last executing test programs: 49m4.179145453s ago: executing program 3 (id=399): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=@deltaction={0x198, 0x31, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x871}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5b6799a7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1b1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0x4010000}, 0x200400a0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000001100), 0x4) ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040)) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000003c0)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)={@val={0x1c, 0xd}, @val={0x1, 0x0, 0x0, 0xfea, 0x3d, 0x5}, @ipv4=@udp={{0xc, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x79, 0x11, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0x60, [@rand_addr=0x64010102, @loopback, @multicast1, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}]}]}}, {0x4e20, 0x4e22, 0x1c, 0x0, @gue={{0x1, 0x0, 0x1, 0xff, 0x0, @void}, "ed131ccc8134175a5a46a742c85032e1"}}}}, 0x5a) 49m3.497729349s ago: executing program 3 (id=404): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x318, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1000, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'vlan0\x00', 'ip_vti0\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x7ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) fsopen(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0xc000, 0x1) linkat(r6, &(0x7f0000000100)='./file1\x00', r6, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000380)='./file1\x00') 48m59.296210582s ago: executing program 3 (id=415): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x2}, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) shutdown(r0, 0x0) 48m58.09275285s ago: executing program 3 (id=419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x15, 0x0, &(0x7f0000000440)="e46033aa55063368057a2a0d3e50a676ed4bc15bb4", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 48m57.390719289s ago: executing program 3 (id=421): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 48m56.631247004s ago: executing program 3 (id=423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 48m41.521728727s ago: executing program 32 (id=423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 36m46.488072088s ago: executing program 4 (id=2213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 36m46.311531565s ago: executing program 4 (id=2214): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000680)='@\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x4008800) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @null, 0xfffffffe}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000a00)='sit0\x00', 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xec}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) 36m44.103428392s ago: executing program 4 (id=2216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x510, 0x2f, 0x38, 0xaa, 0x8, 0x93a, 0x2461, 0x86f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x3, 0x40, 0xf, [{{0x9, 0x4, 0xc4, 0xd, 0x0, 0xab, 0x88, 0x19, 0x1}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) read$msr(r1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 36m40.922504104s ago: executing program 4 (id=2224): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000680)='@\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000000000340000"], 0x40}, 0x4008800) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0xfffffffe}, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000a00)='sit0\x00', 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) 36m39.358368418s ago: executing program 4 (id=2228): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x9, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000280)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xa, 0x20011000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36m38.913466571s ago: executing program 4 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 36m23.189025025s ago: executing program 33 (id=2230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 9.641505995s ago: executing program 5 (id=6861): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 9.478873471s ago: executing program 2 (id=6863): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x30}, 0x4, 0x700000000000000}, 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968", @ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x4, 0x70bd2c, 0x25dfdbff, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4002041}, 0x4c045) read$alg(r3, &(0x7f0000000740)=""/4096, 0x1000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.310345333s ago: executing program 2 (id=6867): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(r3, 0x0, 0x20008080) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(r0) 6.93801938s ago: executing program 0 (id=6871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f8000000000000aaaac5aaaaaa88a8a00081"], 0x72) 6.668853326s ago: executing program 0 (id=6872): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x80d0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x3f) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), 0x0, 0x0, 0x83, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x13, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000b80)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x5, 0x0, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000c80)=[{0x1, 0x5, 0x6, 0x6}, {0x1, 0x2, 0x0, 0x2}, {0x4, 0x3, 0xb, 0x1}, {0x3, 0x3, 0xc, 0xc}, {0x0, 0x1, 0xf, 0x7}, {0x4, 0x4, 0xd, 0x7}, {0x3, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x10, 0x4}], 0x10, 0xe}, 0x94) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0xa, 0x8}) 5.934108879s ago: executing program 5 (id=6876): r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) llistxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r3, &(0x7f0000000c80)=""/102370, 0x18fe2, 0x41e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x33}, @in=@private=0xa010102, {0x0, 0x0, 0x6, 0x0, 0xb4, 0x3, 0x0, 0x1ffffffe}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffd, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) read$FUSE(r4, 0x0, 0x0) 5.026976407s ago: executing program 5 (id=6878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4.506794438s ago: executing program 0 (id=6879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 4.427719537s ago: executing program 0 (id=6880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f8000000000000aaaac5aaaaaa88a8a00081"], 0x72) 4.18253038s ago: executing program 1 (id=6881): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x43, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4.18224431s ago: executing program 0 (id=6882): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000100)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000000, 0x0, 0x4000}, 0x0) 4.017903216s ago: executing program 5 (id=6883): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x1, 0x0, 0x20a}, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='<', 0x1}], 0x1}, 0x8050) 4.003815018s ago: executing program 2 (id=6884): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(r1, 0x0, r1) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = msgget(0x0, 0x40) msgctl$MSG_INFO(r2, 0xc, &(0x7f00000000c0)=""/173) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x1010, r4, 0x6db1c000) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.311773916s ago: executing program 1 (id=6885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0xa6adc000) ioprio_set$uid(0x3, 0xee00, 0x4000) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a00140011007665742651e40e58a92f166964046500080017004e224e241400"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x4048000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x48}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000000000000500", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) 2.514930683s ago: executing program 5 (id=6886): r0 = syz_open_procfs(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) llistxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r3, &(0x7f0000000c80)=""/102370, 0x18fe2, 0x41e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x33}, @in=@private=0xa010102, {0x0, 0x0, 0x6, 0x0, 0xb4, 0x3, 0x0, 0x1ffffffe}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0xfffffffd, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) read$FUSE(r4, 0x0, 0x0) 1.826273821s ago: executing program 1 (id=6887): r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x80d0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000003c0)={@dev}, &(0x7f0000000400)=0x3f) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), 0x0, 0x0, 0x83, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x13, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000b80)='GPL\x00', 0x800, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x5, 0x0, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000c80)=[{0x1, 0x5, 0x6, 0x6}, {0x1, 0x2, 0x0, 0x2}, {0x4, 0x3, 0xb, 0x1}, {0x3, 0x3, 0xc, 0xc}, {0x0, 0x1, 0xf, 0x7}, {0x4, 0x4, 0xd, 0x7}, {0x3, 0x3, 0x0, 0x7}, {0x2, 0x2, 0x10, 0x4}], 0x10, 0xe}, 0x94) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0xa, 0x8}) 1.73932655s ago: executing program 5 (id=6888): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000a0010c410cf8a00000000000109022d0001000000000904000002030000000921000000012205000905810300000000000905ac"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.607125433s ago: executing program 1 (id=6889): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x182) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7a) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 1.210229152s ago: executing program 2 (id=6890): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @remote, 0x3}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) 1.042067759s ago: executing program 2 (id=6891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.041260309s ago: executing program 0 (id=6892): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fb00fb030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_generic(r3, 0x0, 0x20008080) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_disconnect(r0) 297.415241ms ago: executing program 1 (id=6893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 245.692066ms ago: executing program 1 (id=6894): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 0s ago: executing program 2 (id=6895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f8000000000000aaaac5aaaaaa88a8a00081"], 0x72) kernel console output (not intermixed with test programs): ort 8472 - 0 [ 2584.068385][T28539] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2587.549339][T25772] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 2587.736418][T28571] netlink: 'syz.2.5571': attribute type 4 has an invalid length. [ 2587.772136][T25772] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2589.403769][T25772] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2589.417687][T25772] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2589.428738][T25772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2589.443566][T25772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.451914][T25772] usb 1-1: Product: syz [ 2589.457315][T25772] usb 1-1: Manufacturer: syz [ 2589.462387][T25772] usb 1-1: SerialNumber: syz [ 2590.309526][T25772] usb 1-1: USB disconnect, device number 112 [ 2590.435891][T28585] hfs: can't find a HFS filesystem on dev nullb0 [ 2590.904831][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.912662][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2591.325455][T28593] hfs: can't find a HFS filesystem on dev nullb0 [ 2593.024386][T28606] netlink: 'syz.1.5581': attribute type 4 has an invalid length. [ 2596.039454][T25773] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 2596.381334][T25773] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2596.578705][T25773] usb 6-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2596.710807][T25773] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2596.722450][T25773] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2596.739794][T25773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2596.853631][T25773] usb 6-1: Product: syz [ 2596.858171][T25773] usb 6-1: Manufacturer: syz [ 2596.863875][T25773] usb 6-1: SerialNumber: syz [ 2597.306274][T25773] usb 6-1: USB disconnect, device number 65 [ 2597.343645][T28635] hfs: can't find a HFS filesystem on dev nullb0 [ 2599.319372][T28645] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 2599.328773][T28645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2599.344743][T28645] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 2599.358292][T28645] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2599.375059][T28645] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2599.386121][T28645] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 2599.403985][T28645] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2599.426030][T28645] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 2599.440769][T28645] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 2599.464186][T28645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2599.491617][T28645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2599.504191][T28645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2599.524534][T28645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2599.537486][T28645] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2599.551994][T28645] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 2599.562344][T28645] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 2599.582183][T28645] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 2599.605188][T28645] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2599.617347][T28645] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 2599.642784][T28645] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 2599.660106][T28645] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2599.668160][T28645] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 2599.676744][T28645] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 2599.684469][T28645] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2599.691770][T28645] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 2599.879561][T25767] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2600.109727][T25767] usb 6-1: Using ep0 maxpacket: 16 [ 2600.262433][T25767] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2600.288432][T25767] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2600.328924][T25767] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2600.535086][T25767] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2600.545098][T25767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2600.576487][T25767] usb 6-1: Product: syz [ 2600.586957][T25767] usb 6-1: Manufacturer: syz [ 2600.608216][T25767] usb 6-1: SerialNumber: syz [ 2600.926923][T28663] netlink: 'syz.1.5597': attribute type 21 has an invalid length. [ 2600.935807][T28663] IPv6: NLM_F_CREATE should be specified when creating new route [ 2600.945071][T28663] IPv6: Can't replace route, no match found [ 2601.663142][T25767] usb 6-1: 0:2 : does not exist [ 2602.216191][T28667] hfs: can't find a HFS filesystem on dev nullb0 [ 2602.225680][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5598'. [ 2602.906078][T25767] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 2603.000789][T25767] usb 6-1: USB disconnect, device number 66 [ 2603.079110][T28622] udevd[28622]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2605.256025][T28688] hfs: can't find a HFS filesystem on dev nullb0 [ 2605.857477][T28690] hfsplus: unable to find HFS+ superblock [ 2605.938345][T28690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5605'. [ 2606.264196][T28701] hfs: can't find a HFS filesystem on dev nullb0 [ 2606.275345][T28701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5608'. [ 2607.557937][T25774] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2607.749508][T25774] usb 1-1: Using ep0 maxpacket: 32 [ 