] debugfs: 'hsr0' already exists in 'hsr' [ 1042.875316][T11808] Cannot create hsr debugfs directory [ 1046.119186][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1226'. [ 1046.187122][T12111] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1051.999743][ T4742] bridge_slave_1: left allmulticast mode [ 1051.999782][ T4742] bridge_slave_1: left promiscuous mode [ 1052.000088][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.144647][ T4742] bridge_slave_0: left allmulticast mode [ 1052.144681][ T4742] bridge_slave_0: left promiscuous mode [ 1052.144918][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.151881][ T4742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.296968][ T4742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.382187][ T4742] bond0 (unregistering): Released all slaves [ 1054.446057][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1054.943585][ T4742] hsr_slave_0: left promiscuous mode [ 1054.961198][ T4742] hsr_slave_1: left promiscuous mode [ 1054.964255][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.982451][ T4742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.864116][ T4742] team0 (unregistering): Port device team_slave_1 removed [ 1056.921812][ T4742] team0 (unregistering): Port device team_slave_0 removed [ 1059.412998][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.413069][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.324506][T11794] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1061.372820][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.373267][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1254'. [ 1061.396537][T11794] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1061.436049][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1061.452113][T11794] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1061.612187][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1061.613504][T11794] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1061.701590][T11794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.224609][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'. [ 1063.530863][T11808] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1064.926720][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.958038][T11808] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1065.125756][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1065.128629][T11808] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1067.276278][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1067.285756][T11808] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1067.376957][T11808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1067.391348][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1264'. [ 1067.564293][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 1067.587556][T11794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.695360][T11794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.717341][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.718192][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.758483][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.758654][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.862731][T11808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.934667][T11808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1067.998353][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.003134][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.029977][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.030219][ T7794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.676074][T11794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.252920][T11808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.468589][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1275'. [ 1072.668864][T11794] veth0_vlan: entered promiscuous mode [ 1072.719045][T11794] veth1_vlan: entered promiscuous mode [ 1072.811332][T11794] veth0_macvtap: entered promiscuous mode [ 1072.827081][T11794] veth1_macvtap: entered promiscuous mode [ 1072.856866][T11794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.955294][T11794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.010535][ T7776] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.010666][ T7776] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.010703][ T7776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.010737][ T7776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.117097][T11808] veth0_vlan: entered promiscuous mode [ 1077.739428][T11563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1077.793389][T11563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1077.812373][T11563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1077.831035][T11563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1077.832607][T11563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1077.949757][T12411] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1078.317078][T12421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'. [ 1078.521331][T11563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1078.573872][T11563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1078.577634][T11563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1078.593067][T11563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1078.597778][T11563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1080.052511][ T59] Bluetooth: hci1: command tx timeout [ 1080.690146][T11563] Bluetooth: hci4: command tx timeout [ 1081.991279][ T7789] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.128976][T11563] Bluetooth: hci1: command tx timeout [ 1082.274770][T12461] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1082.628668][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1293'. [ 1082.794069][T11563] Bluetooth: hci4: command tx timeout [ 1082.887779][ T7789] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.799003][T11563] Bluetooth: hci1: command tx timeout [ 1084.859262][T11563] Bluetooth: hci4: command tx timeout [ 1086.848884][T11563] Bluetooth: hci1: command tx timeout [ 1086.865796][ T7789] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.947512][T11563] Bluetooth: hci4: command tx timeout [ 1087.445591][ T7789] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.868457][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1306'. [ 1096.551094][ T7789] bridge_slave_1: left allmulticast mode [ 1096.551132][ T7789] bridge_slave_1: left promiscuous mode [ 1096.551406][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.712733][T12556] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1099.241635][ T7789] bridge_slave_0: left allmulticast mode [ 1099.241670][ T7789] bridge_slave_0: left promiscuous mode [ 1099.241917][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.264910][T12583] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1103.182221][ T7789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1103.264653][ T7789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1103.319142][ T7789] bond0 (unregistering): Released all slaves [ 1103.597453][T12595] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1103.630330][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.630468][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.630596][T12407] bridge_slave_0: entered allmulticast mode [ 1103.632591][T12407] bridge_slave_0: entered promiscuous mode [ 1103.801876][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.801971][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.802102][T12407] bridge_slave_1: entered allmulticast mode [ 1103.815419][T12407] bridge_slave_1: entered promiscuous mode [ 1104.013867][T12425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.014014][T12425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.014117][T12425] bridge_slave_0: entered allmulticast mode [ 1104.037690][T12425] bridge_slave_0: entered promiscuous mode [ 1104.153572][T12425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.153734][T12425] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.153833][T12425] bridge_slave_1: entered allmulticast mode [ 1104.202540][T12425] bridge_slave_1: entered promiscuous mode [ 1104.235940][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.493723][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.896487][T12425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.120711][T12425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.273644][T12407] team0: Port device team_slave_0 added [ 1105.424637][T12407] team0: Port device team_slave_1 added [ 1105.763638][ T7789] hsr_slave_0: left promiscuous mode [ 1107.393367][ T7789] hsr_slave_1: left promiscuous mode [ 1107.426065][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1107.426091][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.470636][ T7789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1107.470662][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.562890][ T7789] veth1_macvtap: left promiscuous mode [ 1107.562952][ T7789] veth0_macvtap: left promiscuous mode [ 1107.563140][ T7789] veth1_vlan: left promiscuous mode [ 1107.563291][ T7789] veth0_vlan: left promiscuous mode [ 1108.755545][T12621] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1108.871501][T12623] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1330'. [ 1108.944705][ T7789] team0 (unregistering): Port device team_slave_1 removed [ 1108.999774][ T7789] team0 (unregistering): Port device team_slave_0 removed [ 1109.251828][T12425] team0: Port device team_slave_0 added [ 1109.365831][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1109.366356][T12623] veth1_to_team: entered allmulticast mode [ 1110.645040][T12425] team0: Port device team_slave_1 added [ 1110.647566][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.647580][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.647607][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.760586][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.760602][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.760630][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.869108][T12425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.869126][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.869156][T12425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.879155][T12425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.879207][T12425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.879299][T12425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.985672][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1336'. [ 1112.076160][T12650] bond0: entered promiscuous mode [ 1112.076183][T12650] bond_slave_0: entered promiscuous mode [ 1112.076421][T12650] bond_slave_1: entered promiscuous mode [ 1112.149981][T12650] gretap0: entered promiscuous mode [ 1112.152368][T12650] debugfs: 'hsr1' already exists in 'hsr' [ 1112.153559][T12650] Cannot create hsr debugfs directory [ 1112.153581][T12650] hsr1: entered promiscuous mode [ 1112.266350][T12407] hsr_slave_0: entered promiscuous mode [ 1112.267592][T12407] hsr_slave_1: entered promiscuous mode [ 1112.372141][T12659] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1112.493949][T12425] hsr_slave_0: entered promiscuous mode [ 1112.496483][T12425] hsr_slave_1: entered promiscuous mode [ 1112.506983][T12425] debugfs: 'hsr0' already exists in 'hsr' [ 1112.507038][T12425] Cannot create hsr