last executing test programs: 9m42.454749984s ago: executing program 2 (id=140): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 9m42.238826134s ago: executing program 2 (id=142): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) 9m41.956706105s ago: executing program 2 (id=145): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m40.767708469s ago: executing program 2 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_rdma(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x20000, 0x0) 9m40.448548139s ago: executing program 2 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 9m39.177203067s ago: executing program 2 (id=171): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$kcm(0x2d, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)="88", 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 9m38.04903121s ago: executing program 32 (id=171): pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$kcm(0x2d, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)="88", 0x1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x4) 6m0.895391015s ago: executing program 3 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4804, 0x5}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6}, 0x10) 5m55.511316559s ago: executing program 3 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d11, &(0x7f00000000c0)=0x53) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/210, 0xd2, 0x4f) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) poll(&(0x7f0000000140)=[{r4, 0x610}], 0x1, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) 5m50.095362683s ago: executing program 3 (id=945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a40)=@newtaction={0x7a0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [{0x78c, 0x1, [@m_ipt={0x788, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x75d, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x7a0}}, 0x4000000) read$alg(r3, &(0x7f0000000a00)=""/4087, 0xff7) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x181440) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf256c00000008000300", @ANYRESDEC=r1, @ANYBLOB="08009f000600000008002600a809000f9561d0a1dd3980"], 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) write$UHID_INPUT(r5, &(0x7f0000000580)={0x8, {"e2ae152e3e2b2aa40eea1b3abbfa95f4e020acc778eb7d7cd4ad28813617ecfd399db1963024605291c7016fcaff306559a749cd5c8336d595c7943fc9d0507133290a97e8da6bc456ecabfc70b2415e17f4dbbb5f8d47fe92eef54465dc57ea2a81f98826a4dfcce4aa0e0f831b77396c9ea345d4c85b9c6cadb94b5c3f84e0d3d31208d03f98ed16ebb0a3065a992470ade82a8c57f3f1e4a5272ad4a179c1e20e96a6dc6cdcd3d4ef6da67a9e0ddfc5a8a70ec2fb28299adf5d336e9808bd9411e697616eba40c20870646e31f70a7871f4be33f0223736f03b9b627da3b377039971ba4a6d16fa50a955981745f31764fa70e42a290bc1d00b037ed5ac930eb0e72d5aca4af8c5a4db16a8ab9feb4e78e346f46f204d67f3b4ce67415442e29c04eeb4a09d2f6ed33949c074a2b12ebb645b7d686116d1e36c4873a6e0d642c741ab14d52c7b42ef3039829126ef139e44a445a041a8a1d61cd436bee0dabdf11c91c025e9f4d769e22c3ddaf21f2105e9a7cb99e6e87c81cc87c3db9f4abf3fba0147c4cae442c9887d3e96505d735d57e0fae1ba63e1dc1a7d68b7a32bb661b241f2902b08483b210ab7b4ca517ef2476945297129a6125cebc9311163c1367b9467cd432687e8b48486da7b3f0971477bc564ed0350613cfa3878f2f7f4d43f2b124b3fd2c79e64dfd79f6e5bad46a7a5c866f256883773e4acbeb93a7903d3e31a7d523232a8defdf6c176b1058f3f7adb2de1abe30ed24962a79b0e63c910067b7d4a5884ac19ebbaf3b42627597a685fb9d2170fbf46aa14989b6a53d26fdd0412b8d258cf85f7062260377988d3cf895ea5c26c64aef683a5b4099e29cc82d070454f93bc11d7cfccb3c1fa6ab9947c3ea2bea2ffea19442ad72cbcd29c19cb2bec78b07ef19786f341f8f1090c16857e9960abd709524d8e0884867df53fba65a5104f8dd88a2faa16bb20911d12ce3a8fbef63e7f87e70f9ff4d3777a6e0d24f556d4b521e006416a7e01647c4f5dc269b0d3413411c40bba4e121b7917bb5d5103ee00054354d29d62a5dcffcc82053c2377eec938805061516943ec8412a439c645f5dded82b99d7fe3201195de43a7ed128fdc4d95fe7e0ac3ec26a0e9966da4b35373417b5ab1147f578844f79db48149c0477c685ea72b29c1cb35b3ccd0cd67b815dfc15a8bb3ce4e4253072e1d79a364d204ccb3b66ee760b62d99d4566b67487b56a1229003818170c0f1f1beac43478b7919230f965dff586d35196d1092dc49aa8ee6db06e7212e1a812c42bd5c1dc6643e67ca84bf33b421ebb1f9dc4fdc108be4747e1b22ca223be0fc0e46e76b610f491084d3ad3c23dd38b82f6628d96abc61da2ec0fabd1f4507f40d72d8a13ce5bba68b2abebc66c31327a6ac7a5cbe72a714682eac69fb74f876c033e0097e6efbf7fe53c4581ef15dae0e855e99f980ed4aa2df44b1ad31ad84cee0d8a2e0a71e941d5fb55eb5796322692ed5c7146227113d877b0a68eb05d69abd05f04dacb96d51a6e8bf829a8f366f7b1fad9f1e1cd7b95472d166939ba5235805db9cc29d7b9405b6a2315dd15a6150218261c9c54265bbfe26db925a7b7f397a3992defe3d30f4cd9288eb3d3b4943595c33456ccd4937f0d868b82708317cd0d8865e4229512fd957ff322d39ff9b8ce114cc869e9e430d92023d8091746640fdd29430987e1c45ef4df3ab264ca103f94330dbfcd27f3d66d19f1bda77d16612f2afe63906eb9297d6ea71f46dbdf0c939c3d9fd9e7c33cad3eb41ad87528383af0c01af99eeaca2a9b6d99e870fc0b993ae1811b31ee5e16aec2cec6d04c3de20e18f8c3f7557be1fbb56a3daa395fa82e7e989121fc432ae123bcdd33d6f09d9d86ee26050a3f422234956da89be0b34a17e56d0f782e78c05a0cc59e66ae8e6206e7d2923985e557837d56b694ee3c81f7b3bfa7725c83810a0784773dffdd0f7c8444c28a725c7c428c81f338ded7a0d38b051b04b55d67f89f2bc9203a0d99ba414f972f8bb0d1b84f8d59935e6b747b8cedc1f7e1caa06614bb2a3ff5fe5e1803d0d86a4c3c09b11d6fddbafbb5474b6c19c009db5b03ee46ad38fe98e725c53eb93307f96d407b989eb09adafbd8096c240ee0dc1b15816b3b1c9dbb72d782ba3815dafe8ecbf9c3b8ad62e940f93807fcbbbb9cedd8ab3e8e56f7b22c8dcbf9de5605b08bfa2a55b5395de2e9b82bbbe4c3a32760327af6415b344d2e03e8d75b4d0db2bf5c23ae27a4e9a2e7c80edd6100dba9f691b990989bb923d792f997daa954fa0d9e9b3ae51b8806469d46b105d6dd4459003fc05b5440c2f8ae7b3999bb0d6db419b330aa71c3bf460f70806ccc8320f10cc9bc2862524db99347b8a56396fcef065b5f86edc40a3bef5735e696b435e4ea8c0a851da74d2a855c24dd393c2af797c61c29bd4266028ab24e5f80cad80551b1691107714419953b1e7b5699226a1ee7a2dad2ceb1dd4df2a9d228308e74efb0fea05bbe1330dffaae7f219450cf4df92164e3eabef84b416c9e78ef0b2266c5010a2cad401283f2cff9c11ab06c289b0ff8ae968be52a4d9911d22c72ca8da7d1c2cb9a7d0dd82bcc2aadfd10961741b1d22067c7e95b93b2cf2e89bae173770c235fed2493a7d3086c5bcaf645642ba21194a7425eb92414d9b9077ba8d05d620b31597a045f960aa86b52bf400e7a7d7a94a3f8e177470c5b85fe284ee7d690747172614ccced9685670bd55335a23764b4530587c188b4b81d921fcd390320fdfd8c427c32d739c8201c999d7867d2c11a0bd3cf12490bcc4f95cfac01af4a8367bd2f658f0f0700da03174447ee436c49e648f4ed103039700be68a52ae036c0b1ccc5b879f4230f1a3f1503d2f3e5843ba2997bc6ce86077036f013552a45ba4e9e91d004f124508b52b14d38434eec51862876de01c8ff3ac75b45a6f4838e7378db1ba68f6cc19db99b3361646825da6965507445fcb0b8a182627828cce6fdbdaaf6c05cbd89a2d0886db373fa996492e1ddbbfdfc417f8b8dee092a9f90946c3d02aa2f26adf799365d336029b59144322301b8ade4b92c2f1bb04bbc8bed1c1fcda4e92596948bd8472860e355e145a395b9a5ea76100f2670cd63ad31de82a988169535e1d07afae5863e83c85f3d2efb2e3ed00957475a9cd48c33711ecf4823a5be2b6d9bd49d96f3249cc5716f33ed60f6bd3940af4141e0406a5ce879fec3c95b5a3d07ceaece5b234e1201548abb2cd75d8e53798dbec37b45bff80e4bef3d13a11ac920af6c7417c619e0afc63cf4e9ea30fd0ba7cc64c953c500921f7b28c6b63191606849bfd3a1af7a914dbb4544b2f0c9840796434c6923070e7665fa5b3716f6c59562f48e770b92ed415f0d8a444c7a54f6f4bec415c56d66ba2109ba990ded854d169f08b589f953bfe1db3b4d4975234111da508de35d6121b5e0c3638cb5c38da436cd6ec3086cb2d908d0db0d3242a210b7eb95e1272b8021c63f6aa7257466682aee7cf7a5046d3bc96331c6588b08ffbca7f2995f0082275cd8c585354b474143ac357eb0ace6bc946a768b4f20c31bfffb6cb3ec863b01c7c94d2df695e39b64568cb08c41f6174e15dd335e04a23f006a0327d72817b82ec85a5e58ec51143cf08de57d35ff707ffad89b76c4e0ca611d4d41ebd607b72d65f78a61725025b09b8ef12a90e1f17f2b5eb7f0fa059329f594537c3f49c6af6853cc2fdf88da8a28d0a5c6a1893c338162a84ce6d8eb8c3949c5a923be455132dbcf9e2ca12e370cb1664b96dc9922d2b9d3d448caf40a23972801d46f667148fdea021057a3754276684cc3b295fadd731b2e382505cc03b46b80b2637336c65a7ddebab05683b284fa7408083c1ec281e933b2637093ca7f1164e306186bef11295f8ee83b60e65d83dd922483e009bd7eb16566f78d0037239bd07a8ba6ba010a162867ec7ce3504ef98f1bf5a7b13f5d3d1c06b0ff11876b3236c90cad84f7aeae59e9287e84326365062446f6fed2b1a5b28926a06f61abb4c659a52eab687370145ad4effde2bfb11ec468aeea9e373aa3b330661bf7766b2954ab4dd96966869fc961b7780895a706fb769e0cf7a746bd9d4c55cfe8c9b31190c74fd59c2cc8fc534d03535329747060b32f3b62d9db46f906f88bd2b2f96b110460d8044b333d9189c8acd211ba4e8fb4aa2439c76f09a79aefdf667e76c328adf132f369e0c39a1994430e4659c21270fd7a12d5d1d5ae6e1b9877f1602e2912f6b8d06e6f80c903784854786524c5e254b939864ca09fc28bedc9bbe5ff470547439673423e099cc5fbc33f8f4da9825c81c7334db8381fd712c5777979b0e235115865d2a385319e7c092d6fa0729370de4a4f39b659a5d0701d9264e72e801fbb8308fcedf4cdd2d5ed12589b83ed10a437b89333305acf5bb1ce46ed208c31fb1795cd1d3f1886f3cb83b86140a3c02a0dc86a28decacbbaa0e0bdbfbf293ef86b4f9397d2d93ce2b465feb38110c2277012f0a9c7b46b51953e007b278d1826c6c44b2b6caaa1867dfd42da5c9130be90f44639d1bb7f5cff4e5104153e1dfef168a6f7e331c2c0842c1f00ff5b2f54da4050b9af2753dd08b869170763a2d949b0027304e67bccffc2873cc84ce4b08ba5b73a75d4261071554cd48a362a51a33b97a44414040255167e989542e2bb5ec4ab6744d59f796744f2f2c0df49b7ffa6edfd0fbcd15b0c398082b6cfa4b7fb8b18361319fc1d8e6e1075b8de828108aade21f2b98b2df4fb24896b0e89dc3a356d62e581ce0af988e2d22729a711af4de0fb1fac3e20a9aa5e62e2c73e715955b1d4cd3f2a0e5efeba816dee27b8d9bc2154515c4efe1e05e6e105b62711a911011dbe72499e8d692c5758b0bb2a9be1274b7eb6b24d10465dc5e3d677b75e0068ff5bd2c598fde8269685aa6b992417930f9b883388f2a7554c7ab34b15a5372643433901aa8a383db0c74f30cb80a33ca406b27aa6077c29caca379f05b225f6fb7afc714e7ef82e99412825e8fcbfe248c33d80f9212ba4db89355a631813443e3f34f36a80ccd9a6468674d6253e884681d919aec0c0060563be595b8dd07b9c6c2a55494d6c68aa94ac8774266a0ce1398c625096f392d5570c97bc08544a7ee47da755e8dafa6c8eb35120507d7476ffaa7d914a88d68c5584ab6f44fc06191bf6be039823240e4418d997d72cf836056cbb333bce9e2d14decd720712727afa21cc6c9183ed15622471ab19a5fef5ea904836b0e605af456855f2e22f1457a54e12631c57347e5115d18f4c2c1da718e2c6911cb549673a46d578618f3f71d96743d468b0661576b8acb66439cff81d801bb61088ecbfc08a77a1de714c0459710310e507f85157e35e65cafe5062a51b82ef4bc0d28a2a71e7b5dd42f9b403439a8048732fba1aa7334cccbf0a287001f47897a0ccd90175da4f1675f7376ed5b6216729d80e680697a30b8f447f82e8f6540cd5a930f6785d121adda482b55f9dd3a6e2c81d0c825e3bf79ff98f92e980fd6b66728fae706eb0e4fce5b94c9f24e5d63d7b966c9e3caa1532fa15d5ec52cb3c18a5dadde8cfd523ef620c50028a4aa24c43570b9760d51ce6346434854fc167b60c5923eb01ace18708e477b89b41bf93b82cd9ed7a0440c32a3403e36ebc0e7ab9174690872be4fe00ebe642f0258fd737b75561feae3583e391cd286662da4f916ccb9dca56c866568d6b661ea91f3de045707cb5128305bc", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x554}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 5m46.875442199s ago: executing program 3 (id=949): mkdir(&(0x7f0000000040)='./file0\x00', 0x110) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m45.24813261s ago: executing program 3 (id=952): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x4080) r1 = syz_io_uring_setup(0x5fe, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4881, 0x100, 0x3, 0x1d, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2100}) io_uring_enter(r2, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 5m43.284555239s ago: executing program 3 (id=954): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 5m28.204719428s ago: executing program 33 (id=954): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c0100000000090400"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 14.79001614s ago: executing program 0 (id=1836): openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000040)={0x7}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 14.602055984s ago: executing program 0 (id=1840): r0 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x4000}, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x2afd, 0x308b, 0xc, 0x0, 0x20) 14.227395087s ago: executing program 0 (id=1843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r1, 0x9, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x45) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.472188647s ago: executing program 0 (id=1849): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0xbd3f7ec244bb7b80}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 11.262129257s ago: executing program 5 (id=1850): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 9.925309538s ago: executing program 0 (id=1852): accept(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20) 8.018133992s ago: executing program 4 (id=1855): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 7.023153095s ago: executing program 1 (id=1856): accept(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20) 6.965017648s ago: executing program 4 (id=1857): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) unshare(0x2c020400) 6.903583438s ago: executing program 6 (id=1858): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0xc000400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 5.46217504s ago: executing program 5 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 5.384659469s ago: executing program 6 (id=1860): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) 5.216301513s ago: executing program 1 (id=1861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e00000010800020000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 5.119994684s ago: executing program 4 (id=1862): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000010280)={@multicast2, @remote}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000580)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x80f9, 0x85}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000100)=""/231, &(0x7f0000000200)=0xe7) 3.82183699s ago: executing program 4 (id=1863): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x100) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) read$midi(r0, &(0x7f00000015c0)=""/81, 0x51) 3.802992933s ago: executing program 6 (id=1864): sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 3.68375843s ago: executing program 1 (id=1865): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.60144058s ago: executing program 5 (id=1866): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x8000) 3.555159871s ago: executing program 6 (id=1867): r0 = socket$inet6(0xa, 0x80002, 0x88) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x2, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 3.433582551s ago: executing program 4 (id=1868): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r1, 0x9, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x45) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.209389619s ago: executing program 5 (id=1869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000006c0)=@gcm_256={{0x304, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", '\x00', "ffa64e60d883ba99"}, 0x38) 2.373994139s ago: executing program 5 (id=1870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}]}, 0x3c}}, 0x4000010) 2.322430453s ago: executing program 6 (id=1871): accept(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000300)=0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f00000004c0), &(0x7f0000000400)=r3}, 0x20) 1.244414514s ago: executing program 1 (id=1872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.243119075s ago: executing program 6 (id=1873): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) r1 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 974.954437ms ago: executing program 5 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r3, 0x5452, 0x0) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) mount$tmpfs(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2818000, &(0x7f00000001c0)={[{@grpquota_inode_hardlimit}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) unshare(0x22020400) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r6}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendto$inet_nvme_icreq_pdu(r7, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 973.804271ms ago: executing program 4 (id=1875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 893.579007ms ago: executing program 1 (id=1876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) capset(&(0x7f0000000040)={0x19980330}, 0x0) r1 = syz_open_dev$sg(0x0, 0xa, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002140)=ANY=[@ANYBLOB="6400000000010104000000000000000202000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200000000000800"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002019d"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x40040) 6.184771ms ago: executing program 0 (id=1877): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r1, 0x0, &(0x7f0000d56000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) 0s ago: executing program 1 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a2a44000000001010902440081010010000904005d1202060000052406000005242400000d240f010000000000000000000905810340000000fe0905820260000000000905030208"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a400)=""/102384, 0x18ff0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) kernel console output (not intermixed with test programs): 180.067006][ T5875] usb 5-1: config 0 interface 184 has no altsetting 0 [ 180.072462][ T5875] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.072493][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.072513][ T5875] usb 5-1: Product: syz [ 180.072525][ T5875] usb 5-1: Manufacturer: syz [ 180.072547][ T5875] usb 5-1: SerialNumber: syz [ 180.085515][ T5875] usb 5-1: config 0 descriptor?? [ 180.125895][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 180.712913][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 180.712946][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.550926][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.550960][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.550981][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.551323][ T5875] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.617458][ T5875] usb 5-1: USB disconnect, device number 9 [ 182.482756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 183.738541][ T7362] overlayfs: workdir and upperdir must reside under the same mount [ 184.472337][ T7380] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 184.472369][ T7380] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 184.476207][ T7380] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 185.098476][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.252917][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 185.255861][ T5875] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.255897][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 185.255931][ T5875] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 185.255955][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.309170][ T5875] usb 5-1: config 0 descriptor?? [ 185.775247][ T5875] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 185.775315][ T5875] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 185.775341][ T5875] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 185.775366][ T5875] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 185.775391][ T5875] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 185.840053][ T5875] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 185.976238][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.976792][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.087024][ T5875] usb 5-1: USB disconnect, device number 10 [ 187.123813][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 187.278466][ T5875] usb 5-1: config 0 has no interfaces? [ 187.282830][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.282863][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.282884][ T5875] usb 5-1: Product: syz [ 187.282899][ T5875] usb 5-1: Manufacturer: syz [ 187.282913][ T5875] usb 5-1: SerialNumber: syz [ 187.373103][ T5875] usb 5-1: config 0 descriptor?? [ 187.608624][ T5867] usb 5-1: USB disconnect, device number 11 [ 188.228817][ T7449] input: syz0 as /devices/virtual/input/input15 [ 188.272927][ T5942] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 188.436357][ T5942] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.436378][ T5942] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.436390][ T5942] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.436420][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.436437][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 188.436452][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.436477][ T5942] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.436490][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.487428][ T5942] usb 6-1: config 0 descriptor?? [ 188.499915][ T7446] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 188.780452][ T5942] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.968384][ T5867] usb 6-1: USB disconnect, device number 3 [ 189.004018][ T5867] usblp0: removed [ 189.571014][ T7459] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 190.205954][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.278278][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.517400][ T7487] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.652893][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 191.653266][ T5942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 191.807932][ T5942] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.807972][ T5942] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.808015][ T5942] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.808038][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.824334][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 191.843338][ T9] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 191.843368][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.843386][ T9] usb 4-1: Product: syz [ 191.843399][ T9] usb 4-1: Manufacturer: syz [ 191.843412][ T9] usb 4-1: SerialNumber: syz [ 191.873333][ T7486] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 191.880641][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.894434][ T9] usb 4-1: config 0 descriptor?? [ 192.169117][ T9] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 010 [ 192.300259][ T7497] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 192.300282][ T7497] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.546'. [ 192.702146][ T5942] usb 5-1: USB disconnect, device number 12 [ 192.894144][ T7511] input: syz0 as /devices/virtual/input/input16 [ 193.156938][ T9] usb 4-1: USB disconnect, device number 10 [ 193.743884][ T5942] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 193.902857][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 193.910022][ T5942] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.910052][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.910071][ T5942] usb 5-1: config 0 has no interface number 0 [ 193.910119][ T5942] usb 5-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 193.914420][ T5942] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.914451][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.914478][ T5942] usb 5-1: Product: syz [ 193.914491][ T5942] usb 5-1: Manufacturer: syz [ 193.914504][ T5942] usb 5-1: SerialNumber: syz [ 193.928474][ T5942] usb 5-1: config 0 descriptor?? [ 193.969061][ T5942] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 193.969577][ T5942] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 194.369764][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.369846][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612242][ T7520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.968800][ T5992] usb 5-1: USB disconnect, device number 13 [ 195.662896][ T5992] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 195.812909][ T5992] usb 4-1: Using ep0 maxpacket: 16 [ 195.815456][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.815488][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.815511][ T5992] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.815555][ T5992] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.815579][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.821682][ T5992] usb 4-1: config 0 descriptor?? [ 196.368134][ T5992] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 196.425172][ T5992] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000D/input/input17 [ 196.511484][ T5992] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 196.624683][ T5992] usb 4-1: USB disconnect, device number 11 [ 197.023926][ T7558] fido_id[7558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.772833][ T994] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.923047][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 197.925597][ T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.928838][ T994] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.928869][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.928890][ T994] usb 1-1: Product: syz [ 197.928904][ T994] usb 1-1: Manufacturer: syz [ 197.928919][ T994] usb 1-1: SerialNumber: syz [ 198.022635][ T994] usb 1-1: config 0 descriptor?? [ 198.035039][ T994] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.035074][ T994] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 198.211238][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 198.211328][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 198.651442][ T994] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 199.116732][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.578'. [ 199.481738][ T994] em28xx 1-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 199.481772][ T994] em28xx 1-1:0.0: failed to read eeprom (err=-5) [ 199.481822][ T994] em28xx 1-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 199.592812][ T994] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 199.592846][ T994] em28xx 1-1:0.0: dvb set to bulk mode. [ 199.596630][ T5953] em28xx 1-1:0.0: Binding DVB extension [ 199.743315][ T994] usb 1-1: USB disconnect, device number 9 [ 199.749266][ T994] em28xx 1-1:0.0: Disconnecting em28xx [ 200.006089][ T5953] em28xx 1-1:0.0: Registering input extension [ 200.025353][ T994] em28xx 1-1:0.0: Closing input extension [ 200.088004][ T994] em28xx 1-1:0.0: Freeing device [ 200.812887][ T994] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.995600][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.995662][ T994] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.995687][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.007123][ T994] usb 4-1: config 0 descriptor?? [ 201.035309][ T994] pwc: Askey VC010 type 2 USB webcam detected. [ 201.420391][ T7628] qrtr: Invalid version 0 [ 201.425531][ T994] pwc: recv_control_msg error -32 req 02 val 2b00 [ 201.427305][ T994] pwc: recv_control_msg error -32 req 02 val 2700 [ 201.428539][ T994] pwc: recv_control_msg error -32 req 02 val 2c00 [ 201.429776][ T994] pwc: recv_control_msg error -32 req 04 val 1000 [ 201.432177][ T994] pwc: recv_control_msg error -32 req 04 val 1300 [ 201.598853][ T994] pwc: recv_control_msg error -32 req 04 val 1400 [ 201.804113][ T994] pwc: recv_control_msg error -71 req 02 val 2100 [ 201.804688][ T994] pwc: recv_control_msg error -71 req 04 val 1500 [ 201.805235][ T994] pwc: recv_control_msg error -71 req 02 val 2500 [ 201.805752][ T994] pwc: recv_control_msg error -71 req 02 val 2400 [ 201.806270][ T994] pwc: recv_control_msg error -71 req 02 val 2600 [ 201.806902][ T994] pwc: recv_control_msg error -71 req 02 val 2900 [ 201.807409][ T994] pwc: recv_control_msg error -71 req 02 val 2800 [ 201.808140][ T994] pwc: recv_control_msg error -71 req 04 val 1100 [ 201.808637][ T994] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.940284][ T994] pwc: Registered as video103. [ 201.966219][ T994] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 201.969950][ T994] usb 4-1: USB disconnect, device number 12 [ 202.332844][ T5942] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.484152][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 202.486789][ T5942] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 202.492418][ T5942] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 202.492461][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.492484][ T5942] usb 6-1: Product: syz [ 202.492497][ T5942] usb 6-1: Manufacturer: syz [ 202.492511][ T5942] usb 6-1: SerialNumber: syz [ 202.547814][ T5942] usb 6-1: config 0 descriptor?? [ 202.614895][ T5942] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 202.614967][ T5942] usb 6-1: setting power ON [ 202.614987][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 202.685326][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.685954][ T5942] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 202.685994][ T5942] usb 6-1: media controller created [ 202.727425][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.769070][ T7631] dvb-usb: bulk message failed: -22 (3/0) [ 202.802888][ T5942] usb 6-1: selecting invalid altsetting 6 [ 202.802913][ T5942] usb 6-1: digital interface selection failed (-22) [ 202.802926][ T5942] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 202.803154][ T7638] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 202.806047][ T5942] usb 6-1: setting power OFF [ 202.806164][ T5942] dvb-usb: bulk message failed: -22 (2/0) [ 202.806178][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 202.806189][ T5942] (NULL device *): no alternate interface [ 203.049189][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 203.070619][ T5942] usb 6-1: USB disconnect, device number 4 [ 203.616448][ T7656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.972863][ T5942] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.127298][ T5942] usb 5-1: Using ep0 maxpacket: 16 [ 204.129545][ T5942] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.129571][ T5942] usb 5-1: config 0 has no interfaces? [ 204.153729][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 204.166087][ T5942] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 204.166120][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.166141][ T5942] usb 5-1: Product: syz [ 204.166155][ T5942] usb 5-1: Manufacturer: syz [ 204.166170][ T5942] usb 5-1: SerialNumber: syz [ 204.175252][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 204.175671][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 204.177337][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 204.177514][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 204.179768][ T5942] usb 5-1: config 0 descriptor?? [ 204.802930][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.952830][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 204.956057][ T5867] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 204.956103][ T5867] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 204.956146][ T5867] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 204.956174][ T5867] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 204.956202][ T5867] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.959383][ T5867] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 204.959413][ T5867] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 204.959436][ T5867] usb 1-1: Product: syz [ 204.959451][ T5867] usb 1-1: Manufacturer: syz [ 204.959466][ T5867] usb 1-1: SerialNumber: syz [ 205.058357][ T5867] usb 1-1: config 0 descriptor?? [ 205.071738][ T5867] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 205.095630][ T5867] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.276852][ T5867] usb 1-1: USB disconnect, device number 10 [ 205.328507][ T5867] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 205.539036][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 206.736038][ T5867] usb 5-1: USB disconnect, device number 14 [ 206.944509][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 207.097502][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 207.111790][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.111810][ T9] usb 4-1: config 0 has no interface number 0 [ 207.124003][ T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 207.124034][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.124052][ T9] usb 4-1: Product: syz [ 207.124065][ T9] usb 4-1: Manufacturer: syz [ 207.124078][ T9] usb 4-1: SerialNumber: syz [ 207.130353][ T9] usb 4-1: config 0 descriptor?? [ 207.149741][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 208.192746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.272754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 208.342761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 210.149508][ T9] gspca_spca1528: reg_r err -71 [ 210.149573][ T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 210.166566][ T9] usb 4-1: USB disconnect, device number 13 [ 211.410353][ T7743] EXT4-fs (loop11): unable to read superblock [ 211.765810][ T7757] vivid-001: disconnect [ 211.802962][ T7733] Bluetooth: hci1: command 0x0406 tx timeout [ 211.803105][ T7733] Bluetooth: hci4: command 0x0406 tx timeout [ 211.803215][ T7733] Bluetooth: hci3: command 0x0406 tx timeout [ 211.803314][ T7733] Bluetooth: hci0: command 0x0406 tx timeout [ 212.712519][ T7749] vivid-001: reconnect [ 213.342834][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.496208][ T7779] binder: 7778:7779 ioctl c0306201 2000000003c0 returned -14 [ 213.504409][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 213.507486][ T5867] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 213.507511][ T5867] usb 2-1: config 0 has no interface number 0 [ 213.507556][ T5867] usb 2-1: config 0 interface 184 has no altsetting 0 [ 213.509997][ T5867] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.510024][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.510043][ T5867] usb 2-1: Product: syz [ 213.510057][ T5867] usb 2-1: Manufacturer: syz [ 213.510070][ T5867] usb 2-1: SerialNumber: syz [ 213.520314][ T5867] usb 2-1: config 0 descriptor?? [ 214.235544][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 214.235579][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.132926][ T994] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.265172][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 215.265218][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 215.265239][ T5867] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 215.265570][ T5867] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 215.322263][ T994] usb 5-1: Using ep0 maxpacket: 32 [ 215.347677][ T994] usb 5-1: config 0 has no interfaces? [ 215.348080][ T5867] usb 2-1: USB disconnect, device number 8 [ 215.358774][ T994] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 215.358802][ T994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.358821][ T994] usb 5-1: Product: syz [ 215.358834][ T994] usb 5-1: Manufacturer: syz [ 215.358847][ T994] usb 5-1: SerialNumber: syz [ 215.521714][ T994] usb 5-1: config 0 descriptor?? [ 216.071288][ T7815] syz_tun: entered allmulticast mode [ 216.137615][ T7814] syz_tun: left allmulticast mode [ 217.313662][ T7834] binder: BINDER_SET_CONTEXT_MGR already set [ 217.313679][ T7834] binder: 7832:7834 ioctl 4018620d 200000000040 returned -16 [ 217.382443][ T7835] binder_alloc: 7833: binder_alloc_buf size 16777216 failed, no address space [ 217.382559][ T7835] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 217.792944][ T5867] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 217.798675][ T5875] usb 5-1: USB disconnect, device number 15 [ 218.699442][ T5867] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.699475][ T5867] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 218.699495][ T5867] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.699550][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 218.699577][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 218.701928][ T5867] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.701958][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.701978][ T5867] usb 1-1: Product: syz [ 218.701992][ T5867] usb 1-1: Manufacturer: syz [ 218.800289][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 218.800311][ T5867] cdc_wdm 1-1:1.0: skipping garbage [ 218.814806][ T5867] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 218.814828][ T5867] cdc_wdm 1-1:1.0: Unknown control protocol [ 219.937198][ T5867] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 219.981968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.133394][ T7853] netlink: 14 bytes leftover after parsing attributes in process `syz.5.667'. [ 220.189401][ T5867] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 220.189422][ T5867] usb 5-1: config 0 has no interface number 0 [ 220.189450][ T5867] usb 5-1: config 0 interface 41 has no altsetting 0 [ 220.192086][ T5867] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 220.192104][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.192156][ T5867] usb 5-1: Product: syz [ 220.192165][ T5867] usb 5-1: Manufacturer: syz [ 220.192173][ T5867] usb 5-1: SerialNumber: syz [ 220.296488][ T5867] usb 5-1: config 0 descriptor?? [ 220.755781][ T5867] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 220.757160][ T5867] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 220.852414][ T5867] usb 5-1: USB disconnect, device number 16 [ 221.377483][ T994] usb 1-1: USB disconnect, device number 11 [ 222.427880][ T994] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 222.499376][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.677'. [ 222.610274][ T994] usb 4-1: Using ep0 maxpacket: 8 [ 222.616403][ T994] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.616432][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.616455][ T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.616476][ T994] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.616515][ T994] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.616536][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.850766][ T994] usb 4-1: GET_CAPABILITIES returned 0 [ 222.850824][ T994] usbtmc 4-1:16.0: can't read capabilities [ 223.086175][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.092465][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.092555][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.123217][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.125936][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.125988][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126269][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126310][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126348][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126848][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126889][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126927][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.126964][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.127003][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.127248][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.127289][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.239903][ T5860] usb 4-1: USB disconnect, device number 14 [ 223.562230][ T7907] netem: incorrect gi model size [ 223.562267][ T7907] netem: change failed [ 224.232741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 224.787242][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ae94c00: rx timeout, send abort [ 224.812899][ T994] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 225.032108][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 225.032267][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 225.153445][ T994] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 225.153516][ T994] usb 6-1: config 0 has no interface number 0 [ 225.154023][ T994] usb 6-1: config 0 interface 41 has no altsetting 0 [ 225.289231][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ae94c00: abort rx timeout. Force session deactivation [ 225.593207][ T994] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 225.593242][ T994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.593263][ T994] usb 6-1: Product: syz [ 225.593278][ T994] usb 6-1: Manufacturer: syz [ 225.593293][ T994] usb 6-1: SerialNumber: syz [ 225.667172][ T994] usb 6-1: config 0 descriptor?? [ 226.560075][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c578400: rx timeout, send abort [ 226.740042][ T994] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 227.623803][ T5953] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 227.826110][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 228.139147][ T994] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 228.139178][ T994] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 228.139483][ T994] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 228.199454][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.199516][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.199545][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 228.199567][ T5953] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 228.199591][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.278693][ T5953] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.278724][ T5953] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.278745][ T5953] usb 4-1: Manufacturer: syz [ 228.322833][ T5953] usb 4-1: config 0 descriptor?? [ 228.328699][ T994] usb 6-1: USB disconnect, device number 5 [ 228.694217][ T5953] rc_core: IR keymap rc-hauppauge not found [ 