2607.807916][T25774] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2607.856367][T25774] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2607.899494][T25774] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2607.958273][T25774] usb 1-1: Product: syz [ 2607.980934][T25774] usb 1-1: Manufacturer: syz [ 2608.004633][T25774] usb 1-1: SerialNumber: syz [ 2608.135607][T25774] usb 1-1: config 0 descriptor?? [ 2608.450205][T28704] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2609.788240][T25768] usb 1-1: USB disconnect, device number 113 [ 2611.240713][T28738] hfs: can't find a HFS filesystem on dev nullb0 [ 2611.251611][T28738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'. [ 2616.109590][T22274] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2616.271359][T28768] tipc: Enabled bearer , priority 0 [ 2616.312829][T28768] syzkaller0: entered promiscuous mode [ 2616.318638][T28768] syzkaller0: entered allmulticast mode [ 2616.351933][T22274] usb 2-1: Using ep0 maxpacket: 16 [ 2616.366200][T22274] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2616.376901][T22274] usb 2-1: config 0 has no interface number 0 [ 2616.395362][T22274] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2616.439720][T22274] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2616.512363][T22274] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2616.529376][T22274] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2616.558593][T22274] usb 2-1: Product: syz [ 2616.560749][T28767] tipc: Resetting bearer [ 2616.563069][T22274] usb 2-1: SerialNumber: syz [ 2616.598676][T22274] usb 2-1: config 0 descriptor?? [ 2616.621802][T22274] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2616.647878][T22274] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input26 [ 2616.813394][T28767] tipc: Disabling bearer [ 2617.324321][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.334806][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.342319][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.350061][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.357312][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.364504][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.372080][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.379456][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.387005][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.394716][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2617.895283][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2618.071234][T25774] usb 2-1: USB disconnect, device number 102 [ 2618.196716][T25774] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2620.215501][T28805] tipc: Started in network mode [ 2620.231417][T28805] tipc: Node identity 4e5cad20d633, cluster identity 4711 [ 2620.260570][T28805] tipc: Enabled bearer , priority 0 [ 2620.290091][T28805] syzkaller0: entered promiscuous mode [ 2620.309330][T28805] syzkaller0: entered allmulticast mode [ 2620.357865][ C0] vkms_vblank_simulate: vblank timer overrun [ 2620.440036][T28804] tipc: Resetting bearer [ 2620.534418][T28804] tipc: Disabling bearer [ 2620.900041][T28815] hfs: can't find a HFS filesystem on dev nullb0 [ 2620.919501][T28815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5637'. [ 2621.412414][T28817] hfs: can't find a HFS filesystem on dev nullb0 [ 2621.422407][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5638'. [ 2625.325405][T28845] tipc: Started in network mode [ 2625.341234][T28845] tipc: Node identity c63d20f33d04, cluster identity 4711 [ 2625.369809][T28845] tipc: Enabled bearer , priority 0 [ 2625.386127][T28846] syzkaller0: entered promiscuous mode [ 2625.397214][T28846] syzkaller0: entered allmulticast mode [ 2625.429517][T28845] tipc: Resetting bearer [ 2625.459992][T28844] tipc: Resetting bearer [ 2625.580419][T28844] tipc: Disabling bearer [ 2634.910110][T28930] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 2635.090741][T28930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2635.732199][T28930] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 2635.789542][T28930] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2635.985756][T28930] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2635.997750][T28930] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 2636.089535][T19537] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2636.952338][T28930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2636.959653][T28930] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 2636.967341][T28930] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 2636.974914][T28930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2636.989738][T28930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2636.997202][T28930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2637.004609][T28930] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2637.011978][T28930] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2637.018762][T28930] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 2637.027193][T28930] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 2637.035956][T28930] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 2637.043839][T28930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2637.053714][T28930] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 2637.073831][T28930] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 2637.084753][T28930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2637.094896][T28930] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 2637.105716][T28930] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 2637.140501][T28930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2637.158415][T28930] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 2640.180167][T28952] tipc: Enabling of bearer rejected, failed to enable media [ 2642.224636][T28967] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5678'. [ 2644.409670][T19537] Bluetooth: hci3: command 0x1003 tx timeout [ 2644.417944][T28928] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2651.079399][T25767] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 2651.281999][T25767] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2651.413408][T25767] usb 6-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2651.474546][T25767] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2651.661751][T25767] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2651.691457][T25767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.702747][T25767] usb 6-1: Product: syz [ 2651.708064][T25767] usb 6-1: Manufacturer: syz [ 2651.716364][T25767] usb 6-1: SerialNumber: syz [ 2652.141435][T25767] usb 6-1: USB disconnect, device number 67 [ 2652.345604][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.366957][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.381448][T29076] tipc: Enabled bearer , priority 0 [ 2653.390519][T29076] syzkaller0: entered promiscuous mode [ 2653.396307][T29076] syzkaller0: entered allmulticast mode [ 2653.419976][T29076] tipc: Resetting bearer [ 2653.428757][T29075] tipc: Resetting bearer [ 2653.468597][T29075] tipc: Disabling bearer [ 2655.541087][T29089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5711'. [ 2656.779335][T25329] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 2656.978293][T25329] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2657.535703][T25329] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2657.597171][T25329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2657.632246][T25329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2657.676127][T25329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.691172][T25329] usb 1-1: Product: syz [ 2657.846163][T25329] usb 1-1: Manufacturer: syz [ 2657.851492][T25329] usb 1-1: SerialNumber: syz [ 2657.964748][T29117] Cannot find add_set index 0 as target [ 2658.823909][T25329] usb 1-1: USB disconnect, device number 114 [ 2662.602625][T29154] syz.2.5729: attempt to access beyond end of device [ 2662.602625][T29154] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2662.620412][T29154] syz.2.5729: attempt to access beyond end of device [ 2662.620412][T29154] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2662.635528][T29154] Mount JFS Failure: -5 [ 2662.640959][T29154] jfs_mount failed w/return code = -5 [ 2663.489854][T25329] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 2664.167728][T25329] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2664.351601][T25329] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2664.461483][T25329] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2664.673334][T25329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2664.683303][T25329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2664.703488][T25329] usb 1-1: Product: syz [ 2664.708472][T25329] usb 1-1: Manufacturer: syz [ 2664.732121][T25329] usb 1-1: SerialNumber: syz [ 2665.041825][T25329] usb 1-1: USB disconnect, device number 115 [ 2665.209788][T25767] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2665.501557][T25767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2665.512854][T25767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2665.523222][T25767] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2665.532711][T25767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2665.563370][T25767] usb 2-1: config 0 descriptor?? [ 2665.953323][T29191] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2666.118981][T25767] usbhid 2-1:0.0: can't add hid device: -32 [ 2666.128624][T25767] usbhid: probe of 2-1:0.0 failed with error -32 [ 2666.152741][T25767] usb 2-1: USB disconnect, device number 103 [ 2667.659227][T29209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5743'. [ 2667.714232][T29208] hfs: can't find a HFS filesystem on dev nullb0 [ 2669.319808][T25767] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 2669.582036][T25767] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2669.611531][T25767] usb 6-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2669.641653][T25767] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2669.654458][T25767] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2669.755472][T25767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.811855][T25767] usb 6-1: Product: syz [ 2669.830712][T25767] usb 6-1: Manufacturer: syz [ 2669.853574][T25767] usb 6-1: SerialNumber: syz [ 2670.679209][T25767] usb 6-1: USB disconnect, device number 68 [ 2672.189565][T29246] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 2672.218319][T29246] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2672.228709][T29246] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 2672.243775][T29246] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2672.281261][T29246] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2672.315326][T29246] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 2672.328106][T29246] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2672.336790][T29246] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 2672.440664][T13987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.471702][T29246] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 2672.487382][T29246] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2672.495804][T13987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.509575][T29246] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2672.518927][T29246] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2672.531095][T29246] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2672.550395][T29246] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2672.565036][T29246] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 2672.576721][T29246] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 2672.590269][T29246] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 2672.596996][T29246] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2672.608630][T29246] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 2672.616134][T29246] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 2672.635628][T29246] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2672.646297][T29246] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 2672.680093][T29246] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 2672.714116][T29246] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2672.723733][T29246] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 2672.743220][T13987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.767876][T13987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2672.906611][T13987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2672.918394][T13987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2673.726583][T13987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2673.754724][T13987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.118836][T29256] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2674.931095][T13987] tipc: Left network mode [ 2675.969526][T22274] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 2676.542096][T22274] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2676.615038][T22274] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2676.697193][T19537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2676.715797][T19537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2676.726778][T22274] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2676.734343][T19537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2676.747290][T19537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2676.760017][T19537] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2676.767908][T19537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2676.783497][T28928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2676.822010][T28928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2676.832276][T22274] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2676.842775][T28928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2676.853856][T22274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.862698][T22274] usb 3-1: Product: syz [ 2676.867453][T22274] usb 3-1: Manufacturer: syz [ 2676.873919][T28928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2676.881707][T22274] usb 3-1: SerialNumber: syz [ 2676.891134][T28928] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2676.899765][T28928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2677.544932][T29288] lo speed is unknown, defaulting to 1000 [ 2677.677814][T29292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2677.723606][T29292] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2677.793301][T22274] usb 3-1: USB disconnect, device number 113 [ 2677.978986][T29292] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2678.212094][T29306] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 2678.229313][T29306] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2678.237733][T29306] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 2678.281793][T29306] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2678.289854][T29306] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2678.298304][T29306] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 2678.313598][T29306] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2678.324429][T29306] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 2678.335328][T29306] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 2678.348129][T29306] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2678.362923][T29306] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2678.372633][T29306] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2678.379433][T29306] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2678.388567][T29306] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 2678.414663][T29306] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 2678.425108][T29306] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 2678.433948][T29306] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 2678.511130][T29306] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2678.538300][T29306] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 2678.578056][T29306] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 2678.596431][T29306] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2678.623188][T29306] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 2678.630880][T29306] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 