debugfs directory [ 1118.053741][ T5244] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1119.325818][T12708] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1119.498888][ T36] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1120.499738][ T36] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1120.542203][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.542234][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.542278][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.654911][ T36] usb 6-1: config 0 descriptor?? [ 1120.858433][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.870891][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.319433][ T36] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 1121.319462][ T36] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 1121.319481][ T36] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 1121.319499][ T36] smartjoyplus 0003:0925:8888.0001: unknown main item tag 0x0 [ 1121.319516][ T36] smartjoyplus 0003:0925:8888.0001: item fetching failed at offset 4/8 [ 1121.320131][ T36] smartjoyplus 0003:0925:8888.0001: parse failed [ 1121.320184][ T36] smartjoyplus 0003:0925:8888.0001: probe with driver smartjoyplus failed with error -22 [ 1121.530920][ T36] usb 6-1: USB disconnect, device number 4 [ 1122.189595][ T5593] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1123.571186][ T5593] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1123.575648][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.575679][ T5593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.575706][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.796565][ T5593] usb 4-1: config 0 descriptor?? [ 1123.938645][T12738] hsr1: left promiscuous mode [ 1124.356012][ T5593] smartjoyplus 0003:0925:8888.0002: unknown main item tag 0x0 [ 1124.356036][ T5593] smartjoyplus 0003:0925:8888.0002: unknown main item tag 0x0 [ 1124.356052][ T5593] smartjoyplus 0003:0925:8888.0002: unknown main item tag 0x0 [ 1124.356068][ T5593] smartjoyplus 0003:0925:8888.0002: unknown main item tag 0x0 [ 1124.356083][ T5593] smartjoyplus 0003:0925:8888.0002: item fetching failed at offset 4/8 [ 1124.356569][ T5593] smartjoyplus 0003:0925:8888.0002: parse failed [ 1124.356613][ T5593] smartjoyplus 0003:0925:8888.0002: probe with driver smartjoyplus failed with error -22 [ 1124.637381][ T5593] usb 4-1: USB disconnect, device number 9 [ 1128.279128][ T7789] bridge_slave_1: left allmulticast mode [ 1128.279165][ T7789] bridge_slave_1: left promiscuous mode [ 1128.279454][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.522937][ T7789] bridge_slave_0: left allmulticast mode [ 1128.522971][ T7789] bridge_slave_0: left promiscuous mode [ 1128.523231][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.488908][ T9613] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1129.721332][ T9613] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1129.760696][ T9613] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1129.760730][ T9613] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1129.760757][ T9613] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1129.760797][ T9613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.878369][T12804] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1130.672374][ T7789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.729354][ T7789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.775542][ T7789] bond0 (unregistering): Released all slaves [ 1131.766721][ T7789] hsr_slave_0: left promiscuous mode [ 1131.828987][ T7789] hsr_slave_1: left promiscuous mode [ 1131.830085][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.885208][ T7789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.051228][ T7789] veth0_vlan: left promiscuous mode [ 1133.244524][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.296092][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.297421][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.301587][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.331078][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.458721][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.461358][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1133.461938][ T9613] aiptek 6-1:17.0: Aiptek tried all speeds, no sane response [ 1133.463195][ T9613] aiptek 6-1:17.0: probe with driver aiptek failed with error -22 [ 1134.558959][ T9613] usb 6-1: USB disconnect, device number 5 [ 1134.909633][ T7789] team0 (unregistering): Port device team_slave_1 removed [ 1134.958837][ T9613] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1134.979853][ T7789] team0 (unregistering): Port device team_slave_0 removed [ 1135.120002][ T9613] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1135.121726][ T9613] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.121776][ T9613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.128525][ T9613] usb 6-1: config 0 descriptor?? [ 1135.201183][ T9613] pwc: Askey VC010 type 2 USB webcam detected. [ 1135.604520][ T9613] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1135.618587][ T9613] pwc: recv_control_msg error -32 req 02 val 2700 [ 1135.631673][ T9613] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1135.634387][ T9613] pwc: recv_control_msg error -32 req 04 val 1000 [ 1135.636033][ T9613] pwc: recv_control_msg error -32 req 04 val 1300 [ 1135.636855][ T9613] pwc: recv_control_msg error -32 req 04 val 1400 [ 1135.637996][ T9613] pwc: recv_control_msg error -32 req 02 val 2000 [ 1135.677831][ T9613] pwc: recv_control_msg error -32 req 02 val 2100 [ 1135.699060][ T9613] pwc: recv_control_msg error -32 req 04 val 1500 [ 1135.702735][ T9613] pwc: recv_control_msg error -32 req 02 val 2500 [ 1135.935119][ T9613] pwc: recv_control_msg error -71 req 02 val 2600 [ 1135.938021][ T9613] pwc: recv_control_msg error -71 req 02 val 2900 [ 1135.938538][ T9613] pwc: recv_control_msg error -71 req 02 val 2800 [ 1135.960160][ T9613] pwc: recv_control_msg error -71 req 04 val 1100 [ 1135.982455][ T9613] pwc: recv_control_msg error -71 req 04 val 1200 [ 1136.059615][ T5702] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1136.066050][ T9613] pwc: Registered as video103. [ 1136.112198][ T9613] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 1136.230425][ T5702] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1136.232259][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.232323][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.271426][ T5702] usb 3-1: config 0 descriptor?? [ 1136.331210][ T9613] usb 6-1: USB disconnect, device number 6 [ 1136.636584][ T5702] usbhid 3-1:0.0: can't add hid device: -71 [ 1136.636703][ T5702] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1136.759382][ T5702] usb 3-1: USB disconnect, device number 6 [ 1137.270373][ T5702] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1137.428888][ T5702] usb 3-1: Using ep0 maxpacket: 16 [ 1137.430800][ T5702] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1137.466926][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1137.466980][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.496851][ T5702] usb 3-1: config 0 descriptor?? [ 1138.063007][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063042][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063068][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063094][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063119][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063145][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063215][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063240][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063266][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.063292][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: unknown main item tag 0x0 [ 1138.305641][ T5702] aquacomputer_d5next 0003:0C70:F00D.0003: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 1138.325118][T12425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1138.385529][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1138.390800][T12425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1138.455121][T12425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1138.658840][ T9613] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1138.830481][ T9613] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1138.836284][ T9613] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1138.836309][ T9613] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1138.836345][ T9613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.897322][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1138.938497][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1138.971765][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1138.974663][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1138.975514][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1139.233086][ T5702] usb 3-1: USB disconnect, device number 7 [ 1139.284410][ T5593] usb 6-1: USB disconnect, device number 7 [ 1140.073916][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1140.171162][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1140.177998][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1140.196446][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1140.206590][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1140.698886][ T5593] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1140.854469][ T5593] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1140.855551][ T5593] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1140.855568][ T5593] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1140.855592][ T5593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.173537][T11563] Bluetooth: hci5: command tx timeout [ 1141.358919][ T5974] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1141.377920][ T5593] usb 6-1: USB disconnect, device number 8 [ 1141.530329][ T5974] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1141.531710][ T5974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.531740][ T5974] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.531781][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.886272][T12948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1397'. [ 1141.969206][ T5974] usb 3-1: USB disconnect, device number 8 [ 1143.508092][T11563] Bluetooth: hci1: command tx timeout [ 1143.508467][T11563] Bluetooth: hci5: command tx timeout [ 1144.368847][ T5702] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1144.519391][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 1144.520334][ T5702] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1144.523687][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1144.523716][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.544063][ T5702] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1144.544124][ T5702] usb 4-1: Manufacturer: syz [ 1144.577604][ T5702] usb 4-1: config 0 descriptor?? [ 1145.035692][ T5702] usbhid 4-1:0.0: can't add hid device: -71 [ 1145.035789][ T5702] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1145.095814][ T5702] usb 4-1: USB disconnect, device number 10 [ 1145.580139][T11563] Bluetooth: hci1: command tx timeout [ 1145.580259][ T59] Bluetooth: hci5: command tx timeout [ 1146.439530][ T7798] bridge_slave_1: left allmulticast mode [ 1146.439558][ T7798] bridge_slave_1: left promiscuous mode [ 