228.694232][ T5953] Registered IR keymap rc-empty [ 228.694620][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.713132][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.739010][ T5953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 228.781863][ T5953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 228.802639][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.835859][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.863083][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.894841][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.915127][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.946367][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.963089][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 228.983355][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.004128][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.033325][ T5953] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 229.098191][ T5953] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 229.098209][ T5953] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 229.118292][ T5953] usb 4-1: USB disconnect, device number 15 [ 230.663007][ T994] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 231.066500][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 231.115248][ T994] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.115278][ T994] usb 6-1: config 0 has no interface number 0 [ 231.115324][ T994] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 231.115349][ T994] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 231.115388][ T994] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.115411][ T994] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.751587][ T994] usb 6-1: config 0 descriptor?? [ 231.758876][ T7979] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.795652][ T994] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 231.924502][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 231.932328][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.953813][ T146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.954338][ T146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.954378][ T146] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.993681][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 232.018791][ T5860] usb 6-1: USB disconnect, device number 6 [ 232.438720][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 232.454783][ T809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 232.544809][ T8002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.612930][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 232.615567][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.615602][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.615643][ T809] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 232.615749][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.678501][ T809] usb 4-1: config 0 descriptor?? [ 232.703351][ T809] hub 4-1:0.0: USB hub found [ 232.737717][ T8002] veth0_to_bond: entered promiscuous mode [ 232.889155][ T8002] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 232.915907][ T809] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 233.163159][ T809] usbhid 4-1:0.0: can't add hid device: -71 [ 233.163307][ T809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 233.214626][ T809] usb 4-1: USB disconnect, device number 16 [ 238.547131][ C1] sd 0:0:1:0: [sda] tag#2575 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 238.547196][ C1] sd 0:0:1:0: [sda] tag#2575 CDB: Read(6) 08 00 00 00 00 00 [ 238.547538][ C1] sd 0:0:1:0: [sda] tag#2576 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 238.547588][ C1] sd 0:0:1:0: [sda] tag#2576 CDB: Read(6) 08 00 00 00 00 00 [ 247.382937][ T5867] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 247.720205][ T5867] usb 6-1: Using ep0 maxpacket: 32 [ 248.393241][ T5867] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 248.393274][ T5867] usb 6-1: config 0 has no interface number 0 [ 248.393347][ T5867] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 248.401220][ T5867] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 248.401252][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.401274][ T5867] usb 6-1: Product: syz [ 248.401289][ T5867] usb 6-1: Manufacturer: syz [ 248.401305][ T5867] usb 6-1: SerialNumber: syz [ 248.508044][ T5867] usb 6-1: config 0 descriptor?? [ 248.508972][ T8140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.525854][ T5110] Bluetooth: hci2: command 0x0406 tx timeout [ 248.754217][ T8140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.372934][ T5867] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 251.045545][ T8173] syz_tun: entered allmulticast mode [ 251.691814][ T5867] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.691906][ T5867] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 251.694712][ T5867] asix 6-1:0.188: probe with driver asix failed with error -71 [ 252.123397][ T5867] usb 6-1: USB disconnect, device number 7 [ 252.490299][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 252.778782][ T8191] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 252.876763][ T8191] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 252.877295][ T8191] overlayfs: failed to look up (tracing) for ino (-66) [ 253.312729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 253.392815][ T5860] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 254.525112][ T5860] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 254.525141][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.525152][ T5860] usb 5-1: Product: syz [ 254.525161][ T5860] usb 5-1: Manufacturer: syz [ 254.525169][ T5860] usb 5-1: SerialNumber: syz [ 254.558139][ T5860] usb 5-1: config 0 descriptor?? [ 254.842926][ T5860] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.815403][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816321][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.431170][ T5860] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 256.546193][ T5860] usb 5-1: USB disconnect, device number 17 [ 259.471055][ T5860] IPVS: starting estimator thread 0... [ 259.552908][ T8229] IPVS: using max 7 ests per chain, 16800 per kthread [ 262.742715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 264.451855][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.032343][ T8274] netlink: 'syz.3.793': attribute type 10 has an invalid length. [ 265.407205][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.492705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 266.602727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 266.668545][ T8274] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.886481][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.796'. [ 267.002356][ T8287] netlink: 'syz.3.797': attribute type 39 has an invalid length. [ 269.460977][ T8300] syzkaller0: entered promiscuous mode [ 269.460995][ T8300] syzkaller0: entered allmulticast mode [ 274.822834][ T5860] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 274.992790][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 274.995299][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 274.995332][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.995367][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.995393][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.995435][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.995457][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.844787][ T5860] usb 2-1: usb_control_msg returned -32 [ 275.844840][ T5860] usbtmc 2-1:16.0: can't read capabilities [ 275.923434][ T5860] usb 2-1: USB disconnect, device number 9 [ 276.061615][ T8361] lo: entered allmulticast mode [ 276.078717][ T8360] lo: left allmulticast mode [ 277.184573][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 277.816796][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 277.819207][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.819238][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.819277][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 277.819300][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.545383][ T9] usb 5-1: config 0 descriptor?? [ 278.557056][ T9] hub 5-1:0.0: USB hub found [ 278.772211][ T9] hub 5-1:0.0: 1 port detected [ 279.264429][ T5860] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 280.112823][ T9] hub 5-1:0.0: activate --> -90 [ 280.132856][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.132948][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 280.132973][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 280.132999][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 148, setting to 64 [ 280.133023][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.247920][ T5860] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 280.247954][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 280.247974][ T5860] usb 2-1: Product: syz [ 280.247988][ T5860] usb 2-1: Manufacturer: syz [ 280.248003][ T5860] usb 2-1: SerialNumber: syz [ 280.294137][ T5860] usb 2-1: config 0 descriptor?? [ 280.302940][ T8384] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 280.753099][ T5992] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 280.753814][ T5992] usb 5-1: USB disconnect, device number 18 [ 282.013260][ T5860] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 282.013300][ T5860] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 282.086521][ T5860] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 282.086548][ T5860] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 282.086567][ T5860] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 283.141360][ T5860] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 283.141675][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 283.141906][ C1] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 283.142002][ T5860] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 283.142573][ T5860] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 283.975930][ T9] usb 2-1: USB disconnect, device number 10 [ 287.192708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 290.010601][ T8457] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 293.942916][ T8476] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 296.357866][ T8495] qrtr: Invalid version 0 [ 298.212028][ T8506] cgroup: Unknown subsys name 'appraise' [ 302.314808][ T8517] syzkaller0: entered promiscuous mode [ 302.314837][ T8517] syzkaller0: entered allmulticast mode [ 302.345749][ T8519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 310.319454][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.879'. [ 311.545316][ T6215] udevd[6215]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 314.202810][ T5992] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 315.458859][ T5992] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.458893][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.458913][ T5992] usb 5-1: Product: syz [ 315.458928][ T5992] usb 5-1: Manufacturer: syz [ 315.458943][ T5992] usb 5-1: SerialNumber: syz [ 315.521317][ T5992] usb 5-1: config 0 descriptor?? [ 316.229195][ T5992] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.384024][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385989][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.556167][ T8639] kvm: kvm [8637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xcf3a [ 317.610588][ T8639] kvm: kvm [8637]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000e5c0 [ 318.828871][ T5992] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 318.893417][ T5992] usb 5-1: USB disconnect, device number 19 [ 320.603404][ T8677] netlink: 'syz.0.903': attribute type 12 has an invalid length. [ 322.337884][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 324.403697][ T8703] sg_write: data in/out 460254/120 bytes for SCSI command 0x0-- guessing data in; [ 324.403697][ T8703] program syz.3.912 not setting count and/or reply_len properly [ 325.316354][ T8701] ceph: No mds server is up or the cluster is laggy [ 325.328431][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 325.329164][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 330.066847][ T8737] kvm: kvm [8734]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffd80000cf00 [ 330.187812][ T8737] kvm: kvm [8734]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 330.187915][ T8737] kvm: kvm [8734]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 330.841791][ T8745] batman_adv: batadv0: Adding interface: dummy0 [ 330.841810][ T8745] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.841843][ T8745] batman_adv: batadv0: Interface activated: dummy0 [ 332.798060][ T8746] batadv0: mtu less than device minimum [ 332.829412][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.838565][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.896798][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.946378][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.950700][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.005302][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.524608][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.542599][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.568291][ T8746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 335.386915][ T8769] block device autoloading is deprecated and will be removed. [ 342.845068][ C0] net_ratelimit: 10 callbacks suppressed [ 342.845091][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.345929][ T8818] program syz.3.