2678.647941][T29306] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2678.666498][T29306] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 2679.053705][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2679.864963][T29318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2680.117007][T13987] hsr_slave_0: left promiscuous mode [ 2680.192704][T13987] hsr_slave_1: left promiscuous mode [ 2680.226796][T13987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2680.398343][T13987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2680.428552][T13987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2681.534535][T13987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2681.660229][T13987] bridge_slave_1: left allmulticast mode [ 2681.698410][T13987] bridge_slave_1: left promiscuous mode [ 2681.731706][T13987] bridge0: port 2(bridge_slave_1) entered disabled state [ 2681.929534][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2681.976810][T13987] bridge_slave_0: left allmulticast mode [ 2681.987906][T13987] bridge_slave_0: left promiscuous mode [ 2682.002690][T13987] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.148332][T13987] veth1_macvtap: left promiscuous mode [ 2682.159728][T13987] veth0_macvtap: left promiscuous mode [ 2682.185793][T13987] veth1_vlan: left promiscuous mode [ 2682.698509][T13987] veth0_vlan: left promiscuous mode [ 2684.009280][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2685.187184][T13987] team0 (unregistering): Port device team_slave_1 removed [ 2685.254941][T13987] team0 (unregistering): Port device team_slave_0 removed [ 2685.320325][T13987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2685.398092][T13987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2686.090342][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2686.347271][T13987] bond0 (unregistering): Released all slaves [ 2686.516843][T29288] chnl_net:caif_netlink_parms(): no params data found [ 2686.579893][T29351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2687.001283][T29288] bridge0: port 1(bridge_slave_0) entered blocking state [ 2687.020616][T29288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2687.045013][T29288] bridge_slave_0: entered allmulticast mode [ 2687.052721][T29288] bridge_slave_0: entered promiscuous mode [ 2687.080467][T28794] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 2687.127810][T29288] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.189575][T29288] bridge0: port 2(bridge_slave_1) entered disabled state [ 2687.203194][T29288] bridge_slave_1: entered allmulticast mode [ 2687.362351][T29288] bridge_slave_1: entered promiscuous mode [ 2687.866062][T29288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2687.907513][T29288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2688.122725][T29288] team0: Port device team_slave_0 added [ 2688.209955][T29288] team0: Port device team_slave_1 added [ 2688.965453][T29396] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2688.996614][T13987] IPVS: stop unused estimator thread 0... [ 2689.954994][T29288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2689.971683][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2690.038276][T29288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2690.072696][T29288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2690.111202][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2690.918619][T29288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2690.947102][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2691.697368][T29288] hsr_slave_0: entered promiscuous mode [ 2691.726994][T29288] hsr_slave_1: entered promiscuous mode [ 2691.762993][T29288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2691.789771][T29288] Cannot create hsr debugfs directory [ 2692.389774][T29423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2692.494974][T29432] netlink: 'syz.5.5790': attribute type 1 has an invalid length. [ 2692.566669][T29432] bond1: entered promiscuous mode [ 2692.574003][T29432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2692.963366][T22274] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2693.362508][T29439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2693.431795][T22274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2693.458763][T29439] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2693.476669][T29439] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2693.493858][T22274] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 2693.501940][T29439] bond1: (slave vcan1): making interface the new active one [ 2693.507761][T22274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.523243][T29439] vcan1: entered promiscuous mode [ 2693.534038][T29439] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 2693.544916][T22274] usb 3-1: config 0 descriptor?? [ 2694.509411][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2695.117969][T22274] usbhid 3-1:0.0: can't add hid device: -71 [ 2695.161127][T22274] usbhid: probe of 3-1:0.0 failed with error -71 [ 2695.196313][T22274] usb 3-1: USB disconnect, device number 115 [ 2695.915466][T29288] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2696.011287][T29457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2696.014811][T29288] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2696.497991][T29288] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2696.563026][T29288] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2697.449220][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2697.905151][T29288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2699.464791][T29288] 8021q: adding VLAN 0 to HW filter on device team0 [ 2699.626729][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.634811][T13987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2700.162391][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 2700.169791][T11379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2701.740793][T28794] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2702.446926][T28794] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2702.471265][T28794] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 2702.490204][T28794] usb 3-1: config 0 has no interface number 0 [ 2702.509585][T28794] usb 3-1: config 0 interface 242 altsetting 64 has an invalid endpoint with address 0x15, skipping [ 2702.541886][T28794] usb 3-1: config 0 interface 242 has no altsetting 0 [ 2702.583495][T28794] usb 3-1: New USB device found, idVendor=15eb, idProduct=0001, bcdDevice=36.02 [ 2702.619235][T28794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2702.650716][T28794] usb 3-1: Product: syz [ 2702.681761][T28794] usb 3-1: Manufacturer: syz [ 2702.719474][T28794] usb 3-1: SerialNumber: syz [ 2702.740220][T28794] usb 3-1: config 0 descriptor?? [ 2702.982696][T29288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2703.061558][T28794] option 3-1:0.242: GSM modem (1-port) converter detected [ 2703.100034][T28794] usb 3-1: USB disconnect, device number 116 [ 2703.111937][T28794] option 3-1:0.242: device disconnected [ 2703.315105][T29288] veth0_vlan: entered promiscuous mode [ 2703.378350][T29288] veth1_vlan: entered promiscuous mode [ 2703.548214][T29288] veth0_macvtap: entered promiscuous mode [ 2703.583441][T29288] veth1_macvtap: entered promiscuous mode [ 2703.647711][T29288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2703.665115][T29288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2703.678752][T29288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2703.700907][T29288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2703.753344][T29288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2703.804850][T29288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2703.872486][T29288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2703.886492][T29288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2703.897701][T29288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2703.918901][T29288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2703.956608][T29288] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2704.033104][T29288] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2704.062243][T29288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2704.088591][T29288] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2705.191055][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2705.356138][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2705.477207][T11379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2705.500294][T11379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2710.327534][T29608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2710.359312][T29608] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2711.689235][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2713.279431][T29639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2713.782095][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.788972][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.672910][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2717.320230][T29701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5838'. [ 2717.343644][T29696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2719.280690][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2720.160535][T25329] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2720.709041][T19537] Bluetooth: hci2: unexpected event for opcode 0x200a [ 2720.755073][T25329] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2720.780622][T25329] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2720.800331][T25329] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2720.819263][T25329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2720.841696][T29730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2720.890504][T25329] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 2721.402091][T29762] (null): rxe_set_mtu: Set mtu to 1024 [ 2721.955513][T29751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2722.093647][T29762] infiniband syz2: set active [ 2722.098454][T29762] infiniband syz2: added veth1_to_team [ 2722.104738][T29762] syz2: rxe_create_cq: returned err = -12 [ 2722.110885][T29762] infiniband syz2: Couldn't create ib_mad CQ [ 2722.117058][T29762] infiniband syz2: Couldn't open port 1 [ 2722.147041][T29762] RDS/IB: syz2: added [ 2722.151521][T29762] smc: adding ib device syz2 with port count 1 [ 2722.157730][T29762] smc: ib device syz2 port 1 has pnetid [ 2723.055316][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2725.239656][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2725.645159][T25329] usb 1-1: USB disconnect, device number 116 [ 2727.868459][T29818] syz.0.5861[29818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2727.868718][T29818] syz.0.5861[29818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2728.150385][T29821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2728.449260][T25767] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2729.357769][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2729.403775][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2729.433354][T25767] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2729.448538][T25767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2729.504845][T25767] usb 3-1: config 0 descriptor?? [ 2730.032391][T25767] cp2112 0003:10C4:EA90.0020: item fetching failed at offset 5/7 [ 2730.052380][T25767] cp2112 0003:10C4:EA90.0020: parse failed [ 2730.067724][T25767] cp2112: probe of 0003:10C4:EA90.0020 failed with error -22 [ 2730.090076][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2731.288185][T29855] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2731.305410][T25329] usb 3-1: USB disconnect, device number 117 [ 2733.209814][T19537] Bluetooth: hci2: command 0x041b tx timeout [ 2733.339517][T29878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5879'. [ 2735.639194][T25329] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2736.022378][T29896] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2736.029584][T29896] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2736.056165][T25329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2737.150303][T29909] hfs: can't find a HFS filesystem on dev nullb0 [ 2737.249295][T29909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5888'. [ 2737.498076][T25329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2737.540673][T25329] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2737.555357][T25329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2737.599390][T25329] usb 1-1: config 0 descriptor?? [ 2737.689261][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2739.065657][T25329] usbhid 1-1:0.0: can't add hid device: -71 [ 2739.092843][T25329] usbhid: probe of 1-1:0.0 failed with error -71 [ 2739.125887][T25329] usb 1-1: USB disconnect, device number 117 [ 2739.789258][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2750.159466][T30013] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5915'. [ 2750.189231][T25767] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2750.404901][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2750.428955][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2750.453463][T25767] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2750.469283][T25767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2750.500204][T25767] usb 3-1: config 0 descriptor?? [ 2751.229162][T30037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2751.237531][T25767] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 2751.289785][T25767] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 2751.441891][T25767] cp2112 0003:10C4:EA90.0021: error requesting version [ 2751.455450][T25767] cp2112: probe of 0003:10C4:EA90.0021 failed with error -32 [ 2752.569225][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2752.719406][T25767] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2752.920076][T25767] usb 2-1: Using ep0 maxpacket: 32 [ 2752.940067][T25767] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2752.956935][T25767] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2752.968829][T25767] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2752.983642][T25767] usb 2-1: Product: syz [ 2752.992458][T25767] usb 2-1: Manufacturer: syz [ 2752.998187][T25767] usb 2-1: SerialNumber: syz [ 2753.024838][T25767] usb 2-1: config 0 descriptor?? [ 2753.043096][T30059] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2753.437143][T25774] usb 2-1: USB disconnect, device number 104 [ 2753.551840][T25773] usb 3-1: USB disconnect, device number 118 [ 2754.194710][T30077] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5928'. [ 2754.659260][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2756.900797][T30083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2757.219270][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2758.639222][T25773] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2759.643819][T30116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5939'. [ 2759.996337][T25773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2760.057273][T25773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2760.079418][T25773] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2760.102879][T25773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.140156][T25773] usb 2-1: config 0 descriptor?? [ 2760.573519][T25773] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 2760.639022][T25773] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2760.821451][T25773] cp2112 0003:10C4:EA90.0022: error requesting version [ 2761.045881][T25773] cp2112: probe of 0003:10C4:EA90.0022 failed with error -32 [ 2763.315224][T25766] usb 2-1: USB disconnect, device number 105 [ 2765.267197][T25774] IPVS: starting estimator thread 0... [ 2765.369469][T30159] IPVS: using max 18 ests per chain, 43200 per kthread [ 2768.889406][T25774] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2769.276309][T25774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2769.289183][T25774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2769.319784][T25774] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 2769.338195][T25774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.642434][T25774] usb 