1146.439763][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.469078][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1146.539019][ T5974] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1146.558261][ T7798] bridge_slave_0: left allmulticast mode [ 1146.558291][ T7798] bridge_slave_0: left promiscuous mode [ 1146.558504][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.629754][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1146.633962][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.633994][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1146.634020][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1146.634061][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.694262][ T5974] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1146.708095][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.708124][ T5974] usb 3-1: Product: syz [ 1146.708139][ T5974] usb 3-1: Manufacturer: syz [ 1146.708154][ T5974] usb 3-1: SerialNumber: syz [ 1146.735858][T12994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1146.762877][ T5974] usb 3-1: config 0 descriptor?? [ 1146.811968][ T5974] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1146.996298][ T5974] gspca_sunplus: reg_r err -32 [ 1147.050874][ T5974] usb 3-1: USB disconnect, device number 9 [ 1147.209466][ T7798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.290116][ T7798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.351470][ T7798] bond0 (unregistering): Released all slaves [ 1147.469095][T12898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.469182][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.469368][T12898] bridge_slave_0: entered allmulticast mode [ 1147.493991][T12898] bridge_slave_0: entered promiscuous mode [ 1147.525987][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.526119][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.526235][T12898] bridge_slave_1: entered allmulticast mode [ 1147.528101][T12898] bridge_slave_1: entered promiscuous mode [ 1147.649132][ T59] Bluetooth: hci5: command tx timeout [ 1147.649167][ T59] Bluetooth: hci1: command tx timeout [ 1147.774939][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.938957][ T7798] hsr_slave_0: left promiscuous mode [ 1147.958897][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1147.979027][ T7798] hsr_slave_1: left promiscuous mode [ 1147.979915][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.003175][ T7798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.109658][ T36] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1148.113400][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1148.113425][ T36] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1148.113449][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.372465][ T36] usb 3-1: USB disconnect, device number 10 [ 1148.521108][ T7798] team0 (unregistering): Port device team_slave_1 removed [ 1148.570009][ T7798] team0 (unregistering): Port device team_slave_0 removed [ 1148.775626][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.776006][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.776236][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.776394][T12913] bridge_slave_0: entered allmulticast mode [ 1148.808861][T12913] bridge_slave_0: entered promiscuous mode [ 1148.888173][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.888304][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.888468][T12913] bridge_slave_1: entered allmulticast mode [ 1148.915131][T12913] bridge_slave_1: entered promiscuous mode [ 1148.984063][T12898] team0: Port device team_slave_0 added [ 1149.045012][T12898] team0: Port device team_slave_1 added [ 1149.058215][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.140959][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.141930][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.141945][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.141975][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.216276][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.216299][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.216316][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.366763][T12913] team0: Port device team_slave_0 added [ 1149.388859][ T5974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1149.423545][T12913] team0: Port device team_slave_1 added [ 1149.541734][ T5974] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1149.586160][ T5974] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1149.586211][ T5974] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1149.586238][ T5974] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1149.586282][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.634512][T12898] hsr_slave_0: entered promiscuous mode [ 1149.635761][T12898] hsr_slave_1: entered promiscuous mode [ 1149.650489][T13005] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1149.730172][T11563] Bluetooth: hci1: command tx timeout [ 1149.823405][ T9] aiptek 4-1:17.0: Aiptek tried all speeds, no sane response [ 1149.823624][ T9] aiptek 4-1:17.0: probe with driver aiptek failed with error -22 [ 1149.881127][ T9] usb 4-1: USB disconnect, device number 11 [ 1150.002069][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.002087][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.002171][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1150.449336][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1150.449354][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.449381][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.452902][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1150.841866][T12913] hsr_slave_0: entered promiscuous mode [ 1150.854093][T12913] hsr_slave_1: entered promiscuous mode [ 1150.865043][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 1150.865064][T12913] Cannot create hsr debugfs directory [ 1153.413263][ T5244] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1153.539803][ T5974] aiptek 6-1:17.0: Aiptek tried all speeds, no sane response [ 1153.539974][ T5974] aiptek 6-1:17.0: probe with driver aiptek failed with error -22 [ 1153.574250][ T5974] usb 6-1: USB disconnect, device number 9 [ 1157.818880][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1157.982575][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1157.984143][ T9] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1157.984172][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1157.984197][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1157.984235][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.051938][T13085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1158.799712][ T66] bridge_slave_1: left allmulticast mode [ 1158.799746][ T66] bridge_slave_1: left promiscuous mode [ 1158.800037][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.940410][ T66] bridge_slave_0: left allmulticast mode [ 1158.940441][ T66] bridge_slave_0: left promiscuous mode [ 1158.940678][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.232074][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1160.287116][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input18 [ 1163.252828][ T9] usb 3-1: USB disconnect, device number 11 [ 1163.252915][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1163.594741][ T8446] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1164.656030][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1164.760174][ T8446] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1164.761731][ T8446] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.761785][ T8446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.821995][ T8446] usb 4-1: config 0 descriptor?? [ 1164.878720][ T8446] pwc: Askey VC010 type 2 USB webcam detected. [ 1164.931991][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.036580][ T66] bond0 (unregistering): Released all slaves [ 1165.382125][ T8446] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1165.384204][ T8446] pwc: recv_control_msg error -32 req 02 val 2700 [ 1165.458513][ T8446] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1165.468896][ T8446] pwc: recv_control_msg error -32 req 04 val 1000 [ 1165.469945][ T8446] pwc: recv_control_msg error -32 req 04 val 1300 [ 1165.509120][ T8446] pwc: recv_control_msg error -32 req 04 val 1400 [ 1165.509997][ T8446] pwc: recv_control_msg error -32 req 02 val 2000 [ 1165.530668][ T8446] pwc: recv_control_msg error -32 req 02 val 2100 [ 1165.531315][ T8446] pwc: recv_control_msg error -32 req 04 val 1500 [ 1165.537608][ T8446] pwc: recv_control_msg error -32 req 02 val 2500 [ 1165.815017][ T8446] pwc: recv_control_msg error -71 req 02 val 2600 [ 1165.836678][ T8446] pwc: recv_control_msg error -71 req 02 val 2900 [ 1165.867886][ T8446] pwc: recv_control_msg error -71 req 02 val 2800 [ 1165.876843][ T8446] pwc: recv_control_msg error -71 req 04 val 1100 [ 1165.878423][ T8446] pwc: recv_control_msg error -71 req 04 val 1200 [ 1166.047812][ T8446] pwc: Registered as video103. [ 1166.083612][ T8446] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 1166.223150][ T8446] usb 4-1: USB disconnect, device number 12 [ 1166.440198][ T66] hsr_slave_0: left promiscuous mode [ 1166.487047][ T66] hsr_slave_1: left promiscuous mode [ 1166.488334][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.510984][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1167.569639][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1167.624735][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1167.678919][ T36] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1167.830453][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 1167.832154][ T36] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1167.834377][ T36] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1167.867389][ T36] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1167.867419][ T36] usb 3-1: Product: syz [ 1167.867434][ T36] usb 3-1: Manufacturer: syz [ 1167.867451][ T36] usb 3-1: SerialNumber: syz [ 1167.933138][ T36] usb 3-1: config 0 descriptor?? [ 1167.934343][T13161] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1167.953537][ T36] hub 3-1:0.0: bad descriptor, ignoring hub [ 1167.953575][ T36] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1168.398864][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1168.595884][ T9] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1168.610116][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.610173][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.642812][ T9] usb 4-1: config 0 descriptor?? [ 1169.255337][ T9] aquacomputer_d5next 0003:0C70:F00A.0004: collection stack underflow [ 1169.255371][ T9] aquacomputer_d5next 0003:0C70:F00A.0004: item 0 2 0 12 parsing failed [ 1169.257238][ T9] aquacomputer_d5next 0003:0C70:F00A.0004: probe with driver aquacomputer_d5next failed with error -22 [ 1169.350741][T13180] binder: BINDER_SET_CONTEXT_MGR already set [ 1169.350758][T13180] binder: 13179:13180 ioctl 4018620d 200000004a80 returned -16 [ 1169.430060][ T5974] usb 4-1: USB disconnect, device number 13 [ 1169.535553][ T8446] usb 3-1: USB disconnect, device number 12 [ 1169.833523][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1170.009763][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1170.012459][ T9] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1170.012494][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1170.012523][ T9] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1170.012568][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.089163][T13182] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1171.308163][T12898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1171.412843][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1171.414175][T12898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1171.475310][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.476531][T12898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1171.522674][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.541047][T12898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1171.589585][T12898] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.706134][ T5593] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1171.870808][ T5593] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1171.875613][ T5593] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1171.875649][ T5593] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1171.875678][ T5593] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1171.875729][ T5593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.967631][T13211] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1172.292465][T12913] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1173.640503][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1173.676504][T12913] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1173.706440][ T9] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1173.723742][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input20 [ 1173.752699][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1173.779406][T12913] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1173.857310][ T9] usb 6-1: USB disconnect, device number 10 [ 1173.857385][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1173.859802][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1173.885958][T12913] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1173.932520][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1174.129170][T12898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.221465][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.241426][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.241546][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.285052][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.285141][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.396813][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.475616][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.501461][T11641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.501543][T11641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.515992][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1174.580969][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.581104][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.711097][ T9] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1174.721506][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1174.721569][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.770716][ T9] usb 6-1: config 0 descriptor?? [ 1175.298342][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1175.298471][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1175.328325][ T9] usb 6-1: USB disconnect, device number 11 [ 1175.719376][ T5593] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1175.743885][ T5593] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input21 [ 1176.366345][ T5593] usb 4-1: USB disconnect, device number 14 [ 1176.366432][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1176.388897][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1176.463142][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.540618][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1176.542226][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.542281][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.604962][ T9] usb 3-1: config 0 descriptor?? [ 1176.917756][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1177.581416][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1177.757310][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1177.759794][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1177.761303][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1177.763508][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1177.767747][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1177.923852][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1177.940261][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1177.958314][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1177.966249][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1178.784284][T12898] veth0_vlan: entered promiscuous mode [ 1178.865763][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1178.883105][T12898] veth1_vlan: entered promiscuous mode [ 1179.071678][T12898] veth0_macvtap: entered promiscuous mode [ 1179.082487][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1179.082997][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1179.083831][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1179.085249][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1179.086059][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1179.167388][T12898] veth1_macvtap: entered promiscuous mode [ 1179.238140][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.252361][ T9] pwc: Registered as video103. [ 1179.280674][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 1179.331517][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.375189][ T9] usb 3-1: USB disconnect, device number 13 [ 1180.159884][T11348] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1180.308942][T12913] veth0_vlan: entered promiscuous mode [ 1180.365139][ T978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.366016][ T978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.366370][ T978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.413132][T11348] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1180.425058][T11348] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.425169][T11348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.482900][T11566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.482916][T11566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.551371][T12913] veth1_vlan: entered promiscuous mode [ 1180.581464][T11348] usb 6-1: config 0 descriptor?? [ 1181.817423][ T1470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.817446][ T1470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.822135][ T5708] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1182.015993][T12913] veth0_macvtap: entered promiscuous mode [ 1182.034524][T12913] veth1_macvtap: entered promiscuous mode [ 1182.075181][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.101985][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.130454][T11348] usbhid 6-1:0.0: can't add hid device: -71 [ 1182.130557][T11348] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1182.152180][ T5708] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1182.166917][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.166942][ T5708] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1182.186289][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.186363][ T5708] usb 3-1: Product: syz [ 1182.186414][ T5708] usb 3-1: Manufacturer: syz [ 1182.186466][ T5708] usb 3-1: SerialNumber: syz [ 1182.522455][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.526610][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.976625][T11348] usb 6-1: USB disconnect, device number 12 [ 1183.043711][ T1470] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.043858][ T1470] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.044055][ T1470] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.044240][ T1470] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.262834][ T5708] usb 3-1: can't set config #1, error -71 [ 1183.304356][T13331] nvme_fcloop: unknown parameter or missing value 'lpwwnn=' [ 1183.334310][ T5708] usb 3-1: USB disconnect, device number 14 [ 1183.547716][T11566] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.483449][T13345] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1469'. [ 1184.565729][ T7798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.565767][ T7798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.934234][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.934269][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.611614][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.646389][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.182935][ T5593] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1188.340050][ T5593] usb 3-1: Using ep0 maxpacket: 32 [ 1188.342644][ T5593] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1188.344356][ T5593] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1188.378195][ T5593] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1188.378223][ T5593] usb 3-1: Product: syz [ 1188.378239][ T5593] usb 3-1: Manufacturer: syz [ 1188.378255][ T5593] usb 3-1: SerialNumber: syz [ 1188.473640][ T5593] usb 3-1: config 0 descriptor?? [ 1188.475985][T13382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1188.517238][ T5593] hub 3-1:0.0: bad descriptor, ignoring hub [ 1188.517283][ T5593] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1188.757163][T13367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1188.769993][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1188.814669][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1188.822303][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1188.826868][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1188.827784][T13367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1188.833680][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1189.140502][T13318] usb 3-1: USB disconnect, device number 15 [ 1190.108996][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1190.199001][T13318] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1190.262277][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1190.263687][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.263742][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.278191][ T10] usb 6-1: config 0 descriptor?? [ 1190.328394][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 1190.393929][T13318] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1190.397884][T13318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1190.422000][T13318] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1190.422024][T13318] usb 3-1: Product: syz [ 1190.422037][T13318] usb 3-1: Manufacturer: syz [ 1190.422101][T13318] usb 3-1: SerialNumber: syz [ 1190.456553][T13318] usb 3-1: config 0 descriptor?? [ 1190.470827][T13382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1190.476307][T13318] hub 3-1:0.0: bad descriptor, ignoring hub [ 1190.476333][T13318] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1190.762680][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1190.764588][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 1190.765597][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1190.766275][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 1190.767180][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 