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 346.032742][ T5867] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 346.243421][ T5867] usb 4-1: device descriptor read/64, error -71 [ 347.883140][ T5867] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 348.664851][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.945'. [ 355.402888][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 356.849944][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 356.849980][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.853114][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 356.853135][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 356.853147][ T9] usb 4-1: Manufacturer: syz [ 356.907206][ T9] usb 4-1: config 0 descriptor?? [ 356.926683][ T9] igorplugusb 4-1:0.0: incorrect number of endpoints [ 357.133094][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.133739][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.187705][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 358.488941][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.508656][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.130261][ T8878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.138502][ T8878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.334905][ T8914] mmap: syz.0.964 (8914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 369.878944][ T8925] tipc: Enabling of bearer rejected, failed to enable media [ 370.540581][ T8938] syz.4.968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 371.120755][ T8935] erofs (device nbd5): cannot find valid erofs superblock [ 372.199725][ T8872] syz_tun (unregistering): left allmulticast mode [ 372.400550][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.400585][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.401097][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.401127][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.401227][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.401256][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.401293][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.401321][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.973777][ T8956] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 373.541647][ T8958] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 376.685621][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.906827][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.909959][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.914070][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.915110][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.492815][ T994] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 378.690269][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 378.701242][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.702602][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.834783][ T994] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 378.834818][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.834839][ T994] usb 2-1: Product: syz [ 378.834855][ T994] usb 2-1: Manufacturer: syz [ 378.834869][ T994] usb 2-1: SerialNumber: syz [ 379.972946][ T5798] Bluetooth: hci5: command tx timeout [ 381.399599][ T994] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 381.443902][ T994] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 381.851074][ T8966] chnl_net:caif_netlink_parms(): no params data found [ 382.076648][ T5798] Bluetooth: hci5: command tx timeout [ 382.154036][ T994] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 382.154055][ T994] usb 2-1: clock source 0 is not valid, cannot use [ 382.154397][ T994] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 382.154737][ T994] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 382.482140][ T5798] Bluetooth: hci1: unexpected event for opcode 0x080f [ 384.250845][ T5798] Bluetooth: hci5: command tx timeout [ 384.319368][ T994] usb 2-1: USB disconnect, device number 11 [ 386.295301][ T5798] Bluetooth: hci5: command tx timeout [ 386.416676][ T8966] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.493307][ T5860] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 386.562761][ T5798] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 386.571272][ T5798] Bluetooth: hci1: Injecting HCI hardware error event [ 386.572247][ T5798] Bluetooth: hci1: hardware error 0x00 [ 386.629765][ T8966] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.630020][ T8966] bridge_slave_0: entered allmulticast mode [ 386.697724][ T8966] bridge_slave_0: entered promiscuous mode [ 386.725586][ T8966] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.734790][ T8966] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.735036][ T8966] bridge_slave_1: entered allmulticast mode [ 386.794734][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 386.797175][ T5860] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 386.797205][ T5860] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 386.797225][ T5860] usb 6-1: config 179 has no interface number 0 [ 386.797273][ T5860] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 386.797298][ T5860] usb 6-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 386.797342][ T5860] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 386.797363][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.195564][ T8966] bridge_slave_1: entered promiscuous mode [ 387.874284][ T5860] usb 6-1: can't set config #179, error -71 [ 388.050436][ T5860] usb 6-1: USB disconnect, device number 8 [ 388.132264][ T8966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.388014][ T8966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.467353][ T8966] team0: Port device team_slave_0 added [ 389.057939][ T8966] team0: Port device team_slave_1 added [ 390.094562][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 392.033807][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.033826][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.033857][ T8966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.203880][ T8966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.203898][ T8966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.203937][ T8966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.584272][ T5992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 393.829795][ T8966] hsr_slave_0: entered promiscuous mode [ 393.878436][ T8966] hsr_slave_1: entered promiscuous mode [ 393.879473][ T8966] debugfs: 'hsr0' already exists in 'hsr' [ 393.879499][ T8966] Cannot create hsr debugfs directory [ 393.883926][ T5992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.883953][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.887266][ T5992] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 393.887295][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 393.887315][ T5992] usb 6-1: SerialNumber: syz [ 394.274238][ T37] kauditd_printk_skb: 35 callbacks suppressed [ 394.274259][ T37] audit: type=1326 audit(1774860593.880:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.274872][ T37] audit: type=1326 audit(1774860593.890:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.275165][ T37] audit: type=1326 audit(1774860593.890:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.276149][ T37] audit: type=1326 audit(1774860593.890:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.279881][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.996'. [ 394.303848][ T37] audit: type=1326 audit(1774860593.920:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.303958][ T37] audit: type=1326 audit(1774860593.920:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.336263][ T37] audit: type=1326 audit(1774860593.950:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.338332][ T37] audit: type=1326 audit(1774860593.950:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.338381][ T37] audit: type=1326 audit(1774860593.950:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.338421][ T37] audit: type=1326 audit(1774860593.950:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9080 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 394.858369][ T5953] usb 4-1: USB disconnect, device number 19 [ 397.341514][ T5992] usb 6-1: 0:2 : does not exist [ 397.754529][ T5992] usb 6-1: USB disconnect, device number 9 [ 398.748432][ T8974] udevd[8974]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.547529][ T9112] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1003'. [ 402.829720][ T8631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.952805][ T809] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 403.153550][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 403.798749][ T8631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.520380][ T8631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.505700][ T8631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.209021][ T809] usb 2-1: unable to get BOS descriptor or descriptor too short [ 408.210013][ T809] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 408.210030][ T809] usb 2-1: chopping to 0 config(s) [ 408.210045][ T809] usb 2-1: can't read configurations, error -32 [ 408.305034][ T8966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 408.342850][ T809] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 408.370811][ T8966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 408.472891][ T809] usb 2-1: device descriptor read/64, error -32 [ 408.480625][ T5798] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 408.480647][ T5798] Bluetooth: hci2: Dropping invalid advertising data [ 408.480663][ T5798] Bluetooth: hci2: Malformed LE Event: 0x02 [ 408.537216][ T8966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 408.586987][ T809] usb usb2-port1: attempt power cycle [ 408.779309][ T8966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 408.923012][ T809] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 408.943271][ T809] usb 2-1: device descriptor read/8, error -32 [ 410.392802][ T809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 410.414846][ T809] usb 2-1: device descriptor read/8, error -32 [ 410.525359][ T8631] bridge_slave_1: left allmulticast mode [ 410.525393][ T8631] bridge_slave_1: left promiscuous mode [ 410.525671][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.532560][ T809] usb usb2-port1: unable to enumerate USB device [ 410.636132][ T8631] bridge_slave_0: left allmulticast mode [ 410.636165][ T8631] bridge_slave_0: left promiscuous mode [ 410.636435][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.242877][ T5798] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 413.242949][ T5110] Bluetooth: hci4: command 0x1003 tx timeout [ 416.495375][ T9187] netlink: zone id is out of range [ 416.495418][ T9187] netlink: zone id is out of range [ 416.495457][ T9187] netlink: zone id is out of range [ 416.495503][ T9187] netlink: zone id is out of range [ 416.495538][ T9187] netlink: zone id is out of range [ 417.466247][ T9190] delete_channel: no stack [ 417.583878][ T9190] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 417.583899][ T9190] CIFS: Unable to determine destination address [ 420.445912][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.723564][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.498272][ T8631] bond0 (unregistering): (slave team0): Releasing backup interface [ 421.539532][ T8631] bond0 (unregistering): Released all slaves [ 423.464430][ T8966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.494672][ T5798] Bluetooth: hci4: command 0xfc11 tx timeout [ 423.494985][ T5110] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 424.596690][ T8966] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.674616][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.674765][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.082805][ T8631] hsr_slave_0: left promiscuous mode [ 425.132919][ T8631] hsr_slave_1: left promiscuous mode [ 425.134094][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.134123][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.279768][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1030'. [ 426.283127][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.283158][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.737478][ T8631] veth1_macvtap: left promiscuous mode [ 427.737608][ T8631] veth0_macvtap: left promiscuous mode [ 427.737897][ T8631] veth1_vlan: left promiscuous mode [ 427.738096][ T8631] veth0_vlan: left promiscuous mode [ 430.592846][ T5942] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 430.713271][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 430.785611][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 430.869267][ T5942] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 430.869287][ T5942] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 430.869298][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 430.869327][ T5942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 430.869342][ T5942] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 430.870771][ T5942] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 430.870787][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 430.870798][ T5942] usb 2-1: Product: syz [ 430.870807][ T5942] usb 2-1: Manufacturer: syz [ 431.062021][ T5942] cdc_wdm 2-1:1.0: skipping garbage [ 431.062046][ T5942] cdc_wdm 2-1:1.0: skipping garbage [ 431.183177][ T5942] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 431.183202][ T5942] cdc_wdm 2-1:1.0: Unknown control protocol [ 