1-1: config 0 descriptor?? [ 2769.939910][T30196] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2770.086863][T25774] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 2770.165176][T25774] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 2770.288756][T25774] cp2112 0003:10C4:EA90.0023: error requesting version [ 2770.334069][T25774] cp2112: probe of 0003:10C4:EA90.0023 failed with error -32 [ 2771.289247][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2771.375841][T25767] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2771.559353][T25767] usb 2-1: Using ep0 maxpacket: 8 [ 2771.599151][T25767] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2771.609369][T25767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2771.618115][T25767] usb 2-1: Product: syz [ 2771.631696][T25767] usb 2-1: Manufacturer: syz [ 2771.637348][T25767] usb 2-1: SerialNumber: syz [ 2771.665410][T25767] usb 2-1: config 0 descriptor?? [ 2771.746627][T25767] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2772.083263][T30217] tipc: Enabled bearer , priority 0 [ 2772.102695][T30216] tipc: Resetting bearer [ 2772.169342][T30215] tipc: Disabling bearer [ 2772.367269][T25774] usb 1-1: USB disconnect, device number 118 [ 2772.457306][T25767] radio-usb-si4713: probe of 2-1:0.0 failed with error -71 [ 2772.465945][T25767] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2772.476633][T25767] usb 2-1: USB disconnect, device number 106 [ 2772.504784][T25766] libceph: connect (1)[c::]:6789 error -101 [ 2772.511525][T25766] libceph: mon0 (1)[c::]:6789 connect error [ 2772.785040][T30222] ceph: No mds server is up or the cluster is laggy [ 2775.230031][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.237408][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.364963][T30250] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5971'. [ 2776.925692][T30257] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2787.739336][T25767] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2787.952623][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2787.963048][T25767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2787.974007][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2787.986040][T25767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2788.007604][T25767] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2788.018755][T25767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2788.028599][T25767] usb 3-1: Product: syz [ 2788.033448][T25767] usb 3-1: Manufacturer: syz [ 2788.038672][T25767] usb 3-1: SerialNumber: syz [ 2788.066782][T25767] usb 3-1: config 0 descriptor?? [ 2788.082658][T25767] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 2789.400109][T25767] ums-isd200: probe of 3-1:0.0 failed with error -22 [ 2789.431598][T25767] usb 3-1: USB disconnect, device number 119 [ 2789.489627][T30362] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2790.129306][T25774] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2790.599570][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2791.439376][T25774] usb 2-1: Using ep0 maxpacket: 32 [ 2791.514150][T25774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2791.566334][T25774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2791.607752][T25774] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2791.639173][T25774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2791.674287][T25774] usb 2-1: config 0 descriptor?? [ 2791.742043][T25774] hub 2-1:0.0: USB hub found [ 2792.542362][T25774] hub 2-1:0.0: 1 port detected [ 2793.799243][T30403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2793.919240][T25773] hub 2-1:0.0: activate --> -90 [ 2794.025955][T25774] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2794.054719][T25774] usb 2-1: USB disconnect, device number 107 [ 2795.302613][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2795.629307][T29240] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2796.019606][T29240] usb 3-1: Using ep0 maxpacket: 32 [ 2796.197554][T29240] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2796.630944][T29240] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2796.659268][T29240] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2796.667873][T29240] usb 3-1: Product: syz [ 2796.689203][T29240] usb 3-1: Manufacturer: syz [ 2796.694078][T29240] usb 3-1: SerialNumber: syz [ 2796.708769][T29240] usb 3-1: config 0 descriptor?? [ 2796.720029][T30424] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2797.653965][T25774] usb 3-1: USB disconnect, device number 120 [ 2797.746452][T30438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2798.369281][T25774] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 2799.164575][T25774] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 2799.177421][T25774] usb 1-1: config 0 has no interface number 0 [ 2799.190183][T25774] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2799.207243][T25774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2799.228595][T25774] usb 1-1: Product: syz [ 2799.257922][T25774] usb 1-1: Manufacturer: syz [ 2799.293203][T25774] usb 1-1: SerialNumber: syz [ 2799.370456][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2799.384510][T25774] usb 1-1: config 0 descriptor?? [ 2799.408894][T25774] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 2799.649507][T25774] qmi_wwan: probe of 1-1:0.172 failed with error -22 [ 2800.280138][T30462] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 2800.918657][T25774] usb 1-1: USB disconnect, device number 119 [ 2803.285192][T30484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2804.244984][T30500] hfs: can't find a HFS filesystem on dev nullb0 [ 2804.253855][T30500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6027'. [ 2804.588728][T30501] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6033'. [ 2805.617396][T30493] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2805.941578][T30513] syz.5.6035: attempt to access beyond end of device [ 2805.941578][T30513] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2805.957616][T30513] SQUASHFS error: Failed to read block 0x0: -5 [ 2805.968253][T30513] unable to read squashfs_super_block [ 2806.309291][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2808.330247][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2810.509532][T25774] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 2811.483443][T25774] usb 3-1: config 1 has an invalid descriptor of length 50, skipping remainder of the config [ 2811.494354][T25774] usb 3-1: too many endpoints for config 1 interface 0 altsetting 253: 58, using maximum allowed: 30 [ 2811.517894][T25774] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 2811.534126][T25774] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2811.545080][T25774] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2811.558393][T25774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2811.569929][T25774] usb 3-1: Product: syz [ 2811.574527][T25774] usb 3-1: Manufacturer: syz [ 2811.579925][T25774] usb 3-1: SerialNumber: syz [ 2811.862463][T25774] usb 3-1: USB disconnect, device number 121 [ 2816.220323][T30596] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2817.129238][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2818.649734][T25774] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2819.307484][T25774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2819.343011][T25774] usb 2-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2819.359594][T25774] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2819.372151][T25774] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2819.382482][T25774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2819.391720][T25774] usb 2-1: Product: syz [ 2819.396239][T25774] usb 2-1: Manufacturer: syz [ 2819.401549][T25774] usb 2-1: SerialNumber: syz [ 2819.670942][T25774] usb 2-1: USB disconnect, device number 108 [ 2820.466699][T30644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6069'. [ 2820.653163][T30648] bad cache= option: l [ 2820.653163][T30648] [ 2820.669804][T30648] CIFS: VFS: bad cache= option: l [ 2825.655698][T25766] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2826.151694][T25766] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.162526][T25766] usb 2-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2826.176386][T25766] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2826.189005][T25766] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2826.198277][T25766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.207501][T25766] usb 2-1: Product: syz [ 2826.213686][T25766] usb 2-1: Manufacturer: syz [ 2826.264596][T25766] usb 2-1: SerialNumber: syz [ 2826.829296][T30692] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2827.035546][T25766] usb 2-1: USB disconnect, device number 109 [ 2828.009281][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2833.457848][T30747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2835.432306][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2836.761034][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.783811][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.381532][T25774] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2838.138237][T25774] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 2838.172956][T25774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2838.309369][T25774] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2838.319145][T25774] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2838.327245][T25774] usb 1-1: Manufacturer: syz [ 2838.346533][T25774] usb 1-1: config 0 descriptor?? [ 2838.707981][T30797] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2838.823440][T30804] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6109'. [ 2838.850817][T30804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2839.539157][T25774] rc_core: IR keymap rc-hauppauge not found [ 2839.554765][T25774] Registered IR keymap rc-empty [ 2839.596892][T25774] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 2840.213307][T25774] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 2840.269865][T25774] usb 1-1: USB disconnect, device number 120 [ 2840.329391][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2841.437201][T30816] netlink: 'syz.5.6112': attribute type 1 has an invalid length. [ 2841.486014][T30816] bond2: entered promiscuous mode [ 2841.504590][T30816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2843.830276][T30822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2843.938778][T30822] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 2844.000004][T30822] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 2844.153174][T30822] bond2: (slave vcan2): making interface the new active one [ 2844.165431][T30822] vcan2: entered promiscuous mode [ 2844.190510][T30822] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 2844.200785][T30837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2844.244845][T30835] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6114'. [ 2844.265658][T30835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2844.472932][T30843] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2844.829606][T25767] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2845.141012][T30853] hfs: can't find a HFS filesystem on dev nullb0 [ 2845.150652][T30853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6121'. [ 2845.269620][T25767] usb 1-1: Using ep0 maxpacket: 32 [ 2845.345126][T25767] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2845.356293][T25767] usb 1-1: config 0 has no interface number 0 [ 2845.399510][T25767] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2845.409997][T25767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.418507][T25767] usb 1-1: Product: syz [ 2845.431626][T25767] usb 1-1: Manufacturer: syz [ 2845.437313][T25767] usb 1-1: SerialNumber: syz [ 2845.471683][T25767] usb 1-1: config 0 descriptor?? [ 2845.483136][T25767] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2846.219347][T30850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2846.227210][T25767] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2846.620067][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2847.049149][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2847.331033][T25767] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2847.407759][T25767] usb 1-1: USB disconnect, device number 121 [ 2847.553774][T30867] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6125'. [ 2847.565063][T25767] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2847.619207][T25767] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2847.651909][T25767] quatech2 1-1:0.51: device disconnected [ 2849.193404][T30880] netlink: 'syz.2.6128': attribute type 1 has an invalid length. [ 2849.271244][T30880] bond1: entered promiscuous mode [ 2849.276682][T30880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2849.767856][T30882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2849.831468][T30882] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 2849.843784][T30882] bond1: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 2849.908931][T30882] bond1: (slave vcan0): making interface the new active one [ 2849.930692][T30882] vcan0: entered promiscuous mode [ 2849.976656][T30882] bond1: (slave vcan0): Enslaving as an active interface with an up link [ 2853.979362][T30906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2854.964353][T30914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6136'. [ 2855.897037][T30920] hfs: can't find a HFS filesystem on dev nullb0 [ 2855.907288][T30920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6138'. [ 2856.122509][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2860.284590][T30940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2860.619502][T30954] hfs: can't find a HFS filesystem on dev nullb0 [ 2860.628360][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'. [ 2860.964098][T30948] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6147'. [ 2861.450121][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2861.799214][T25774] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 2862.381075][T25774] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2862.435312][T25774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2862.450009][T25774] usb 6-1: Product: syz [ 2862.465726][T25774] usb 6-1: Manufacturer: syz [ 2862.477571][T25774] usb 6-1: SerialNumber: syz [ 2862.704076][T25774] usb 6-1: config 0 descriptor?? [ 2863.377570][T25774] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2863.390567][T25774] pctv452e: pctv452e_power_ctrl: 1 [ 2863.390567][T25774] [ 2863.398462][T25774] usb 6-1: selecting invalid altsetting 3 [ 2863.405172][T25774] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2863.405172][T25774] [ 2863.419274][T25774] dvb-usb: bulk message failed: -22 (5/0) [ 2863.466610][T25774] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2863.576021][T25774] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 2865.647091][T30995] hfs: can't find a HFS filesystem on dev nullb0 [ 2865.657412][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6158'. [ 2866.561340][T30999] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6160'. [ 2867.714626][T31004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2869.680463][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2869.979298][T25774] usb 6-1: USB disconnect, device number 69 [ 2871.315713][T31033] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6170'. [ 2873.771173][T31044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2875.048954][T31064] use of bytesused == 0 is deprecated and will be removed in the future, [ 2875.089112][T31064] use the actual size instead. [ 2875.139176][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2875.536291][T31073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6180'. [ 2879.484797][T31092] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2880.828279][T31101] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6186'. [ 2881.049214][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2882.379136][T31109] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6189'. [ 