1190.767932][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 1190.800482][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 1190.803904][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 1190.823847][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 1190.840325][ T5593] usb 3-1: USB disconnect, device number 16 [ 1191.008822][T11563] Bluetooth: hci4: command tx timeout [ 1191.029969][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 1191.030372][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 1191.032505][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 1191.032956][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 1191.035177][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 1191.042113][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 1191.087383][ T10] pwc: Registered as video103. [ 1191.094760][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 1191.111977][ T10] usb 6-1: USB disconnect, device number 13 [ 1191.452284][ T7798] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.452505][T11566] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.452549][T11566] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.452590][T11566] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.558859][ T5593] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1191.676385][ T5585] syz-executor (5585) used greatest stack depth: 17104 bytes left [ 1191.710246][ T5593] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1191.711718][ T5593] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.711774][ T5593] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.757288][ T5593] usb 8-1: config 0 descriptor?? [ 1191.774243][ T5593] pwc: Askey VC010 type 2 USB webcam detected. [ 1191.782960][T11348] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1192.196260][T11348] usb 3-1: Using ep0 maxpacket: 32 [ 1192.207883][T11348] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1192.212090][T11348] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1192.250867][T11348] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1192.250893][T11348] usb 3-1: Product: syz [ 1192.250908][T11348] usb 3-1: Manufacturer: syz [ 1192.250923][T11348] usb 3-1: SerialNumber: syz [ 1192.793569][T11348] usb 3-1: config 0 descriptor?? [ 1192.809814][T13412] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1192.818286][T11348] hub 3-1:0.0: bad descriptor, ignoring hub [ 1192.818327][T11348] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1193.091814][T11563] Bluetooth: hci4: command tx timeout [ 1193.140981][T11348] usb 3-1: USB disconnect, device number 17 [ 1193.179252][ T5593] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1193.181765][ T5593] pwc: recv_control_msg error -32 req 02 val 2700 [ 1193.186410][ T5593] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1193.187085][ T5593] pwc: recv_control_msg error -32 req 04 val 1000 [ 1193.189728][ T5593] pwc: recv_control_msg error -32 req 04 val 1300 [ 1193.341695][ T5593] pwc: recv_control_msg error -32 req 04 val 1400 [ 1193.342371][ T5593] pwc: recv_control_msg error -32 req 02 val 2000 [ 1193.343004][ T5593] pwc: recv_control_msg error -32 req 02 val 2100 [ 1193.345434][ T5593] pwc: recv_control_msg error -32 req 04 val 1500 [ 1193.640551][ T5593] pwc: recv_control_msg error -71 req 02 val 2400 [ 1193.642387][ T5593] pwc: recv_control_msg error -71 req 02 val 2600 [ 1193.643006][ T5593] pwc: recv_control_msg error -71 req 02 val 2900 [ 1193.644332][ T5593] pwc: recv_control_msg error -71 req 02 val 2800 [ 1193.645000][ T5593] pwc: recv_control_msg error -71 req 04 val 1100 [ 1193.649762][ T5593] pwc: recv_control_msg error -71 req 04 val 1200 [ 1193.698834][T11348] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1193.847541][ T5593] pwc: Registered as video103. [ 1193.909903][T11348] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1193.911575][T11348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1193.929365][T11348] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1193.929394][T11348] usb 3-1: Product: syz [ 1193.929411][T11348] usb 3-1: Manufacturer: syz [ 1193.929428][T11348] usb 3-1: SerialNumber: syz [ 1194.006194][T11348] usb 3-1: config 0 descriptor?? [ 1194.007284][ T5593] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input24 [ 1194.015166][T13412] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1194.044233][T11348] hub 3-1:0.0: bad descriptor, ignoring hub [ 1194.044271][T11348] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1194.093489][ T5593] usb 8-1: USB disconnect, device number 2 [ 1194.409758][T11348] usb 3-1: USB disconnect, device number 18 [ 1195.168851][T11563] Bluetooth: hci4: command tx timeout [ 1195.668826][ T5574] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1195.724569][ T5708] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1196.368800][ T5574] usb 6-1: Using ep0 maxpacket: 32 [ 1196.369852][ T5574] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1196.371483][ T5574] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1196.375028][ T5574] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1196.375054][ T5574] usb 6-1: Product: syz [ 1196.375070][ T5574] usb 6-1: Manufacturer: syz [ 1196.375085][ T5574] usb 6-1: SerialNumber: syz [ 1196.501916][ T5574] usb 6-1: config 0 descriptor?? [ 1196.502982][T13453] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1196.508411][ T5574] hub 6-1:0.0: bad descriptor, ignoring hub [ 1196.508450][ T5574] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1196.613648][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.613848][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.614012][T13388] bridge_slave_0: entered allmulticast mode [ 1196.616490][T13388] bridge_slave_0: entered promiscuous mode [ 1196.652935][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.653045][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.653205][T13388] bridge_slave_1: entered allmulticast mode [ 1196.683449][T13388] bridge_slave_1: entered promiscuous mode [ 1196.790748][ T5708] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1196.792253][ T5708] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.792304][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.828435][ T5708] usb 7-1: config 0 descriptor?? [ 1196.882769][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 1196.883167][ T10] usb 6-1: USB disconnect, device number 14 [ 1197.256698][T11563] Bluetooth: hci4: command tx timeout [ 1197.682308][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1197.890102][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 1198.003064][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1198.004239][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 1198.005381][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 1198.006391][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 1198.008407][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 1198.049209][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 1198.051976][ T5708] pwc: recv_control_msg error -32 req 04 val 1500 [ 1198.054250][ T5708] pwc: recv_control_msg error -32 req 02 val 2500 [ 1198.237301][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.260056][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 1198.265662][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 1198.266240][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 1198.267959][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1198.291214][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1198.329244][ T5708] pwc: Registered as video103. [ 1198.378352][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1198.390635][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 1198.416873][ T5708] usb 7-1: USB disconnect, device number 2 [ 1199.540604][T13388] team0: Port device team_slave_0 added [ 1199.573328][T13388] team0: Port device team_slave_1 added [ 1200.547162][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1200.547178][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.547212][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1200.592990][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.593064][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1200.593135][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.982068][T13388] hsr_slave_0: entered promiscuous mode [ 1201.986374][T13388] hsr_slave_1: entered promiscuous mode [ 1202.011074][T13388] debugfs: 'hsr0' already exists in 'hsr' [ 1202.011099][T13388] Cannot create hsr debugfs directory [ 1202.038824][T13505] binder: 13504:13505 ioctl 4018620d 0 returned -22 [ 1202.918825][ T5708] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1203.079637][ T5708] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1203.081071][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.081115][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.117730][ T5708] usb 8-1: config 0 descriptor?? [ 1203.825051][ T5708] usbhid 8-1:0.0: can't add hid device: -71 [ 1203.825160][ T5708] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1203.852165][ T5708] usb 8-1: USB disconnect, device number 3 [ 1204.268879][ T5593] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1204.328826][ T5708] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1204.436271][ T5593] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1204.437842][ T5593] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.437872][ T5593] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1204.437898][ T5593] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1204.437938][ T5593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.508791][ T5708] usb 8-1: Using ep0 maxpacket: 16 [ 1204.536575][ T5708] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1204.539295][ T5708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1204.539340][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.615518][ T5708] usb 8-1: config 0 descriptor?? [ 1204.680275][T13539] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1205.070977][ T5708] hid_parser_main: 458 callbacks suppressed [ 1205.071001][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071028][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071050][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071075][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071109][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071135][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071207][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071233][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071260][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.071301][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: unknown main item tag 0x0 [ 1205.218885][ T5708] aquacomputer_d5next 0003:0C70:F00D.0005: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.7-1/input0 [ 1205.333179][T11348] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1205.442360][ T5708] usb 8-1: USB disconnect, device number 4 [ 1205.511929][T11348] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1205.538974][T13558] fido_id[13558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1205.544919][T11348] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.544964][T11348] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.587562][T11348] usb 6-1: config 0 descriptor?? [ 1205.615161][T11348] pwc: Askey VC010 type 2 USB webcam detected. [ 1205.672295][ T5244] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1205.896082][T13563] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1533'. [ 1206.038900][T11348] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1206.044023][T11348] pwc: recv_control_msg error -32 req 02 val 2700 [ 1206.045368][T11348] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1206.046744][T11348] pwc: recv_control_msg error -32 req 04 val 1000 [ 1206.047764][T11348] pwc: recv_control_msg error -32 req 04 val 1300 [ 1206.049114][T11348] pwc: recv_control_msg error -32 req 04 val 1400 [ 1206.052567][T11348] pwc: recv_control_msg error -32 req 02 val 2000 [ 1206.058158][T11348] pwc: recv_control_msg error -32 req 02 val 2100 [ 1206.068820][T11348] pwc: recv_control_msg error -32 req 04 val 1500 [ 1206.103156][T11348] pwc: recv_control_msg error -32 req 02 val 2500 [ 1206.187428][ T66] team0: left allmulticast mode [ 1206.187463][ T66] team_slave_0: left allmulticast mode [ 1206.187491][ T66] team_slave_1: left allmulticast mode [ 1206.187531][ T66] team0: left promiscuous mode [ 1206.187544][ T66] team_slave_0: left promiscuous mode [ 1206.187998][ T66] team_slave_1: left promiscuous mode [ 1206.188354][ T66] bridge1: left promiscuous mode [ 1206.229767][ T9128] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1206.260254][ T66] bridge0: port 3(team0) entered disabled state [ 1206.330460][T11348] pwc: recv_control_msg error -71 req 02 val 2600 [ 1206.330987][T11348] pwc: recv_control_msg error -71 req 02 val 2900 [ 1206.332424][T11348] pwc: recv_control_msg error -71 req 02 val 2800 [ 1206.333115][T11348] pwc: recv_control_msg error -71 req 04 val 1100 [ 1206.333618][T11348] pwc: recv_control_msg error -71 req 04 val 1200 [ 1206.380663][T11348] pwc: Registered as video103. [ 1206.384053][T11348] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27 [ 1206.389795][ T9128] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1206.396403][T11348] usb 6-1: USB disconnect, device number 15 [ 1206.411437][ T9128] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1206.411470][ T9128] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1206.411498][ T9128] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1206.411543][ T9128] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.478548][T13565] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1206.513015][ T66] bridge_slave_1: left allmulticast mode [ 1206.513061][ T66] bridge_slave_1: left promiscuous mode [ 1206.513352][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.790963][ T66] bridge_slave_0: left allmulticast mode [ 1206.790997][ T66] bridge_slave_0: left promiscuous mode [ 1206.791256][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.279655][ T66] gretap0 (unregistering): left promiscuous mode [ 1207.439895][ T66] team0: Port device bridge1 removed [ 1207.578787][ T66] bond0 (unregistering): left promiscuous mode [ 1207.578806][ T66] bond_slave_0: left promiscuous mode [ 1207.578992][ T66] bond_slave_1: left promiscuous mode [ 1207.649402][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.689474][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1207.709773][ T66] bond0 (unregistering): Released all slaves [ 1208.335332][ T5593] aiptek 7-1:17.0: Aiptek tried all speeds, no sane response [ 1208.335574][ T5593] aiptek 7-1:17.0: probe with driver aiptek failed with error -22 [ 1208.391097][ T5593] usb 7-1: USB disconnect, device number 3 [ 1209.341002][ T36] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1209.506656][ T36] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1209.508123][ T36] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.508178][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.550308][ T36] usb 6-1: config 0 descriptor?? [ 1209.568269][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 1209.938291][ T5244] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1209.978459][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1209.994353][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 1210.005321][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1210.015844][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 1210.016714][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 1210.017665][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 1210.048595][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 1210.064161][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 1210.065585][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 1210.082698][ T5574] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1210.166379][ T9128] aiptek 8-1:17.0: Aiptek tried all speeds, no sane response [ 1210.166730][ T9128] aiptek 8-1:17.0: probe with driver aiptek failed with error -22 [ 1210.206007][ T9128] usb 8-1: USB disconnect, device number 5 [ 1210.233727][ T5574] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1210.235744][ T5574] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1210.235773][ T5574] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1210.235798][ T5574] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1210.235892][ T5574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.295154][ T36] pwc: recv_control_msg error -71 req 02 val 2400 [ 1210.295686][ T36] pwc: recv_control_msg error -71 req 02 val 2600 [ 1210.296402][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 1210.296871][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 1210.325361][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 1210.325851][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 1210.368896][ T36] pwc: Registered as video103. [ 1210.386528][T13614] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1210.410812][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29 [ 1210.463704][ T36] usb 6-1: USB disconnect, device number 16 [ 1210.795763][T13388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1210.897336][T13388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1210.967449][T13388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1211.045694][T13388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.067399][T13631] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1550'. [ 1211.118299][T13388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1211.237381][T13388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.246121][T13388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1211.258799][ T5708] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1211.332406][T13388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.410366][ T5708] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1211.411990][ T5708] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.412039][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.481426][ T5708] usb 8-1: config 0 descriptor?? [ 1211.502513][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 1211.549045][ T66] hsr_slave_0: left promiscuous mode [ 1211.590956][ T66] hsr_slave_1: left promiscuous mode [ 1211.593657][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.619731][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.970705][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1211.972410][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 1211.973752][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1211.975120][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 1211.976115][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 1211.977622][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 1211.982334][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 1211.982999][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 1211.984177][ T5708] pwc: recv_control_msg error -32 req 04 val 1500 [ 1211.996594][ T5708] pwc: recv_control_msg error -32 req 02 val 2500 [ 1214.124222][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 1214.124760][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 1214.125260][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 1214.126556][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1214.130170][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1214.180238][ T5574] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1214.254882][ T5708] pwc: Registered as video103. [ 1214.289583][ T5574] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input30 [ 1214.569121][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input31 [ 1215.765781][ T5708] usb 8-1: USB disconnect, device number 6 [ 1215.989653][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1216.139857][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1216.146177][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.146224][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.225006][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1216.225067][ T5574] usb 7-1: USB disconnect, device number 4 [ 1217.195291][ T10] usb 6-1: config 0 descriptor?? [ 1217.768847][ T5708] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1217.780319][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1217.816007][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1217.816114][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1217.836506][ T10] usb 6-1: USB disconnect, device number 17 [ 1217.856014][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1217.929630][ T5708] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1217.931245][ T5708] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.931319][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.973981][ T5708] usb 8-1: config 0 descriptor?? [ 1218.006527][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 1218.393335][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1218.394886][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 1218.398206][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1218.398877][ T5574] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1218.432702][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 1218.451486][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 1218.463722][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 1218.473241][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 1218.482546][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 1218.492346][ T5708] pwc: recv_control_msg error -32 req 04 val 1500 [ 1218.580036][ T5574] usb 3-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1218.588649][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.588906][ T5574] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.588971][ T5574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.638438][ T5574] usb 3-1: config 0 descriptor?? [ 1218.707591][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 1218.715492][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 1218.715992][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 1218.718611][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 1218.740898][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1218.741337][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1218.809714][ T5708] pwc: Registered as video103. [ 1218.818597][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input32 [ 1219.051395][ T5708] usb 8-1: USB disconnect, device number 7 [ 1220.277437][ T5574] hid_parser_main: 462 callbacks suppressed [ 