431.187761][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.187926][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.740537][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.740620][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.740823][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.740836][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.741030][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.741041][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.741239][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.741250][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.741438][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.741449][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.741627][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.741638][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.741826][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.741837][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.742026][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.742037][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.742232][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.742243][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.742454][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 431.742471][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 431.833736][ T5867] usb 2-1: USB disconnect, device number 16 [ 431.833834][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 431.981079][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.012105][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.015870][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.017407][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.018239][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.593196][ T5798] Bluetooth: hci4: command tx timeout [ 436.602799][ T5798] Bluetooth: hci4: command tx timeout [ 438.796890][ T5798] Bluetooth: hci4: command tx timeout [ 440.635187][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.635266][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.096367][ T5798] Bluetooth: hci4: command tx timeout [ 441.432834][ T5942] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 441.585445][ T5942] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 441.585483][ T5942] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.585510][ T5942] usb 6-1: config 0 interface 0 has no altsetting 0 [ 441.585547][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.00 [ 441.585572][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.665570][ T5942] usb 6-1: config 0 descriptor?? [ 441.666289][ T9354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 442.265956][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.265982][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.265997][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.266012][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.266027][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.266041][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.266064][ T5942] apple 0003:05AC:0292.000E: unknown main item tag 0x0 [ 442.266079][ T5942] apple 0003:05AC:0292.000E: unexpected long global item [ 442.266555][ T5942] apple 0003:05AC:0292.000E: parse failed [ 442.266618][ T5942] apple 0003:05AC:0292.000E: probe with driver apple failed with error -22 [ 442.724171][ T9286] chnl_net:caif_netlink_parms(): no params data found [ 442.748506][ T9352] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1048'. [ 443.886698][ T9] usb 6-1: USB disconnect, device number 10 [ 445.825033][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.825180][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.825545][ T9286] bridge_slave_0: entered allmulticast mode [ 445.827760][ T9286] bridge_slave_0: entered promiscuous mode [ 446.956326][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.956441][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.956610][ T9286] bridge_slave_1: entered allmulticast mode [ 446.958500][ T9286] bridge_slave_1: entered promiscuous mode [ 447.210843][ T9286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.264115][ T9286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.460445][ T9286] team0: Port device team_slave_0 added [ 447.488950][ T9286] team0: Port device team_slave_1 added [ 447.672123][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.672144][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.672170][ T9286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.675583][ T9286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.675598][ T9286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.675623][ T9286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.908536][ T9419] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 452.856256][ T9415] batadv_slave_1: entered promiscuous mode [ 452.870412][ T9416] batadv_slave_1: left promiscuous mode [ 452.887396][ T9286] hsr_slave_0: entered promiscuous mode [ 452.890026][ T9286] hsr_slave_1: entered promiscuous mode [ 452.892551][ T9286] debugfs: 'hsr0' already exists in 'hsr' [ 452.892584][ T9286] Cannot create hsr debugfs directory [ 453.902664][ T5867] IPVS: starting estimator thread 0... [ 454.736956][ T9439] IPVS: using max 6 ests per chain, 14400 per kthread [ 456.013996][ T9452] fuse: Bad value for 'user_id' [ 456.014019][ T9452] fuse: Bad value for 'user_id' [ 458.131436][ T8631] bridge_slave_1: left allmulticast mode [ 458.131460][ T8631] bridge_slave_1: left promiscuous mode [ 458.131640][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.654144][ T8631] bridge_slave_0: left allmulticast mode [ 459.654177][ T8631] bridge_slave_0: left promiscuous mode [ 459.659360][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.738300][ T9471] binder: 9470:9471 ioctl c0306201 2000000004c0 returned -14 [ 460.143304][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 461.472889][ T994] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 461.622786][ T994] usb 2-1: Using ep0 maxpacket: 32 [ 461.622789][ T809] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 461.677825][ T994] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 461.677845][ T994] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 461.677858][ T994] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 461.677888][ T994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.677901][ T994] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 461.677915][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 461.678503][ T994] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 461.678522][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.775096][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.775133][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.775152][ T809] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.775179][ T809] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.775193][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.818920][ T809] usb 5-1: config 0 descriptor?? [ 461.821021][ T994] usb 2-1: config 0 descriptor?? [ 462.118587][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.120561][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.301719][ T809] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd [ 462.410873][ T809] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 462.603310][ T8631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.849785][ T8631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.954263][ T8631] bond0 (unregistering): Released all slaves [ 462.989588][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 463.169369][ T5953] usb 5-1: USB disconnect, device number 20 [ 464.058804][ T8631] hsr_slave_0: left promiscuous mode [ 464.126143][ T8631] hsr_slave_1: left promiscuous mode [ 464.135686][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.218951][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.592278][ T994] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 465.639514][ T994] usb 2-1: USB disconnect, device number 17 [ 465.698930][ T994] usblp0: removed [ 468.247317][ T8631] team0 (unregistering): Port device team_slave_1 removed [ 468.336378][ T8631] team0 (unregistering): Port device team_slave_0 removed [ 468.590228][ T9534] netlink: 'syz.0.1079': attribute type 25 has an invalid length. [ 469.308546][ T9541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1080'. [ 469.308615][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 469.412412][ T9544] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1080'. [ 469.790077][ T9547] 9p: Bad value for 'rfdno' [ 470.643154][ T9559] qrtr: Invalid version 0 [ 472.575416][ T9571] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.15044 [ 472.575436][ T9571] PKCS7: Only support pkcs7_signedData type [ 472.578480][ T9571] CIFS mount error: No usable UNC path provided in device string! [ 472.578480][ T9571] [ 472.578767][ T9571] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 473.543956][ T9286] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.800142][ T9286] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.923284][ T9286] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 474.051266][ T9577] netem: change failed [ 474.210776][ T9286] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 474.212756][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 474.376670][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.376707][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.407670][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 474.407702][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 474.407722][ T10] usb 5-1: Manufacturer: syz [ 474.434768][ T10] usb 5-1: config 0 descriptor?? [ 475.794562][ T9592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.798751][ T9592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.620155][ T9593] bridge1: entered allmulticast mode [ 478.914260][ T10] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #100: -71 [ 478.914485][ T10] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 478.914544][ T10] uclogic 0003:256C:006D.0010: failed probing pen v1 parameters: -71 [ 478.914809][ T10] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 478.915207][ T10] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 478.992495][ T10] usb 5-1: USB disconnect, device number 21 [ 480.838672][ T9286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.265174][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.279144][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.297470][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.421330][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.421520][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.792124][ T9637] qrtr: Invalid version 0 [ 483.804991][ T9649] netlink: 'syz.5.1097': attribute type 2 has an invalid length. [ 483.805021][ T9649] netlink: 'syz.5.1097': attribute type 2 has an invalid length. [ 486.187704][ T9671] 9p: Bad value for 'rfdno' [ 487.411574][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.494164][ T5867] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 491.670681][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 491.670701][ T37] audit: type=1326 audit(1774860691.280:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9705 comm="syz.1.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa67460c799 code=0x0 [ 491.703746][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 491.706148][ T5867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 491.706170][ T5867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 491.706185][ T5867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.706200][ T5867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.706226][ T5867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.706239][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.863753][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 491.902641][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 491.924711][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 491.931264][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 491.935234][ T5867] usb 6-1: usb_control_msg returned -32 [ 491.935266][ T5867] usbtmc 6-1:16.0: can't read capabilities [ 491.944531][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.397332][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 494.047341][ T5798] Bluetooth: hci5: command tx timeout [ 494.323321][ T5860] usb 6-1: USB disconnect, device number 11 [ 495.113656][ T9748] RGB/YUV Input: ================= START STATUS ================= [ 495.113732][ T9748] RGB/YUV Input: Test Pattern: 75% Colorbar [ 495.116777][ T9748] RGB/YUV Input: Show Information: All [ 495.117392][ T9748] RGB/YUV Input: Vertical Flip: false [ 495.118067][ T9748] RGB/YUV Input: Horizontal Flip: false [ 495.118741][ T9748] RGB/YUV Input: Brightness: 128 [ 495.118807][ T9748] RGB/YUV Input: Contrast: 128 [ 495.119366][ T9748] RGB/YUV Input: Hue: 0 [ 495.119935][ T9748] RGB/YUV Input: Saturation: 128 [ 495.120521][ T9748] RGB/YUV Input: ================== END STATUS ================== [ 496.402713][ T5798] Bluetooth: hci5: command tx timeout [ 498.459637][ T5798] Bluetooth: hci5: command tx timeout [ 499.526906][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1121'. [ 499.664440][ T9772] C: renamed from team_slave_0 (while UP) [ 499.973831][ T9772] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1121'. [ 500.532685][ T5798] Bluetooth: hci5: command tx timeout [ 501.568816][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.568864][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.848946][ T9795] ntfs3(loop1): try to read out of volume at offset 0x0 [ 503.978256][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 504.218100][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1129'. [ 504.484470][ T5798] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 504.878982][ T9816] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 504.879136][ T9817] Can't find ip_set type has [ 506.276682][ T5798] Bluetooth: hci2: unexpected event 0x09 length: 6 > 3 [ 506.482858][ T5953] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 507.551399][ T9847] befs: (loop1): No write support. Marking filesystem read-only [ 507.585108][ T9847] befs: (loop1): unable to read superblock [ 507.637154][ T37] audit: type=1326 audit(1774860706.950:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9836 comm="syz.1.1135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa67460c799 code=0x0 [ 507.824412][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 507.853083][ T9717] chnl_net:caif_netlink_parms(): no params data found [ 507.878777][ T5953] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 507.878812][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.878834][ T5953] usb 5-1: Product: syz [ 507.878848][ T5953] usb 5-1: Manufacturer: syz [ 507.878863][ T5953] usb 5-1: SerialNumber: syz [ 509.663760][ T5953] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 509.663780][ T5953] usb 5-1: clock source 0 is not valid, cannot use [ 509.664170][ T5953] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 509.664524][ T5953] usb 5-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 509.665632][ T5953] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 509.665646][ T5953] usb 5-1: clock source 0 is not valid, cannot use [ 509.665975][ T5953] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 509.666314][ T5953] usb 5-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 509.705116][ T9858] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1139'. [ 509.719234][ T5860] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 509.882882][ T5860] usb 2-1: device descriptor read/64, error -71 [ 510.036210][ T5953] usb 5-1: USB disconnect, device number 22 [ 510.122780][ T5860] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 510.205495][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 510.252736][ T5860] usb 2-1: device descriptor read/64, error -71 [ 510.363384][ T5860] usb usb2-port1: attempt power cycle [ 511.393048][ T9870] udevd[9870]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.662907][ T9717] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.663059][ T9717] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.663311][ T9717] bridge_slave_0: entered allmulticast mode [ 511.666245][ T9717] bridge_slave_0: entered promiscuous mode [ 511.719804][ T9717] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.719963][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.720213][ T9717] bridge_slave_1: entered allmulticast mode [ 511.753263][ T9717] bridge_slave_1: entered promiscuous mode [ 512.218820][ T5860] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 512.324531][ T9888] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1146'. [ 512.324557][ T9888] tc_dump_action: action bad kind [ 512.351062][ T5860] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 512.370629][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 512.381182][ T5860] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 512.381203][ T5860] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 512.381217][ T5860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 512.381294][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 512.381308][ T5860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 512.381324][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 512.381351][ T5860] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 512.381365][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.475909][ T5860] usb 2-1: config 0 descriptor?? [ 512.506487][ T9717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.510943][ T1020] bridge_slave_1: left allmulticast mode [ 512.511195][ T1020] bridge_slave_1: left promiscuous mode [ 512.512338][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.722891][ T5860] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 512.758838][ T1020] bridge_slave_0: left allmulticast mode [ 512.758868][ T1020] bridge_slave_0: left promiscuous mode [ 512.759178][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.782797][ T5860] usb 2-1: USB disconnect, device number 21 [ 512.806035][ T5860] usblp0: removed [ 512.986383][ T9901] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1149'. [ 514.602502][ T5860] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 514.732771][ T36] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 514.752842][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 514.755285][ T5860] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 514.755313][ T5860] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 514.755336][ T5860] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 514.755392][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.755416][ T5860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 514.755442][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 514.755487][ T5860] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 514.755511][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.862212][ T5860] usb 2-1: config 0 descriptor?? [ 514.862793][ T36] usb 6-1: device descriptor read/64, error -71 [ 515.102887][ T36] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 515.242894][ T36] usb 6-1: device descriptor read/64, error -71 [ 515.285931][ T5860] usb 2-1: can't set config #0, error -71 [ 515.306071][ T5860] usb 2-1: USB disconnect, device number 22 [ 515.358896][ T36] usb usb6-port1: attempt power cycle [ 515.713628][ T36] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 515.771080][ T36] usb 6-1: device descriptor read/8, error -71 [ 516.432786][ T36] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 516.642738][ T36] usb 6-1: device not accepting address 15, error -71 [ 516.643188][ T36] usb usb6-port1: unable to enumerate USB device [ 517.543829][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.779518][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.847808][ T1020] bond0 (unregistering): Released all slaves [ 518.263331][ T9717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.737779][ T9717] team0: Port device team_slave_0 added [ 518.837769][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1157'. [ 519.715892][ T9717] team0: Port device team_slave_1 added [ 520.480776][ T9948] pim6reg: entered allmulticast mode [ 523.183038][ T1020] hsr_slave_0: left promiscuous mode [ 523.287449][ T1020] hsr_slave_1: left promiscuous mode [ 523.288795][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.366210][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.823583][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 525.886828][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 526.254315][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.254328][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.254345][ T9717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.400210][ T9717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.400229][ T9717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.400256][ T9717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.660813][ T9717] hsr_slave_0: entered promiscuous mode [ 527.703486][ T9717] hsr_slave_1: entered promiscuous mode [ 527.704351][ T9717] debugfs: 'hsr0' already exists in 'hsr' [ 527.704369][ T9717] Cannot create hsr debugfs directory [ 530.009319][T10039] qrtr: Invalid version 0 [ 534.776565][ T9717] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.828071][ T9717] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.861615][ T9717] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 534.932997][ T9717] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 536.666134][ T9717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.837363][ T9717] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.886176][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.888141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.910730][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.910944][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.714591][ T9717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.766176][ T9717] veth0_vlan: entered promiscuous mode [ 539.925813][ T9717] veth1_vlan: entered promiscuous mode [ 540.249307][ T9717] veth0_macvtap: entered promiscuous mode [ 540.279041][ T9717] veth1_macvtap: entered promiscuous mode [ 540.370192][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.398474][ T9717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.432698][ T1813] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.436255][ T1813] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.437162][ T1813] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.439080][ T1813] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.051495][ T7701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.051512][ T7701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.343402][ T8355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.343426][ T8355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.346474][T10172] openvswitch: netlink: Tunnel attr 30 out of range max 16 [ 541.375452][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 541.532802][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 541.538202][ T5867] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 541.540659][ T5867] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 541.540691][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.540711][ T5867] usb 5-1: Product: syz [ 541.540719][ T5867] usb 5-1: Manufacturer: syz [ 541.540727][ T5867] usb 5-1: SerialNumber: syz [ 541.623863][ T5867] r8152-cfgselector 5-1: Unknown version 0x0000 [ 541.623882][ T5867] r8152-cfgselector 5-1: config 0 descriptor?? [ 542.599745][ T5867] r8152-cfgselector 5-1: USB disconnect, device number 23 [ 547.252883][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 547.414840][ T10] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 547.414876][ T10] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 547.414895][ T10] usb 6-1: Product: syz [ 547.414909][ T10] usb 6-1: SerialNumber: syz [ 547.422408][ T10] usb 6-1: config 0 descriptor?? [ 547.686129][ T10] hso 6-1:0.0: Failed to find BULK IN ep [ 547.931655][ T31] usb 6-1: USB disconnect, device number 16 [ 549.864798][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 550.036150][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.036181][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.036194][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 550.036222][ T5867] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 550.036236][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.039842][ T5867] usb 2-1: config 0 descriptor?? [ 550.102880][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 550.252759][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 550.256824][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 550.258363][ T31] usb 6-1: config 129 has an invalid interface number: 82 but max is 0 [ 550.258391][ T31] usb 6-1: config 129 has no interface number 0 [ 550.258426][ T31] usb 6-1: config 129 interface 82 has no altsetting 0 [ 550.269853][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=70.a7 [ 550.269941][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.269963][ T31] usb 6-1: Product: syz [ 550.269977][ T31] usb 6-1: Manufacturer: syz [ 550.269992][ T31] usb 6-1: SerialNumber: syz [ 550.488975][ T5867] steelseries 0003:1038:1410.0011: unknown main item tag 0x1 [ 550.489285][ T5867] steelseries 0003:1038:1410.0011: item 0 2 0 9 parsing failed [ 550.490933][ T5867] steelseries 0003:1038:1410.0011: parse failed [ 550.491242][ T5867] steelseries 0003:1038:1410.0011: probe with driver steelseries failed with error -22 [ 550.578692][ T31] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:129.82/input/input22 [ 550.643598][ T5145] bcm5974 6-1:129.82: could not read from device [ 550.704423][ T31] usb 6-1: USB disconnect, device number 17 [ 550.705305][ T5145] bcm5974 6-1:129.82: could not read from device [ 550.708004][ T809] usb 2-1: USB disconnect, device number 23 [ 550.881490][ T9870] udevd[9870]: Error opening device "/dev/input/event4": No such file or directory [ 550.881631][ T9870] udevd[9870]: Unable to EVIOCGABS device "/dev/input/event4" [ 550.881764][ T9870] udevd[9870]: Unable to EVIOCGABS device "/dev/input/event4" [ 550.881895][ T9870] udevd[9870]: Unable to EVIOCGABS device "/dev/input/event4" [ 550.886944][ T9870] udevd[9870]: Unable to EVIOCGABS device "/dev/input/event4" [ 553.213810][ T37] audit: type=1326 audit(1774860752.830:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.216610][ T37] audit: type=1326 audit(1774860752.830:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.216906][ T37] audit: type=1326 audit(1774860752.830:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.218802][ T37] audit: type=1326 audit(1774860752.830:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.219101][ T37] audit: type=1326 audit(1774860752.830:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.220003][ T37] audit: type=1326 audit(1774860752.830:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.220846][ T37] audit: type=1326 audit(1774860752.830:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.221243][ T37] audit: type=1326 audit(1774860752.830:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10343 comm="syz.5.