2882.889527][T25773] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2883.162764][T25773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2883.275722][T25773] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2883.532622][T25773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2883.589557][T25773] usb 1-1: config 0 descriptor?? [ 2883.610946][T25773] pwc: Askey VC010 type 2 USB webcam detected. [ 2884.724840][T25773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2884.888302][T25773] pwc: recv_control_msg error -32 req 02 val 2700 [ 2884.900872][T25773] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2884.919515][T25773] pwc: recv_control_msg error -32 req 04 val 1000 [ 2884.943013][T25773] pwc: recv_control_msg error -32 req 04 val 1300 [ 2885.601904][T25773] pwc: recv_control_msg error -32 req 04 val 1400 [ 2885.621052][T25773] pwc: recv_control_msg error -32 req 02 val 2000 [ 2885.663039][T25773] pwc: recv_control_msg error -32 req 02 val 2100 [ 2885.675502][T25773] pwc: recv_control_msg error -32 req 04 val 1500 [ 2885.684257][T25773] pwc: recv_control_msg error -32 req 02 val 2500 [ 2885.708290][T25773] pwc: recv_control_msg error -32 req 02 val 2400 [ 2886.077384][T25773] pwc: recv_control_msg error -71 req 02 val 2900 [ 2886.122606][T25773] pwc: recv_control_msg error -71 req 02 val 2800 [ 2886.144187][T25773] pwc: recv_control_msg error -71 req 04 val 1100 [ 2886.161936][T25773] pwc: recv_control_msg error -71 req 04 val 1200 [ 2886.185299][T25773] pwc: Registered as video103. [ 2886.213920][T25773] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 2886.401302][T31149] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6198'. [ 2886.751276][T25773] usb 1-1: USB disconnect, device number 122 [ 2889.327812][T31171] netlink: 'syz.1.6203': attribute type 10 has an invalid length. [ 2889.713195][T31171] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2891.296652][T31187] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6207'. [ 2899.041047][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2899.049536][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2902.486616][T31285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 2902.747851][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 2903.058111][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 2903.945726][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 2904.299312][T25767] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 2904.329381][T25774] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 2904.491672][T25767] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 2904.500723][T25767] usb 1-1: config 0 has no interface number 0 [ 2904.517088][T25767] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2904.527629][T25767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2904.537702][T25767] usb 1-1: Product: syz [ 2904.542681][T25767] usb 1-1: Manufacturer: syz [ 2904.548800][T25767] usb 1-1: SerialNumber: syz [ 2904.554736][T25774] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 2904.558275][T25767] usb 1-1: config 0 descriptor?? [ 2904.572514][T25774] usb 3-1: config 0 has no interface number 0 [ 2904.577697][T25767] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 2904.583829][T25774] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2904.598845][T25774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2904.612500][T25774] usb 3-1: Product: syz [ 2904.617160][T25774] usb 3-1: Manufacturer: syz [ 2904.622972][T25774] usb 3-1: SerialNumber: syz [ 2904.634733][T25774] usb 3-1: config 0 descriptor?? [ 2904.653251][T25774] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 2904.809667][T25767] qmi_wwan: probe of 1-1:0.172 failed with error -22 [ 2904.865048][T25774] qmi_wwan: probe of 3-1:0.172 failed with error -22 [ 2905.239329][T25774] usb 3-1: USB disconnect, device number 122 [ 2906.714657][T25774] usb 1-1: USB disconnect, device number 123 [ 2909.473061][T31336] lo speed is unknown, defaulting to 1000 [ 2910.398347][T31353] hfs: can't find a HFS filesystem on dev nullb0 [ 2911.148631][T31353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6241'. [ 2914.855253][T31385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2916.409398][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2917.392911][T25774] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 2917.611977][T25774] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 2917.624915][T25774] usb 1-1: config 0 has no interface number 0 [ 2917.783141][T25774] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2917.792827][T25774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2917.809465][T25774] usb 1-1: Product: syz [ 2917.813914][T25774] usb 1-1: Manufacturer: syz [ 2917.824073][T25774] usb 1-1: SerialNumber: syz [ 2917.837394][T25774] usb 1-1: config 0 descriptor?? [ 2918.585726][T25774] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 2918.791386][T25774] qmi_wwan: probe of 1-1:0.172 failed with error -22 [ 2919.030250][T25774] usb 1-1: USB disconnect, device number 124 [ 2921.803584][T31436] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2922.489237][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2923.859354][T25767] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2924.049325][T25767] usb 2-1: Using ep0 maxpacket: 16 [ 2924.069219][T25767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2924.081541][T25767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2924.093261][T25767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2924.125365][T25767] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2924.138683][T25767] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2924.190878][T25767] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2924.216616][T25767] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2924.229990][T25767] usb 2-1: Manufacturer: syz [ 2924.287122][T25767] usb 2-1: config 0 descriptor?? [ 2924.807331][T31471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6275'. [ 2926.119191][T25767] rc_core: IR keymap rc-hauppauge not found [ 2926.125666][T25767] Registered IR keymap rc-empty [ 2926.133812][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.170082][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.241373][T25767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2926.291574][T25767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 2926.315742][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.371755][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.479399][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.548858][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.601058][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.659602][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2926.809543][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2927.768182][T31478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2927.789210][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2927.909576][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2928.029249][T25767] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2928.154667][T25767] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2928.688395][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2928.726900][T25767] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2928.838763][T25767] usb 2-1: USB disconnect, device number 110 [ 2931.699314][T25774] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 2933.341691][T25774] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 2933.356000][T25774] usb 2-1: config 0 has no interface number 0 [ 2933.363863][T31523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6292'. [ 2933.394260][T25774] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2933.419566][T25774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.427800][T25774] usb 2-1: Product: syz [ 2933.432738][T25774] usb 2-1: Manufacturer: syz [ 2933.464182][T25774] usb 2-1: SerialNumber: syz [ 2934.017788][T25774] usb 2-1: config 0 descriptor?? [ 2934.047103][T25774] qmi_wwan 2-1:0.172: bogus CDC Union: master=0, slave=0 [ 2934.275064][T25774] qmi_wwan: probe of 2-1:0.172 failed with error -22 [ 2934.523322][T25774] usb 2-1: USB disconnect, device number 111 [ 2936.206665][T31539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2936.729330][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2941.026606][T31577] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6306'. [ 2941.438126][T31586] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 2945.095266][T31607] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2946.412278][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2947.154276][T31634] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6322'. [ 2951.466891][T31666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6333'. [ 2951.653513][T25329] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 2952.007011][T25329] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 2952.080176][T25329] usb 6-1: config 0 has no interface number 0 [ 2952.240821][T25329] usb 6-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2952.289956][T25329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2952.341851][T25329] usb 6-1: Product: syz [ 2952.346308][T25329] usb 6-1: Manufacturer: syz [ 2952.372224][T25329] usb 6-1: SerialNumber: syz [ 2952.557550][T25329] usb 6-1: config 0 descriptor?? [ 2953.610211][T25329] qmi_wwan 6-1:0.172: bogus CDC Union: master=0, slave=0 [ 2953.867820][T25329] qmi_wwan: probe of 6-1:0.172 failed with error -22 [ 2954.073579][T25329] usb 6-1: USB disconnect, device number 70 [ 2955.269136][T25329] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2956.139325][T25329] usb 2-1: Using ep0 maxpacket: 16 [ 2956.166181][T25329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2956.242789][T25329] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2956.272082][T25329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2956.326784][T25329] usb 2-1: Product: syz [ 2956.369235][T25329] usb 2-1: Manufacturer: syz [ 2956.399440][T25329] usb 2-1: SerialNumber: syz [ 2956.539238][T25329] usb 2-1: config 0 descriptor?? [ 2956.741891][T25329] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2956.852340][T25329] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 2958.255076][T25329] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2958.770552][T25329] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2958.779725][T25329] em28xx 2-1:0.0: board has no eeprom [ 2959.535960][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.545807][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.913366][T31731] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6348'. [ 2960.028404][T31698] em28xx 2-1:0.0: reading from i2c device at 0x1020 failed (error=-5) [ 2960.089295][T25329] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2960.305359][T25329] em28xx 2-1:0.0: dvb set to bulk mode. [ 2960.330352][T25773] em28xx 2-1:0.0: Binding DVB extension [ 2960.390234][T25774] usb 2-1: USB disconnect, device number 112 [ 2960.406645][T25774] em28xx 2-1:0.0: Disconnecting em28xx [ 2961.072816][T25773] em28xx 2-1:0.0: Registering input extension [ 2961.125890][T25774] em28xx 2-1:0.0: Closing input extension [ 2961.351151][T25774] em28xx 2-1:0.0: Freeing device [ 2961.369434][T25767] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 2962.231242][T25767] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 2962.449140][T25767] usb 1-1: config 0 has no interface number 0 [ 2962.468407][T25767] usb 1-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2962.540831][T25767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2962.612168][T25767] usb 1-1: Product: syz [ 2962.639392][T25767] usb 1-1: Manufacturer: syz [ 2962.954271][T25767] usb 1-1: SerialNumber: syz [ 2963.089453][T25767] usb 1-1: config 0 descriptor?? [ 2963.230177][T25767] qmi_wwan 1-1:0.172: bogus CDC Union: master=0, slave=0 [ 2963.305829][T25767] qmi_wwan: probe of 1-1:0.172 failed with error -22 [ 2963.516356][T25774] usb 1-1: USB disconnect, device number 125 [ 2965.280710][T31775] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6360'. [ 2968.217506][T31796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2969.410446][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6370'. [ 2969.606772][T31817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6370'. [ 2970.089209][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 2970.173704][T31817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6370'. [ 2970.204195][T31817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6370'. [ 2974.115330][T31864] netlink: 'syz.5.6385': attribute type 1 has an invalid length. [ 2974.166776][T31864] bond3: entered promiscuous mode [ 2974.195155][T31864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2974.412333][T31869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2974.465628][T31869] bond3: (slave vcan3): The slave device specified does not support setting the MAC address [ 2974.477461][T31869] bond3: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 2975.168829][T31869] bond3: (slave vcan3): making interface the new active one [ 2975.177219][T31869] vcan3: entered promiscuous mode [ 2975.189625][T31869] bond3: (slave vcan3): Enslaving as an active interface with an up link [ 2975.959160][T25767] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 2976.171433][T25767] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 2976.192793][T25767] usb 3-1: config 0 has no interface number 0 [ 2976.222489][T25767] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2976.264818][T25767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2976.296159][T25767] usb 3-1: Product: syz [ 2976.309160][T25767] usb 3-1: Manufacturer: syz [ 2976.314092][T25767] usb 3-1: SerialNumber: syz [ 2976.365709][T25767] usb 3-1: config 0 descriptor?? [ 2976.383342][T25767] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 2976.629373][T25767] qmi_wwan: probe of 3-1:0.172 failed with error -22 [ 2977.753504][T25774] usb 3-1: USB disconnect, device number 123 [ 2980.508645][T31919] netlink: 'syz.2.6400': attribute type 1 has an invalid length. [ 2980.550597][T31919] bond2: entered promiscuous mode [ 2980.557573][T31919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2980.603653][T31924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2980.613680][T31924] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 2980.631149][T31924] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 2980.654936][T31924] bond2: (slave vcan1): making interface the new active one [ 2980.663013][T31924] vcan1: entered promiscuous mode [ 2980.683039][T31924] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 2984.727201][T31959] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2984.741933][T31960] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6410'. [ 2984.781107][T31959] CIFS mount error: No usable UNC path provided in device string! [ 2984.781107][T31959] [ 2984.832286][T31959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2986.337224][T31974] netlink: 'syz.2.6415': attribute type 1 has an invalid length. [ 2986.419397][T31974] bond3: entered promiscuous mode [ 2986.425549][T31974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2987.430038][T31976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2987.437603][T31976] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 2987.498191][T31976] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 2987.657621][T31976] bond3: (slave vcan2): making interface the new active one [ 2987.670533][T31976] vcan2: entered promiscuous mode [ 2987.706282][T31976] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 2991.059316][T25774] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 2991.371400][T25774] usb 3-1: config 0 has an invalid interface number: 172 but max is 0 [ 2991.494714][T25774] usb 3-1: config 0 has no interface number 0 [ 2992.228254][T25774] usb 3-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 2992.269082][T25774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2992.287789][T25774] usb 3-1: Product: syz [ 2992.292856][T25774] usb 3-1: Manufacturer: syz [ 2992.318927][T25774] usb 3-1: SerialNumber: syz [ 2992.349173][T25774] usb 3-1: config 0 descriptor?? [ 2992.361829][T25774] qmi_wwan 