1220.277462][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277496][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277525][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277553][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277579][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277606][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277633][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.277660][ T5574] smartjoyplus 0003:0925:8888.0006: unknown main item tag 0x0 [ 1220.591406][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.635550][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.687775][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.687866][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.242510][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.242659][T11566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.667854][ T5574] smartjoyplus 0003:0925:8888.0006: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.2-1/input0 [ 1221.866711][ T5574] usb 3-1: USB disconnect, device number 19 [ 1221.891013][T13704] fido_id[13704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0925:8888.0006/report_descriptor': No such file or directory [ 1221.986432][T13383] udevd[13383]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 1221.986588][T13383] udevd[13383]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 1223.738810][ T5708] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1224.234266][T13714] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[10607] was attempted by ""[13714] [ 1228.362468][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.446436][T13388] veth0_vlan: entered promiscuous mode [ 1228.465217][T13388] veth1_vlan: entered promiscuous mode [ 1228.514542][T13388] veth0_macvtap: entered promiscuous mode [ 1228.556432][T13388] veth1_macvtap: entered promiscuous mode [ 1228.581564][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.607982][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.740281][ T1470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.740661][ T1470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.741003][ T1470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.248830][T13669] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1230.422713][T13669] usb 8-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1230.426414][T13669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.426441][T13669] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.426475][T13669] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.464681][T11566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.869450][T13669] usb 8-1: config 0 descriptor?? [ 1231.240637][ T4742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.240657][ T4742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.315435][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315466][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315491][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315514][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315538][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315560][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315583][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.315608][T13669] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1231.519013][ T5974] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1231.573776][T13669] smartjoyplus 0003:0925:8888.0007: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.7-1/input0 [ 1231.621800][T13669] usb 8-1: USB disconnect, device number 9 [ 1231.692863][ T5974] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1231.693992][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.694053][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.728042][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.728105][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.758328][ T5974] usb 7-1: config 0 descriptor?? [ 1231.809920][T13769] fido_id[13769]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1231.880370][T11348] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1232.004057][ T5974] usbhid 7-1:0.0: can't add hid device: -71 [ 1232.044204][ T5974] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1232.054866][T11348] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1232.058602][T11348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.058901][T11348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.096701][T11348] usb 3-1: config 0 descriptor?? [ 1232.134939][ T5974] usb 7-1: USB disconnect, device number 5 [ 1232.362761][T11348] usbhid 3-1:0.0: can't add hid device: -71 [ 1232.362905][T11348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1232.405710][T11348] usb 3-1: USB disconnect, device number 20 [ 1232.518846][ T5974] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1232.668755][ T5974] usb 7-1: Using ep0 maxpacket: 16 [ 1232.671824][ T5974] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1232.674318][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1232.674376][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.720216][ T5974] usb 7-1: config 0 descriptor?? [ 1233.184545][ T5974] aquacomputer_d5next 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1233.184585][ T5974] aquacomputer_d5next 0003:0C70:F00D.0008: unknown main item tag 0x0 [ 1233.214287][ T5974] aquacomputer_d5next 0003:0C70:F00D.0008: collection stack underflow [ 1233.214576][ T5974] aquacomputer_d5next 0003:0C70:F00D.0008: item 0 1 0 12 parsing failed [ 1233.216115][ T5974] aquacomputer_d5next 0003:0C70:F00D.0008: probe with driver aquacomputer_d5next failed with error -22 [ 1234.285017][T11348] usb 7-1: USB disconnect, device number 6 [ 1235.598879][T13669] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1235.638893][ T5974] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1235.684488][T11348] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1235.749830][T13669] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1235.751888][T13669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1235.751916][T13669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.751950][T13669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.788571][T13669] usb 6-1: config 0 descriptor?? [ 1235.821584][ T5974] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1235.823293][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1235.823413][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.895284][ T5974] usb 4-1: config 0 descriptor?? [ 1235.909981][T11348] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1235.912896][T11348] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1235.912921][T11348] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1235.912998][T11348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.251966][T13318] usb 7-1: USB disconnect, device number 7 [ 1236.329636][T13669] hid_parser_main: 376 callbacks suppressed [ 1236.329658][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.330219][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.330249][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.330273][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.330940][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.331184][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.331211][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.331234][T13669] smartjoyplus 0003:0925:8888.0009: unknown main item tag 0x0 [ 1236.495436][T13669] smartjoyplus 0003:0925:8888.0009: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.5-1/input0 [ 1236.526190][T13669] usb 6-1: USB disconnect, device number 18 [ 1236.673936][ T5974] usbhid 4-1:0.0: can't add hid device: -71 [ 1236.674074][ T5974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1236.711445][ T5974] usb 4-1: USB disconnect, device number 15 [ 1236.873743][T13822] fido_id[13822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1236.968960][T11348] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1237.121286][T11348] usb 3-1: Using ep0 maxpacket: 16 [ 1237.122102][T11348] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1237.125211][T11348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1237.125265][T11348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.161860][T11348] usb 3-1: config 0 descriptor?? [ 1237.168956][T13819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1237.198993][T13318] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1238.012148][T13318] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1238.025835][T13318] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.025889][T13318] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.378621][T13318] usb 8-1: config 0 descriptor?? [ 1238.397019][T13318] pwc: Askey VC010 type 2 USB webcam detected. [ 1238.525976][T11348] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 1238.526015][T11348] aquacomputer_d5next 0003:0C70:F00D.000A: unknown main item tag 0x0 [ 1238.652155][T11348] aquacomputer_d5next 0003:0C70:F00D.000A: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 1238.813822][T13318] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1238.823987][T13318] pwc: recv_control_msg error -32 req 02 val 2700 [ 1238.838608][T11348] usb 3-1: USB disconnect, device number 21 [ 1238.846296][T13318] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1238.857561][T13318] pwc: recv_control_msg error -32 req 04 val 1000 [ 1238.867467][T13318] pwc: recv_control_msg error -32 req 04 val 1300 [ 1238.883161][T13318] pwc: recv_control_msg error -32 req 04 val 1400 [ 1238.883890][T13318] pwc: recv_control_msg error -32 req 02 val 2000 [ 1238.902543][T13318] pwc: recv_control_msg error -32 req 02 val 2100 [ 1238.905554][T13318] pwc: recv_control_msg error -32 req 04 val 1500 [ 1238.908513][T13318] pwc: recv_control_msg error -32 req 02 val 2500 [ 1238.965089][T13848] fido_id[13848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1239.222235][T13318] pwc: recv_control_msg error -71 req 02 val 2600 [ 1239.224488][T13318] pwc: recv_control_msg error -71 req 02 val 2900 [ 1239.224968][T13318] pwc: recv_control_msg error -71 req 02 val 2800 [ 1239.225617][T13318] pwc: recv_control_msg error -71 req 04 val 1100 [ 1239.226046][T13318] pwc: recv_control_msg error -71 req 04 val 1200 [ 1239.266984][T13318] pwc: Registered as video103. [ 1239.286727][T13318] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input33 [ 1239.316401][T13318] usb 8-1: USB disconnect, device number 10 [ 1239.957654][T11348] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1240.122667][T11348] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1240.124220][T11348] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.124268][T11348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.161753][T11348] usb 3-1: config 0 descriptor?? [ 1240.179795][T11348] pwc: Askey VC010 type 2 USB webcam detected. [ 1240.558821][T13318] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1240.579883][T11348] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1240.583169][T11348] pwc: recv_control_msg error -32 req 02 val 2700 [ 1240.585144][T11348] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1240.587971][T11348] pwc: recv_control_msg error -32 req 04 val 1000 [ 1240.612957][T11348] pwc: recv_control_msg error -32 req 04 val 1300 [ 1240.623435][T11348] pwc: recv_control_msg error -32 req 04 val 1400 [ 1240.624279][T11348] pwc: recv_control_msg error -32 req 02 val 2000 [ 1240.625449][T11348] pwc: recv_control_msg error -32 req 02 val 2100 [ 1240.628332][T11348] pwc: recv_control_msg error -32 req 04 val 1500 [ 1240.661265][T11348] pwc: recv_control_msg error -32 req 02 val 2500 [ 1240.762393][T13318] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1240.762518][T13318] usb 8-1: no configurations [ 1240.762533][T13318] usb 8-1: can't read configurations, error -22 [ 1240.872083][T11348] pwc: recv_control_msg error -71 req 02 val 2600 [ 1240.872564][T11348] pwc: recv_control_msg error -71 req 02 val 2900 [ 1240.873041][T11348] pwc: recv_control_msg error -71 req 02 val 2800 [ 1240.873698][T11348] pwc: recv_control_msg error -71 req 04 val 1100 [ 1240.874182][T11348] pwc: recv_control_msg error -71 req 04 val 1200 [ 1240.921892][T13318] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1240.925770][T11348] pwc: Registered as video103. [ 1240.944816][T11348] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 1240.961466][T11348] usb 3-1: USB disconnect, device number 22 [ 1241.069977][T13318] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1241.070041][T13318] usb 8-1: no configurations [ 1241.070055][T13318] usb 8-1: can't read configurations, error -22 [ 1241.070577][T13318] usb usb8-port1: attempt power cycle [ 1244.017332][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.017963][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.294477][T13318] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1244.578811][T13318] usb 8-1: device not accepting address 13, error -71 [ 1244.809117][T13669] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1245.983319][T13669] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1245.984578][T13669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.984601][T13669] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1245.987141][T13669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.987166][T13669] usb 4-1: Product: syz [ 1245.987182][T13669] usb 4-1: Manufacturer: syz [ 1245.987212][T13669] usb 4-1: SerialNumber: syz [ 1246.223670][T13669] usb 4-1: 0:2 : does not exist [ 1246.224027][T13669] usb 4-1: unit 0 not found! [ 1247.570622][ T5974] usb 4-1: USB disconnect, device number 16 [ 1247.868785][T11348] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1248.379042][T11348] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1248.430431][T11348] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1248.430461][T11348] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1248.430497][T11348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.855731][T11348] usb 7-1: USB disconnect, device number 8 [ 1253.416559][ T5851] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1253.468808][ T5574] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 1254.501168][ T5851] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1254.592264][ T5574] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1254.596558][ T5574] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.596599][ T5574] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1254.741067][ T5574] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.741097][ T5574] usb 8-1: Product: syz [ 1254.741702][ T5574] usb 8-1: Manufacturer: syz [ 1254.741720][ T5574] usb 8-1: SerialNumber: syz [ 1254.854100][ T5851] usb 6-1: unable to read config index 0 descriptor/all [ 1254.854153][ T5851] usb 6-1: can't read configurations, error -71 [ 1254.937285][ T5574] usb 8-1: 0:2 : does not exist [ 1254.937365][ T5574] usb 8-1: unit 0 not found! [ 1255.133211][ T5574] usb 8-1: USB disconnect, device number 15 [ 1255.350092][T13432] udevd[13432]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1263.288815][ T5702] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 1263.471096][ T5702] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1263.473227][ T5702] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.473248][ T5702] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1263.507037][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.507063][ T5702] usb 8-1: Product: syz [ 1263.507079][ T5702] usb 8-1: Manufacturer: syz [ 1263.507095][ T5702] usb 8-1: SerialNumber: syz [ 1263.564845][ T5702] usb 8-1: 0:2 : does not exist [ 1263.564921][ T5702] usb 8-1: unit 4 not found! [ 1263.789518][ T5851] usb 8-1: USB disconnect, device number 16 [ 1263.969603][T14012] udevd[14012]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.298167][T14019] Bluetooth: hci5: command 0x0406 tx timeout [ 1267.304769][ T8053] Bluetooth: hci1: command 0x0406 tx timeout [ 1274.828767][ T5821] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1275.408805][ T5821] usb 6-1: Using ep0 maxpacket: 32 [ 1275.414404][ T5821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.414456][ T5821] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1275.445137][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.445162][ T5821] usb 6-1: Product: syz [ 1275.445176][ T5821] usb 6-1: Manufacturer: syz [ 1275.445190][ T5821] usb 6-1: SerialNumber: syz [ 1277.106292][ T5821] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1277.160150][ T5821] usb 6-1: USB disconnect, device number 21 [ 1286.628801][ T5574] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1286.698922][ T5715] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1286.813537][ T5574] usb 7-1: Using ep0 maxpacket: 16 [ 1286.815217][ T5574] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1286.835202][ T5715] usb 8-1: device descriptor read/64, error -71 [ 1286.849057][ T5574] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1286.849093][ T5574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.899092][ T5574] usb 7-1: config 0 descriptor?? [ 1286.903734][T14178] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1287.090283][ T5715] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1287.224881][ T5715] usb 8-1: device descriptor read/64, error -71 [ 1287.260336][T14192] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1287.260366][T14192] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1287.260392][T14192] CPU: 1 UID: 0 PID: 14192 Comm: syz.3.1708 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1287.260417][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1287.260431][T14192] RIP: 0010:dummy_set_selfpowered+0xbe/0x160 [ 1287.260519][T14192] Code: 8d 34 c6 49 81 c6 c8 07 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc 27 fb fa 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e3 27 fb fa 41 be 00 14 00 00 4d [ 1287.260538][T14192] RSP: 0018:ffffc9000678f780 EFLAGS: 00010246 [ 1287.260557][T14192] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802d8e1f40 [ 1287.260571][T14192] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 1287.260583][T14192] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1287.260596][T14192] R10: dffffc0000000000 R11: ffffffff87367220 R12: dffffc0000000000 [ 1287.260612][T14192] R13: ffff8880402ca528 R14: ffff888027e55408 R15: 0000000000000000 [ 1287.260626][T14192] FS: 00007f3d7fc4e6c0(0000) GS:ffff888125ce8000(0000) knlGS:0000000000000000 [ 1287.260643][T14192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1287.260656][T14192] CR2: 00007ff3645b6470 CR3: 0000000020ac2000 CR4: 00000000003526f0 [ 1287.260673][T14192] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1287.260685][T14192] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1287.260699][T14192] Call Trace: [ 1287.260706][T14192] [ 1287.260713][T14192] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 1287.260754][T14192] usb_gadget_set_selfpowered+0x75/0x260 [ 1287.260776][T14192] composite_dev_prepare+0x2fa/0x320 [ 1287.260798][T14192] configfs_composite_bind+0xa5/0x1410 [ 1287.260828][T14192] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1287.260860][T14192] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1287.260889][T14192] gadget_bind_driver+0x2ca/0x9e0 [ 1287.260918][T14192] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1287.260941][T14192] really_probe+0x254/0xae0 [ 1287.260975][T14192] __driver_probe_device+0x1e8/0x360 [ 1287.261004][T14192] driver_probe_device+0x4f/0x240 [ 1287.261036][T14192] __driver_attach+0x339/0x600 [ 1287.261065][T14192] bus_for_each_dev+0x23e/0x2c0 [ 1287.261086][T14192] ? __pfx___driver_attach+0x10/0x10 [ 1287.261114][T14192] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1287.261138][T14192] ? rt_spin_unlock+0x165/0x200 [ 1287.261170][T14192] bus_add_driver+0x348/0x670 [ 1287.261194][T14192] driver_register+0x23a/0x320 [ 1287.261214][T14192] usb_gadget_register_driver_owner+0xf9/0x270 [ 1287.261284][T14192] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1287.261312][T14192] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1287.261340][T14192] configfs_write_iter+0x33a/0x430 [ 1287.261365][T14192] vfs_write+0x61e/0xbb0 [ 1287.261402][T14192] ? __pfx_vfs_write+0x10/0x10 [ 1287.261433][T14192] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1287.261458][T14192] ? mutex_lock_nested+0x152/0x1d0 [ 1287.261486][T14192] ? fdget_pos+0x252/0x320 [ 1287.261519][T14192] ksys_write+0x156/0x270 [ 1287.261552][T14192] ? __pfx_ksys_write+0x10/0x10 [ 1287.261587][T14192] do_syscall_64+0x166/0x520 [ 1287.261609][T14192] ? trace_irq_disable+0x3b/0x140 [ 1287.261651][T14192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.261673][T14192] ? clear_bhb_loop+0x70/0xc0 [ 1287.261697][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.261718][T14192] RIP: 0033:0x7f3d8227e0d9 [ 1287.261736][T14192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.261762][T14192] RSP: 002b:00007f3d7fc4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1287.261783][T14192] RAX: ffffffffffffffda RBX: 00007f3d82506360 RCX: 00007f3d8227e0d9 [ 1287.261804][T14192] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 1287.261814][T14192] RBP: 00007f3d82315024 R08: 0000000000000000 R09: 0000000000000000 [ 1287.261823][T14192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.261832][T14192] R13: 00007f3d825063f8 R14: 00007f3d82506360 R15: 00007ffd9b5283c8 [ 1287.261850][T14192] [ 1287.261860][T14192] Modules linked in: [ 1287.261890][T14192] ---[ end trace 0000000000000000 ]--- [ 1287.262127][T14192] RIP: 0010:dummy_set_selfpowered+0xbe/0x160 [ 1287.262167][T14192] Code: 8d 34 c6 49 81 c6 c8 07 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 fc 27 fb fa 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 e3 27 fb fa 41 be 00 14 00 00 4d [ 1287.262184][T14192] RSP: 0018:ffffc9000678f780 EFLAGS: 00010246 [ 1287.262804][T14192] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802d8e1f40 [ 1287.262820][T14192] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000005 [ 1287.262838][T14192] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 1287.262847][T14192] R10: dffffc0000000000 R11: ffffffff87367220 R12: dffffc0000000000 [ 1287.262859][T14192] R13: ffff8880402ca528 R14: ffff888027e55408 R15: 0000000000000000 [ 1287.262870][T14192] FS: 00007f3d7fc4e6c0(0000) GS:ffff888125ce8000(0000) knlGS:0000000000000000 [ 1287.262883][T14192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1287.262894][T14192] CR2: 00007ff3645b6470 CR3: 0000000020ac2000 CR4: 00000000003526f0 [ 1287.262939][T14192] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1287.262950][T14192] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1287.262967][T14192] Kernel panic - not syncing: Fatal exception [ 1287.263576][T14192] Kernel Offset: disabled