3-1:0.172: bogus CDC Union: master=0, slave=0 [ 2993.153919][T25774] qmi_wwan: probe of 3-1:0.172 failed with error -22 [ 2993.358713][T25774] usb 3-1: USB disconnect, device number 124 [ 2993.642381][T32040] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6432'. [ 2998.239119][T25774] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2998.813974][T25774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2998.878928][T25774] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2999.103282][T25774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.131146][T25774] usb 1-1: config 0 descriptor?? [ 2999.163759][T25774] pwc: Askey VC010 type 2 USB webcam detected. [ 3000.022568][T32082] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3000.040254][T25774] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3000.057476][T25774] pwc: recv_control_msg error -32 req 02 val 2700 [ 3000.099999][T25774] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3000.140156][T25774] pwc: recv_control_msg error -32 req 04 val 1000 [ 3000.189656][T25774] pwc: recv_control_msg error -32 req 04 val 1300 [ 3000.200662][T25774] pwc: recv_control_msg error -32 req 04 val 1400 [ 3000.253020][T25774] pwc: recv_control_msg error -32 req 02 val 2000 [ 3000.269888][T25774] pwc: recv_control_msg error -32 req 02 val 2100 [ 3000.286719][T25774] pwc: recv_control_msg error -32 req 04 val 1500 [ 3000.309599][T25774] pwc: recv_control_msg error -32 req 02 val 2500 [ 3000.531499][T25774] pwc: recv_control_msg error -71 req 02 val 2600 [ 3000.552275][T25774] pwc: recv_control_msg error -71 req 02 val 2900 [ 3000.575893][T25774] pwc: recv_control_msg error -71 req 02 val 2800 [ 3000.602417][T25774] pwc: recv_control_msg error -71 req 04 val 1100 [ 3000.632382][T25774] pwc: recv_control_msg error -71 req 04 val 1200 [ 3000.651507][T25774] pwc: Registered as video103. [ 3000.683741][T25774] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 3000.765997][T25774] usb 1-1: USB disconnect, device number 126 [ 3001.299224][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 3002.318025][T32115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6452'. [ 3004.567088][T32131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 3009.826041][T32188] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6470'. [ 3015.704006][T32234] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6482'. [ 3016.198494][T32240] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6485'. [ 3020.985279][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.992332][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.182600][T32267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3022.167691][T32280] netlink: 'syz.0.6497': attribute type 1 has an invalid length. [ 3022.274439][T32282] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6496'. [ 3022.698383][T28928] Bluetooth: hci2: command 0x041b tx timeout [ 3022.963237][T32280] bond1: entered promiscuous mode [ 3023.094266][T32280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3023.348060][T32281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3023.382979][T32281] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 3023.407196][T32281] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 3023.493609][T32281] bond1: (slave vcan1): making interface the new active one [ 3023.522656][T32281] vcan1: entered promiscuous mode [ 3023.545997][T32281] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 3036.229151][T25774] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 3037.228637][T25774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3037.299357][T25774] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3037.308768][T25774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3037.556178][T25774] usb 2-1: config 0 descriptor?? [ 3037.590780][T25774] pwc: Askey VC010 type 2 USB webcam detected. [ 3038.389164][T25774] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3038.454160][T25774] pwc: recv_control_msg error -32 req 02 val 2700 [ 3038.480621][T25774] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3038.753695][T25774] pwc: recv_control_msg error -32 req 04 val 1000 [ 3038.947864][T25774] pwc: recv_control_msg error -32 req 04 val 1300 [ 3039.103982][T25774] pwc: recv_control_msg error -32 req 04 val 1400 [ 3039.121198][T32396] tc_dump_action: action bad kind [ 3039.130601][T25774] pwc: recv_control_msg error -32 req 02 val 2000 [ 3039.175648][T25774] pwc: recv_control_msg error -32 req 02 val 2100 [ 3039.200383][T25774] pwc: recv_control_msg error -32 req 04 val 1500 [ 3039.224379][T25774] pwc: recv_control_msg error -32 req 02 val 2500 [ 3039.825492][T25774] pwc: recv_control_msg error -71 req 02 val 2600 [ 3039.941488][T25774] pwc: recv_control_msg error -71 req 02 val 2900 [ 3040.093700][T25774] pwc: recv_control_msg error -71 req 02 val 2800 [ 3040.127101][T25774] pwc: recv_control_msg error -71 req 04 val 1100 [ 3040.209956][T25774] pwc: recv_control_msg error -71 req 04 val 1200 [ 3040.239650][T25774] pwc: Registered as video103. [ 3040.279828][T25774] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 3040.349351][T25774] usb 2-1: USB disconnect, device number 113 [ 3044.339883][T32406] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 3045.672588][T32406] usb 6-1: Using ep0 maxpacket: 16 [ 3045.684722][T32406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3045.705270][T32406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3045.723416][T32406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3045.742501][T32406] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3046.119252][T32406] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3046.375965][T32406] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3046.388683][T32406] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3046.397230][T32406] usb 6-1: Manufacturer: syz [ 3046.413196][T32406] usb 6-1: config 0 descriptor?? [ 3048.329306][T32406] rc_core: IR keymap rc-hauppauge not found [ 3048.335794][T32406] Registered IR keymap rc-empty [ 3048.365922][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3048.409650][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3048.479953][T32406] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 3048.522846][T32406] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 3048.540472][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3048.580139][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3048.629845][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.091399][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.319170][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.385279][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.436190][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.509238][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.553464][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.599373][T32406] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3049.650553][T32406] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 3049.714839][T32406] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3049.767471][T32406] usb 6-1: USB disconnect, device number 71 [ 3054.398063][T25767] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 3054.769153][T25767] usb 1-1: Using ep0 maxpacket: 16 [ 3054.943487][T25767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3054.955148][T25767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3054.967703][T25767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3054.991156][T25767] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3055.003910][T25767] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3055.053360][T25767] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3055.080273][T25767] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3055.088359][T25767] usb 1-1: Manufacturer: syz [ 3055.129654][T25767] usb 1-1: config 0 descriptor?? [ 3056.019208][T25767] rc_core: IR keymap rc-hauppauge not found [ 3056.025396][T25767] Registered IR keymap rc-empty [ 3056.030870][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3056.101310][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3056.212200][T25767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 3056.405556][T25767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input34 [ 3056.428464][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.320770][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.369648][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.439232][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.489180][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.533522][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.559526][T32531] tc_dump_action: action bad kind [ 3057.579195][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.629336][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.689251][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3057.859365][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3058.389944][T25767] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3058.459130][T25767] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3058.514150][T25767] usb 1-1: USB disconnect, device number 127 [ 3061.799775][T25767] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 3061.953591][T32570] ubi31: attaching mtd0 [ 3061.975894][T32570] ubi31: scanning is finished [ 3061.984465][T32570] ubi31: empty MTD device detected [ 3062.001047][T25767] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 3062.019510][T25767] usb 3-1: config 0 has no interface number 0 [ 3062.034642][T25767] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 3062.047552][T25767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.069021][T25767] usb 3-1: Product: syz [ 3062.073438][T25767] usb 3-1: Manufacturer: syz [ 3062.078345][T25767] usb 3-1: SerialNumber: syz [ 3062.090253][T25767] usb 3-1: config 0 descriptor?? [ 3062.110655][T25767] ttusb_dec_send_command: command bulk message failed: error -22 [ 3062.128348][T25767] ttusb-dec: probe of 3-1:0.50 failed with error -22 [ 3062.613588][T32570] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3062.739338][T32570] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3062.746752][T32570] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3062.754824][T32570] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 3062.764913][T32570] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3062.788406][T32570] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3062.800059][T25767] usb 3-1: USB disconnect, device number 125 [ 3062.828388][T32570] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3567890059 [ 3062.886489][T32570] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3062.930272][T32576] ubi31: background thread "ubi_bgt31d" started, PID 32576 [ 3063.461216][T32583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 3064.345782][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 3064.401750][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 3064.460003][T32589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6573'. [ 3066.019848][T32604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6579'. [ 3066.205761][T32609] overlay: ./file0 is not a directory [ 3069.691139][T32636] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 3070.035563][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'. [ 3070.511572][T32654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6590'. [ 3070.942034][T32657] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6592'. [ 3073.299380][T32676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6598'. [ 3079.204097][T32723] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6610'. [ 3081.113290][T32746] CIFS mount error: No usable UNC path provided in device string! [ 3081.113290][T32746] [ 3081.163329][T32746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3081.599732][T32747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6615'. [ 3082.415328][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.709641][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.267786][T32761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6620'. [ 3084.806298][ T309] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6625'. [ 3084.959667][T25329] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3085.399093][T25329] usb 3-1: Using ep0 maxpacket: 16 [ 3085.414174][T25329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3085.427109][T25329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3085.495560][T25329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3085.549978][T25329] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3085.612243][T25329] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3085.717580][T25329] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3085.766953][T25329] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3085.905943][T25329] usb 3-1: Manufacturer: syz [ 3085.915239][T25329] usb 3-1: config 0 descriptor?? [ 3086.481466][ T322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6627'. [ 3087.156095][T25329] rc_core: IR keymap rc-hauppauge not found [ 3087.167983][T25329] Registered IR keymap rc-empty [ 3087.173596][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3087.211952][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3087.289453][T25329] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3087.749340][T25329] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 3088.011943][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3088.072214][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3088.149092][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3088.962724][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.025166][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.244372][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.322847][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.399814][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.452200][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.499485][T25329] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 3089.602744][T25329] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3090.103638][T25329] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3090.150200][T25329] usb 3-1: USB disconnect, device number 126 [ 3090.179098][T25767] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 3090.421625][T25767] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 3090.432592][T25767] usb 2-1: config 0 has no interface number 0 [ 3090.443025][T25767] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 3090.466805][T25767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3090.477441][T25767] usb 2-1: Product: syz [ 3090.488717][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 3090.507696][T25767] usb 2-1: Manufacturer: syz [ 3090.515230][T25767] usb 2-1: SerialNumber: syz [ 3090.612342][ T345] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6634'. [ 3090.725916][T25767] usb 2-1: config 0 descriptor?? [ 3090.750375][T25767] qmi_wwan: probe of 2-1:0.172 failed with error -22 [ 3090.772626][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 3090.783709][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 3090.797059][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6633'. [ 3091.129178][ T358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6636'. [ 3092.128820][T25767] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3093.166286][T25329] usb 2-1: USB disconnect, device number 114 [ 3093.249671][T25767] usb 6-1: Using ep0 maxpacket: 16 [ 3093.267358][T25767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3093.309222][T25767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3093.761930][T25767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3093.849297][T25767] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3093.869652][T25767] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3093.957913][T25767] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3093.979324][T25767] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3093.988631][T25767] usb 6-1: Manufacturer: syz [ 3094.066492][ T378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6642'. [ 3094.092383][T25767] usb 6-1: config 0 descriptor?? [ 3094.157758][T25767] usb 6-1: can't set config #0, error -71 [ 3094.199133][T25767] usb 6-1: USB disconnect, device number 72 [ 3094.556729][ T382] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6645'. [ 3094.725882][T32406] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3094.848834][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6646'. [ 3095.572564][T32406] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3096.113289][T32406] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3096.151638][T32406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3096.176012][T32406] usb 3-1: config 0 descriptor?? [ 3096.219580][T32406] pwc: Askey VC010 type 2 USB webcam detected. [ 3096.673261][T32406] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3096.965481][T32406] pwc: recv_control_msg error -32 req 02 val 2700 [ 3096.988097][T32406] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3097.348051][T32406] pwc: recv_control_msg error -32 req 04 val 1000 [ 3097.380051][T32406] pwc: recv_control_msg error -32 req 04 val 1300 [ 3097.411614][T32406] pwc: recv_control_msg error -32 req 04 val 1400 [ 3097.428997][T32406] pwc: recv_control_msg error -32 req 02 val 2000 [ 3097.443007][T32406] pwc: recv_control_msg error -32 req 02 val 2100 [ 3097.473831][T32406] pwc: recv_control_msg error -32 req 04 val 1500 [ 3097.501925][T32406] pwc: recv_control_msg error -32 req 02 val 2500 [ 3098.635864][T32406] pwc: recv_control_msg error -71 req 02 val 2600 [ 3099.198427][T32406] pwc: recv_control_msg error -71 req 02 val 2900 [ 3099.268276][T32406] pwc: recv_control_msg error -71 req 02 val 2800 [ 3099.319975][T32406] pwc: recv_control_msg error -71 req 04 val 1100 [ 3099.332609][T32406] pwc: recv_control_msg error -71 req 04 val 1200 [ 3099.379625][T32406] pwc: Registered as video103. [ 3099.386604][T32406] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 3099.499148][T32406] usb 3-1: USB disconnect, device number 127 [ 3099.948045][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6656'. [ 3101.572877][ T441] netlink: 'syz.1.6660': attribute type 1 has an invalid length. [ 3101.749128][ T441] bond1: entered promiscuous mode [ 3101.760095][ T441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3102.846311][ T444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3102.882777][ T444] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 3102.912932][ T444] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 3103.014804][ T444] bond1: (slave vcan1): making interface the new active one [ 3103.041738][ T444] vcan1: entered promiscuous mode [ 3103.249015][T25767] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 3103.921857][ T444] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 3104.141192][T25767] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3104.183303][T25767] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3104.237177][T25767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3104.343110][T25767] usb 6-1: config 0 descriptor?? [ 3104.417109][T25767] pwc: Askey VC010 type 2 USB webcam detected. [ 3105.329093][T25767] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3105.340519][T25767] pwc: recv_control_msg error -32 req 02 val 2700 [ 3105.379375][T25767] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3105.404031][T25767] pwc: recv_control_msg error -32 req 04 val 1000 [ 3105.429910][T25767] pwc: recv_control_msg error -32 req 04 val 1300 [ 3105.450019][T25767] pwc: recv_control_msg error -32 req 04 val 1400 [ 3105.458752][T25767] pwc: recv_control_msg error -32 req 02 val 2000 [ 3105.474294][T25767] pwc: recv_control_msg error -32 req 02 val 2100 [ 3105.616576][T25767] pwc: recv_control_msg error -32 req 04 val 1500 [ 3105.635311][T25767] pwc: recv_control_msg error -32 req 02 val 2500 [ 3105.711530][ T470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'. [ 3106.190558][T25767] pwc: recv_control_msg error -71 req 02 val 2600 [ 3106.422519][T25767] pwc: recv_control_msg error -71 req 02 val 2900 [ 3106.473851][T25767] pwc: recv_control_msg error -71 req 02 val 2800 [ 3106.591444][T25767] pwc: recv_control_msg error -71 req 04 val 1100 [ 3106.609708][T25767] pwc: recv_control_msg error -71 req 04 val 1200 [ 3106.638828][T25767] pwc: Registered as video103. [ 3106.713456][T25767] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input37 [ 3106.771305][T25767] usb 6-1: USB disconnect, device number 73 [ 3107.323714][ T485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6670'. [ 3107.449789][ T487] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6671'. [ 3108.271881][ T489] netlink: 'syz.0.6672': attribute type 1 has an invalid length. [ 3108.321482][ T489] bond2: entered promiscuous mode [ 3108.334304][ T489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3109.679065][ T493] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3109.718398][ T493] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 3109.731833][ T493] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 3110.241534][ T493] bond2: (slave vcan2): making interface the new active one [ 3110.359289][ T493] vcan2: entered promiscuous mode [ 3110.397487][ T493] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 3110.886873][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6676'. [ 3111.872119][ T517] binder: 514:517 ioctl c0306201 0 returned -14 [ 3113.359172][ T478] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 3114.595895][ T535] netlink: 'syz.0.6684': attribute type 1 has an invalid length. [ 3114.711835][ T535] bond3: entered promiscuous mode [ 3114.717295][ T535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3114.783842][ T538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3114.848645][ T538] bond3: (slave vcan3): The slave device specified does not support setting the MAC address [ 3114.869319][ T538] bond3: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 3114.919837][ T538] bond3: (slave vcan3): making interface the new active one [ 3114.928001][ T538] vcan3: entered promiscuous mode [ 3114.945031][ T538] bond3: (slave vcan3): Enslaving as an active interface with an up link [ 3117.929631][ T560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6689'. [ 3118.554534][ T565] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6691'. [ 3121.328861][ T583] netlink: 'syz.2.6697': attribute type 1 has an invalid length. [ 3121.359021][T25766] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 3121.381384][ T583] bond4: entered promiscuous mode [ 3121.392164][ T583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3121.422564][ T585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3121.438670][ T585] bond4: (slave vcan3): The slave device specified does not support setting the MAC address [ 3121.453521][ T585] bond4: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 3121.474037][ T585] bond4: (slave vcan3): making interface the new active one [ 3121.482135][ T585] vcan3: entered promiscuous mode [ 3121.501495][ T585] bond4: (slave vcan3): Enslaving as an active interface with an up link [ 3121.561962][T25766] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 3121.801593][T25766] usb 2-1: config 0 has no interface number 0 [ 3121.839480][T25766] usb 2-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 3121.850063][T25766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.858623][T25766] usb 2-1: Product: syz [ 3121.863213][T25766] usb 2-1: Manufacturer: syz [ 3121.868513][T25766] usb 2-1: SerialNumber: syz [ 3121.898279][T25766] usb 2-1: config 0 descriptor?? [ 3121.932469][T25766] qmi_wwan 2-1:0.172: bogus CDC Union: master=0, slave=0 [ 3122.166545][T25766] qmi_wwan: probe of 2-1:0.172 failed with error -22 [ 3122.215582][T25766] usb 2-1: USB disconnect, device number 115 [ 3124.627999][ T608] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.6703'. [ 3124.739279][T25766] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 3125.109177][T25766] usb 1-1: Using ep0 maxpacket: 8 [ 3125.138546][T25766] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 3125.179715][ T611] ISOFS: Unable to identify CD-ROM format. [ 3125.199434][T25766] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3125.218000][T25766] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3125.237346][T25766] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3125.251723][T25766] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3125.320203][T25766] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3125.329909][T25766] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.414629][ T615] netlink: 'syz.5.6707': attribute type 1 has an invalid length. [ 3125.727093][T25766] usb 1-1: GET_CAPABILITIES returned 0 [ 3125.734043][ T615] bond4: entered promiscuous mode [ 3125.739958][ T615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3126.488432][T25766] usbtmc 1-1:16.0: can't read capabilities [ 3127.070519][T25766] usb 1-1: USB disconnect, device number 2 [ 3127.329879][ T618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 3128.055533][ T618] bond4: (slave vcan4): The slave device specified does not support setting the MAC address [ 3128.109227][ T618] bond4: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 3128.184843][ T618] bond4: (slave vcan4): making interface the new active one [ 3128.211599][ T618] vcan4: entered promiscuous mode [ 3128.241428][ T618] bond4: (slave vcan4): Enslaving as an active interface with an up link [ 3128.720522][ T638] (null): rxe_set_mtu: Set mtu to 1024 [ 3128.728053][ T638] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3131.884658][ T668] netlink: 'syz.2.6720': attribute type 1 has an invalid length. [ 3132.034168][ T668] bond5: entered promiscuous mode [ 3132.042991][ T668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3132.665983][ T672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3132.714293][ T672] bond5: (slave vcan4): The slave device specified does not support setting the MAC address [ 3132.725222][ T672] bond5: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 3132.773762][ T672] bond5: (slave vcan4): making interface the new active one [ 3132.796234][ T672] vcan4: entered promiscuous mode [ 3132.804446][ T672] bond5: (slave vcan4): Enslaving as an active interface with an up link [ 3133.170087][ T693] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6725'. [ 3137.789704][T25766] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 3137.989158][T25766] usb 6-1: Using ep0 maxpacket: 32 [ 3138.098613][T25766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3138.109263][T25766] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3138.122823][T25766] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3138.159016][T25766] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3138.197450][T25766] usb 6-1: Product: syz [ 3138.202295][T25766] usb 6-1: Manufacturer: syz [ 3138.206968][T25766] usb 6-1: SerialNumber: syz [ 3138.231970][T25766] usb 6-1: config 0 descriptor?? [ 3139.265488][T28794] usb 6-1: USB disconnect, device number 75 [ 3140.443627][ T744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6739'. [ 3143.867307][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.874216][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 3146.219215][T25766] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 3147.859116][T25766] usb 6-1: Using ep0 maxpacket: 32 [ 3147.889543][T25766] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3147.900685][T25766] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3147.926072][T25766] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3147.960231][T25766] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3147.993669][T25766] usb 6-1: Product: syz [ 3147.998278][T25766] usb 6-1: Manufacturer: syz [ 3148.012225][T25766] usb 6-1: SerialNumber: syz [ 3148.045446][T25766] usb 6-1: config 0 descriptor?? [ 3148.913368][T28794] usb 6-1: USB disconnect, device number 76 [ 3152.849063][T28794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3153.099173][T28794] usb 1-1: Using ep0 maxpacket: 16 [ 3153.156060][T28794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3153.204030][T28794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3153.790020][T28794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3153.800406][T28794] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3153.816327][T28794] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3153.834882][T28794] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3154.107459][T28794] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3154.165146][T28794] usb 1-1: Manufacturer: syz [ 3154.196325][T28794] usb 1-1: config 0 descriptor?? [ 3155.844844][T28794] rc_core: IR keymap rc-hauppauge not found [ 3155.863188][T28794] Registered IR keymap rc-empty [ 3155.893669][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.001272][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.059837][T28794] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 3156.125566][T28794] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 3156.169401][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.199352][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.262473][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.299146][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.359406][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.399219][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.470084][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3156.519086][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3157.359138][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3157.395262][T28794] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3157.452632][T28794] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3157.472664][T28794] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3157.496256][T28794] usb 1-1: USB disconnect, device number 3 [ 3157.616452][ T866] udevd[866]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 3158.109335][T32406] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 3158.238969][ T873] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6775'. [ 3158.381131][T32406] usb 2-1: Using ep0 maxpacket: 32 [ 3158.411819][T32406] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3158.463521][T32406] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3158.510247][T32406] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3158.526045][T32406] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3158.558565][T32406] usb 2-1: Product: syz [ 3158.886666][T32406] usb 2-1: Manufacturer: syz [ 3158.923916][T32406] usb 2-1: SerialNumber: syz [ 3159.422916][T32406] usb 2-1: config 0 descriptor?? [ 3159.809142][T28794] usb 2-1: USB disconnect, device number 116 [ 3162.015463][ T904] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6782'. [ 3162.629264][T25767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3162.808454][ T912] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6784'. [ 3162.968985][T25767] usb 1-1: Using ep0 maxpacket: 16 [ 3163.269950][T25767] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3163.318565][T25767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3163.339036][T25767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3163.348859][T25767] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3163.359513][T25767] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3163.424507][T25767] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3163.471619][T25767] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3163.515017][T25767] usb 1-1: Manufacturer: syz [ 3163.535248][T25767] usb 1-1: config 0 descriptor?? [ 3163.929574][T25767] rc_core: IR keymap rc-hauppauge not found [ 3163.997058][T25767] Registered IR keymap rc-empty [ 3164.009869][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.039108][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.070163][T25767] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 3164.099905][T25767] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 3164.118102][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.157553][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.199150][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.229082][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.260080][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.302619][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.359378][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.369980][ T925] syzkaller0: entered promiscuous mode [ 3164.375629][ T925] syzkaller0: entered allmulticast mode [ 3164.409396][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.452853][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.489413][T25767] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 3164.535930][T25767] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3164.545847][T25767] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3164.599396][T25767] usb 1-1: USB disconnect, device number 4 [ 3165.755245][ T942] CIFS mount error: No usable UNC path provided in device string! [ 3165.755245][ T942] [ 3165.766759][ T942] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3165.891877][T28794] IPVS: starting estimator thread 0... [ 3165.989080][ T947] IPVS: using max 19 ests per chain, 45600 per kthread [ 3166.241150][ T956] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6794'. [ 3166.339361][T25767] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3166.579108][T25767] usb 3-1: Using ep0 maxpacket: 32 [ 3166.662471][T25767] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3166.672579][T25767] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3166.700597][T25767] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3166.706657][ T957] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6793'. [ 3166.710476][T25767] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3167.219137][T25767] usb 3-1: Product: syz [ 3167.224036][T25767] usb 3-1: Manufacturer: syz [ 3167.230818][T25767] usb 3-1: SerialNumber: syz [ 3167.243176][T25767] usb 3-1: config 0 descriptor?? [ 3167.863380][T32406] usb 3-1: USB disconnect, device number 2 [ 3172.781887][ T971] CIFS mount error: No usable UNC path provided in device string! [ 3172.781887][ T971] [ 3172.792405][ T971] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3176.889092][T32406] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3177.649433][T25767] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 3177.789294][ T1015] netlink: 'syz.2.6808': attribute type 6 has an invalid length. [ 3177.825656][T32406] usb 6-1: Using ep0 maxpacket: 32 [ 3177.830381][ T1014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6809'. [ 3177.994015][T25767] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3177.999227][T32406] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3178.021910][T25767] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3178.073560][T25767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3178.135765][T25767] usb 2-1: config 0 descriptor?? [ 3178.174313][T25767] pwc: Askey VC010 type 2 USB webcam detected. [ 3178.240061][T32406] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3178.265396][T32406] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3178.282754][T32406] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3178.311787][T32406] usb 6-1: Product: syz [ 3178.316031][T32406] usb 6-1: Manufacturer: syz [ 3178.343802][T32406] usb 6-1: SerialNumber: syz [ 3178.373966][T32406] usb 6-1: config 0 descriptor?? [ 3178.589683][T25767] pwc: recv_control_msg error -32 req 02 val 2b00 [ 3178.603417][T25767] pwc: recv_control_msg error -32 req 02 val 2700 [ 3178.642515][T25767] pwc: recv_control_msg error -32 req 02 val 2c00 [ 3178.688637][T25767] pwc: recv_control_msg error -32 req 04 val 1000 [ 3178.726914][T25767] pwc: recv_control_msg error -32 req 04 val 1300 [ 3178.741378][T25767] pwc: recv_control_msg error -32 req 04 val 1400 [ 3178.777330][T25767] pwc: recv_control_msg error -32 req 02 val 2000 [ 3178.787267][T25767] pwc: recv_control_msg error -32 req 02 val 2100 [ 3178.875111][T25767] pwc: recv_control_msg error -32 req 04 val 1500 [ 3178.951971][T25767] pwc: recv_control_msg error -32 req 02 val 2500 [ 3179.060978][ T478] usb 6-1: USB disconnect, device number 77 [ 3179.168171][T25767] pwc: recv_control_msg error -71 req 02 val 2600 [ 3179.197838][T25767] pwc: recv_control_msg error -71 req 02 val 2900 [ 3179.214523][T25767] pwc: recv_control_msg error -71 req 02 val 2800 [ 3179.223555][T25767] pwc: recv_control_msg error -71 req 04 val 1100 [ 3179.235890][T25767] pwc: recv_control_msg error -71 req 04 val 1200 [ 3179.259150][T25767] pwc: Registered as video103. [ 3179.272768][T25767] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 3179.324785][T25767] usb 2-1: USB disconnect, device number 117 [ 3180.100966][ T1046] CIFS mount error: No usable UNC path provided in device string! [ 3180.100966][ T1046] [ 3180.111530][ T1046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3180.692780][ T1049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6810'. [ 3182.571570][ T1063] loop6: detected capacity change from 0 to 524288000 [ 3182.700292][ T1064] loop6: detected capacity change from 524288000 to 0 [ 3183.688697][ T1072] Bluetooth: MGMT ver 1.22 [ 3184.032921][ T1075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6821'. [ 3184.536725][ T1074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6821'. [ 3184.839100][ T478] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3186.829208][ T478] usb 3-1: Using ep0 maxpacket: 32 [ 3186.873049][ T478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3186.919155][ T478] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 3187.114419][ T478] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3187.154585][ T478] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3187.309101][ T478] usb 3-1: Product: syz [ 3187.321887][ T478] usb 3-1: Manufacturer: syz [ 3187.330983][ T478] usb 3-1: SerialNumber: syz [ 3187.366757][ T478] usb 3-1: config 0 descriptor?? [ 3187.773527][ T1095] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6826'. [ 3187.803723][ T478] usb 3-1: USB disconnect, device number 3 [ 3191.966860][ T1119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6837'. [ 3193.824819][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6842'. [ 3195.468449][ T1153] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6847'. [ 3195.830602][ T1159] (null): rxe_set_mtu: Set mtu to 1024 [ 3195.840202][ T1159] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 3196.711329][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 3196.943361][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 3196.952837][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 3196.962221][ T1169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6851'. [ 3199.800002][ T1191] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6858'. [ 3200.320836][ T1204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6859'. [ 3202.523863][ T1228] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6869'. [ 3202.549043][T32406] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3202.753500][T32406] usb 3-1: Using ep0 maxpacket: 32 [ 3202.766257][T32406] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3202.788259][T32406] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3202.798645][T32406] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3202.807542][T32406] usb 3-1: Product: syz [ 3202.813648][T32406] usb 3-1: Manufacturer: syz [ 3202.818452][T32406] usb 3-1: SerialNumber: syz [ 3202.829848][T32406] usb 3-1: config 0 descriptor?? [ 3202.838396][ T1221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3203.160364][T32406] usb 3-1: USB disconnect, device number 4 [ 3205.114209][ T1259] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.6879'. [ 3205.296484][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.303038][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 3207.203862][ T1280] lo speed is unknown, defaulting to 1000 [ 3208.260120][ T478] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 3208.475828][ T478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3208.521082][ T478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3208.544781][ T478] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xAC, skipping [ 3208.559430][ T478] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 3208.572418][ T478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3208.583841][ T478] usb 6-1: config 0 descriptor?? [ 3209.253974][ T478] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 3209.263525][ T478] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 3209.271532][ T478] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 3209.279306][ T478] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 3209.308501][ T478] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 3209.317556][T25766] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3209.392799][ T478] hid-u2fzero 0003:10C4:8ACF.0024: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0 [ 3209.598998][T25766] usb 1-1: Using ep0 maxpacket: 32 [ 3209.610181][ T478] hid-u2fzero 0003:10C4:8ACF.0024: U2F Zero LED initialised [ 3209.618780][ T478] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 3209.630794][ T478] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 3209.639539][ T478] CPU: 1 PID: 478 Comm: kworker/1:1 Not tainted syzkaller #0 [ 3209.647211][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3209.657441][ T478] Workqueue: usb_hub_wq hub_event [ 3209.663043][ T478] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 3209.669319][ T478] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 79 1c f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 f1 1c f9 f9 48 8d 44 24 60 48 89 03 [ 3209.689260][ T478] RSP: 0018:ffffc900035b6780 EFLAGS: 00010202 [ 3209.695380][ T478] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 3209.703900][ T478] RDX: 0000000000000000 RSI: ffffc900035b68a0 RDI: ffff888061047b68 [ 3209.712464][ T478] RBP: ffffc900035b6998 R08: 0000000000000000 R09: 0000000000000000 [ 3209.720483][ T478] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804a689300 [ 3209.728701][ T478] R13: ffff88804a689030 R14: 1ffff110094d1283 R15: 1ffff920006b6cf8 [ 3209.737341][ T478] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3209.747544][ T478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3209.754437][ T478] CR2: 000055aacb6326b8 CR3: 000000001df40000 CR4: 00000000003506e0 [ 3209.762711][ T478] Call Trace: [ 3209.766617][ T478] [ 3209.769595][ T478] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 3209.780317][ T478] ? add_early_randomness+0x1e/0x1a0 [ 3209.785831][ T478] ? mutex_unlock+0x10/0x10 [ 3209.790454][ T478] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 3209.796144][ T478] add_early_randomness+0x7a/0x1a0 [ 3209.801753][ T478] hwrng_register+0x3db/0x4a0 [ 3209.806564][ T478] devm_hwrng_register+0x47/0xb0 [ 3209.811704][ T478] u2fzero_probe+0x348/0x460 [ 3209.816585][ T478] hid_device_probe+0x293/0x5b0 [ 3209.821836][ T478] ? hid_uevent+0x350/0x350 [ 3209.826365][ T478] really_probe+0x25b/0xb40 [ 3209.830911][ T478] ? pm_runtime_barrier+0x14b/0x1c0 [ 3209.836370][ T478] __driver_probe_device+0x18c/0x330 [ 3209.841776][ T478] driver_probe_device+0x4f/0x420 [ 3209.847097][ T478] __device_attach_driver+0x2ca/0x520 [ 3209.852880][ T478] bus_for_each_drv+0x24b/0x2d0 [ 3209.858008][ T478] ? coredump_store+0x90/0x90 [ 3209.863257][ T478] ? bus_find_device+0x320/0x320 [ 3209.868310][ T478] __device_attach+0x2b5/0x400 [ 3209.873382][ T478] ? device_attach+0x20/0x20 [ 3209.878219][ T478] ? do_raw_spin_unlock+0x121/0x230 [ 3209.883750][ T478] bus_probe_device+0x180/0x260 [ 3209.889453][ T478] device_add+0x85b/0xc20 [ 3209.894302][ T478] hid_add_device+0x38d/0x530 [ 3209.901478][ T478] usbhid_probe+0xe02/0x1220 [ 3209.907003][ T478] usb_probe_interface+0x5a4/0xb00 [ 3209.912532][ T478] ? usb_register_driver+0x3d0/0x3d0 [ 3209.918643][ T478] really_probe+0x25b/0xb40 [ 3209.924319][ T478] ? pm_runtime_barrier+0x14b/0x1c0 [ 3209.930284][ T478] __driver_probe_device+0x18c/0x330 [ 3209.935825][ T478] driver_probe_device+0x4f/0x420 [ 3209.940979][ T478] __device_attach_driver+0x2ca/0x520 [ 3209.946396][ T478] bus_for_each_drv+0x24b/0x2d0 [ 3209.951270][ T478] ? coredump_store+0x90/0x90 [ 3209.956057][ T478] ? bus_find_device+0x320/0x320 [ 3209.961083][ T478] __device_attach+0x2b5/0x400 [ 3209.965956][ T478] ? device_attach+0x20/0x20 [ 3209.970580][ T478] ? __kmem_cache_free+0xba/0x1f0 [ 3209.975837][ T478] ? do_raw_spin_unlock+0x121/0x230 [ 3209.981145][ T478] bus_probe_device+0x180/0x260 [ 3209.986021][ T478] device_add+0x85b/0xc20 [ 3209.990375][ T478] usb_set_configuration+0x1a79/0x20c0 [ 3209.996138][ T478] usb_generic_driver_probe+0x8d/0x150 [ 3210.001728][ T478] usb_probe_device+0x13d/0x280 [ 3210.006789][ T478] ? usb_register_device_driver+0x230/0x230 [ 3210.012970][ T478] really_probe+0x25b/0xb40 [ 3210.017667][ T478] ? pm_runtime_barrier+0x14b/0x1c0 [ 3210.023238][ T478] __driver_probe_device+0x18c/0x330 [ 3210.028774][ T478] driver_probe_device+0x4f/0x420 [ 3210.034013][ T478] __device_attach_driver+0x2ca/0x520 [ 3210.039850][ T478] bus_for_each_drv+0x24b/0x2d0 [ 3210.044913][ T478] ? coredump_store+0x90/0x90 [ 3210.049618][ T478] ? bus_find_device+0x320/0x320 [ 3210.054663][ T478] __device_attach+0x2b5/0x400 [ 3210.059446][ T478] ? device_attach+0x20/0x20 [ 3210.064428][ T478] ? __kmem_cache_free+0xba/0x1f0 [ 3210.069518][ T478] ? do_raw_spin_unlock+0x121/0x230 [ 3210.074850][ T478] bus_probe_device+0x180/0x260 [ 3210.079813][ T478] device_add+0x85b/0xc20 [ 3210.084258][ T478] usb_new_device+0xa31/0x1630 [ 3210.089391][ T478] ? usb_disconnect+0x8a0/0x8a0 [ 3210.094253][ T478] ? _raw_spin_unlock_irq+0x23/0x50 [ 3210.099635][ T478] ? lockdep_hardirqs_on+0x98/0x150 [ 3210.105078][ T478] hub_event+0x2962/0x49c0 [ 3210.109734][ T478] ? hub_post_resume+0x120/0x120 [ 3210.114779][ T478] ? read_lock_is_recursive+0x20/0x20 [ 3210.120190][ T478] ? _raw_spin_unlock_irq+0x23/0x50 [ 3210.125481][ T478] ? process_scheduled_works+0x957/0x15b0 [ 3210.131602][ T478] ? process_scheduled_works+0x957/0x15b0 [ 3210.137613][ T478] process_scheduled_works+0xa45/0x15b0 [ 3210.143200][ T478] ? assign_work+0x400/0x400 [ 3210.147904][ T478] ? assign_work+0x39e/0x400 [ 3210.152538][ T478] worker_thread+0xa55/0xfc0 [ 3210.157237][ T478] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 3210.163696][ T478] ? _raw_spin_unlock+0x40/0x40 [ 3210.169010][ T478] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 3210.175016][ T478] kthread+0x2fa/0x390 [ 3210.179570][ T478] ? pr_cont_work+0x560/0x560 [ 3210.184268][ T478] ? kthread_blkcg+0xd0/0xd0 [ 3210.189419][ T478] ret_from_fork+0x48/0x80 [ 3210.194013][ T478] ? kthread_blkcg+0xd0/0xd0 [ 3210.199107][ T478] ret_from_fork_asm+0x11/0x20 [ 3210.203951][ T478] [ 3210.207187][ T478] Modules linked in: [ 3210.235835][T25766] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 3210.250776][ T478] ---[ end trace 0000000000000000 ]--- [ 3210.257068][ T478] RIP: 0010:u2fzero_rng_read+0x241/0x630 [ 3210.264250][ T478] Code: 24 18 80 3c 01 00 74 08 4c 89 ef e8 79 1c f9 f9 bb a8 00 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 f1 1c f9 f9 48 8d 44 24 60 48 89 03 [ 3210.285844][T25766] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3210.308087][T25766] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3210.324212][T25766] usb 1-1: Product: syz [ 3210.328461][T25766] usb 1-1: Manufacturer: syz [ 3210.333943][T25766] usb 1-1: SerialNumber: syz [ 3210.345751][T25766] usb 1-1: config 0 descriptor?? [ 3210.351484][ T478] RSP: 0018:ffffc900035b6780 EFLAGS: 00010202 [ 3210.365462][ T478] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 3210.373898][ T478] RDX: 0000000000000000 RSI: ffffc900035b68a0 RDI: ffff888061047b68 [ 3210.383360][ T1305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3210.391251][ T478] RBP: ffffc900035b6998 R08: 0000000000000000 R09: 0000000000000000 [ 3210.405380][ T478] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88804a689300 [ 3210.415864][ T478] R13: ffff88804a689030 R14: 1ffff110094d1283 R15: 1ffff920006b6cf8 [ 3210.424658][ T478] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3210.434138][ T478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3210.442545][ T478] CR2: 00005555751f7808 CR3: 000000001aa80000 CR4: 00000000003506e0 [ 3210.450976][ T478] Kernel panic - not syncing: Fatal exception [ 3210.457639][ T478] Kernel Offset: disabled [ 3210.462244][ T478] Rebooting in 86400 seconds..