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b5c8c799 code=0x7ffc0000 [ 553.224033][ T809] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 553.484945][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 553.487341][ T809] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 553.487372][ T809] usb 5-1: config 0 has no interface number 0 [ 553.487421][ T809] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 553.487448][ T809] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x3 has invalid maxpacket 1549, setting to 1024 [ 553.487570][ T809] usb 5-1: config 0 interface 196 has no altsetting 0 [ 553.490881][ T809] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 553.490993][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.491016][ T809] usb 5-1: Product: syz [ 553.491031][ T809] usb 5-1: Manufacturer: syz [ 553.491047][ T809] usb 5-1: SerialNumber: syz [ 553.528227][ T809] usb 5-1: config 0 descriptor?? [ 553.529461][T10336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 553.861367][ T809] ipheth 5-1:0.196: Unable to find endpoints [ 553.897066][ T809] usb 5-1: USB disconnect, device number 24 [ 555.241157][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.241938][T10359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 556.775673][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'. [ 556.775759][T10408] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 556.775774][T10408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1312'. [ 557.272578][ C1] hrtimer: interrupt took 44709 ns [ 559.682959][ T36] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 559.834878][ T36] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 559.834911][ T36] usb 5-1: config 0 has no interface number 0 [ 559.834943][ T36] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 559.834977][ T36] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 559.834993][ T36] usb 5-1: config 0 interface 255 has no altsetting 0 [ 559.835013][ T36] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 559.835027][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.841863][ T36] usb 5-1: config 0 descriptor?? [ 559.944419][ T36] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 560.166305][ T36] usb 5-1: USB disconnect, device number 25 [ 561.067035][T10502] pim6reg: entered allmulticast mode [ 562.383042][T10516] hugetlbfs: Bad value for 'mode' [ 563.011155][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.011206][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.415054][ T5798] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 565.342961][T10558] capability: warning: `syz.0.1371' uses deprecated v2 capabilities in a way that may be insecure [ 565.638630][T10560] pim6reg: entered allmulticast mode [ 568.257940][T10579] pim6reg: entered allmulticast mode [ 568.457273][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 568.457658][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 568.473032][ T5110] Bluetooth: hci2: hardware error 0x00 [ 570.694258][ T5110] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 572.632765][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 572.809694][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 572.819065][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.819101][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.819148][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 572.819172][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.845300][ T10] usb 2-1: config 0 descriptor?? [ 573.125441][ T9280] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 573.272685][ T9280] usb 5-1: Using ep0 maxpacket: 16 [ 573.278695][ T9280] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 573.278726][ T9280] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.278747][ T9280] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 573.278831][ T9280] usb 5-1: config 1 has no interface number 1 [ 573.278874][ T9280] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 573.278890][ T9280] usb 5-1: config 1 interface 105 has no altsetting 0 [ 573.281873][ T9280] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 573.281891][ T9280] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 573.281944][ T9280] usb 5-1: Product: syz [ 573.281954][ T9280] usb 5-1: Manufacturer: syz [ 573.281963][ T9280] usb 5-1: SerialNumber: syz [ 573.348741][T10621] netlink: 'syz.6.1393': attribute type 58 has an invalid length. [ 573.390824][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390849][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390864][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390879][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390893][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390908][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390922][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390936][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390950][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.390965][ T10] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0 [ 573.415693][ T10] lg-g15 0003:046D:0A07.0012: hidraw0: USB HID v0.09 Device [HID 046d:0a07] on usb-dummy_hcd.1-1/input0 [ 573.572814][ T5942] usb 2-1: USB disconnect, device number 24 [ 573.595597][ T9280] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 573.850624][ T9280] usb 5-1: USB disconnect, device number 26 [ 573.967453][T10623] fido_id[10623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 576.132676][ T31] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 576.282787][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 576.285291][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.285326][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.285370][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 576.285395][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.386572][ T31] usb 5-1: config 0 descriptor?? [ 576.544684][ T31] hub 5-1:0.0: USB hub found [ 576.611316][ T31] hub 5-1:0.0: 7 ports detected [ 576.611853][ T31] hub 5-1:0.0: insufficient power available to use all downstream ports [ 576.813104][ T31] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 576.813135][ T31] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 576.846154][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 576.846292][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 576.944237][ T31] usb 5-1: USB disconnect, device number 27 [ 579.744673][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 579.744699][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 580.188135][T10719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1427'. [ 584.274229][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 584.427168][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.427204][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.427230][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.427275][ T31] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.427297][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.501956][ T31] usb 7-1: config 0 descriptor?? [ 584.939022][ T31] plantronics 0003:047F:FFFF.0013: unbalanced collection at end of report description [ 584.940003][ T31] plantronics 0003:047F:FFFF.0013: parse failed [ 584.940071][ T31] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22 [ 585.145040][ T809] usb 7-1: USB disconnect, device number 2 [ 585.362786][ T31] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 585.539416][ T31] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.539447][ T31] usb 5-1: config 0 has no interface number 0 [ 585.544520][ T31] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 585.544549][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.544567][ T31] usb 5-1: Product: syz [ 585.544581][ T31] usb 5-1: Manufacturer: syz [ 585.544594][ T31] usb 5-1: SerialNumber: syz [ 585.566495][ T31] usb 5-1: config 0 descriptor?? [ 585.589964][ T31] usb 5-1: selecting invalid altsetting 1 [ 585.591620][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 585.591638][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 585.786969][ T31] DVB: Unable to find symbol stv0299_attach() [ 586.018449][ T31] DVB: Unable to find symbol tda8083_attach() [ 586.018468][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 586.049948][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 586.103563][ T31] usb 5-1: USB disconnect, device number 28 [ 594.332677][ T5867] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 594.512677][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 594.518076][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 594.518113][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 594.521196][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 594.521226][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.521246][ T5867] usb 2-1: Product: syz [ 594.521262][ T5867] usb 2-1: Manufacturer: syz [ 594.521277][ T5867] usb 2-1: SerialNumber: syz [ 594.690922][ T5867] usb 2-1: config 0 descriptor?? [ 594.708922][ T5867] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 594.708959][ T5867] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 595.521171][ T5867] em28xx 2-1:0.0: chip ID is em28178 [ 595.740252][ T31] usb 2-1: USB disconnect, device number 25 [ 595.741781][ T31] em28xx 2-1:0.0: Disconnecting em28xx [ 595.823764][ T31] em28xx 2-1:0.0: Freeing device [ 596.310348][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1502'. [ 598.282781][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 598.436761][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 598.439953][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.439981][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.442290][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.442415][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.442431][ T9] usb 5-1: Product: syz [ 598.442440][ T9] usb 5-1: Manufacturer: syz [ 598.442448][ T9] usb 5-1: SerialNumber: syz [ 598.487717][T10949] netem: incorrect ge model size [ 598.487733][T10949] netem: change failed [ 599.249492][ T9] usb 5-1: cannot find UAC_HEADER [ 599.688784][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 601.032857][ T9] usb 5-1: USB disconnect, device number 29 [ 601.167001][ T9874] udevd[9874]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.544241][T10986] qrtr: Invalid version 0 [ 604.100309][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 604.100336][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 604.100364][T11000] netlink: 'syz.0.1524': attribute type 15 has an invalid length. [ 604.100378][T11000] netlink: 'syz.0.1524': attribute type 18 has an invalid length. [ 610.384330][T11083] qrtr: Invalid version 0 [ 610.473030][ T36] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 610.635390][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.635415][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.636655][ T36] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 610.636673][ T36] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 610.636684][ T36] usb 2-1: Manufacturer: syz [ 610.643876][ T36] usb 2-1: config 0 descriptor?? [ 612.677652][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.687606][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.102914][ T36] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #100: -71 [ 616.102981][ T36] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 616.103001][ T36] uclogic 0003:256C:006D.0014: failed probing pen v1 parameters: -71 [ 616.103053][ T36] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 616.103166][ T36] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 616.286405][ T5110] Bluetooth: hci5: command 0x0406 tx timeout [ 616.754528][ T36] usb 2-1: USB disconnect, device number 26 [ 621.966335][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 621.966359][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1581'. [ 623.322882][ T5110] Bluetooth: hci5: command 0x0406 tx timeout [ 623.782657][ T9916] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 623.962158][ T9916] usb 6-1: Using ep0 maxpacket: 16 [ 623.974658][ T9916] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 623.974690][ T9916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.974709][ T9916] usb 6-1: Product: syz [ 623.974723][ T9916] usb 6-1: Manufacturer: syz [ 623.974736][ T9916] usb 6-1: SerialNumber: syz [ 623.980049][ T9916] usb 6-1: config 0 descriptor?? [ 624.033563][ T9916] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 624.460013][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.460115][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.820758][ T9916] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 624.825784][ T9916] usb 6-1: USB disconnect, device number 18 [ 624.945313][T11178] kvm: kvm [11177]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x61c6 [ 626.793940][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1592'. [ 626.794140][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1592'. [ 627.243919][T11197] delete_channel: no stack [ 629.949106][T11218] kvm: kvm [11215]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x61c6 [ 631.059398][T11247] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1615'. [ 632.603578][T11267] kvm: kvm [11266]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x61c6 [ 632.882674][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 633.050028][ T36] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.050060][ T36] usb 6-1: config 0 has no interface number 0 [ 633.067041][ T36] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 633.067076][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.067098][ T36] usb 6-1: Product: syz [ 633.067113][ T36] usb 6-1: Manufacturer: syz [ 633.067128][ T36] usb 6-1: SerialNumber: syz [ 633.124100][ T36] usb 6-1: config 0 descriptor?? [ 633.132760][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 633.502782][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 633.503402][ T36] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 633.511343][ T9] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 633.511372][ T9] usb 7-1: config 0 has no interface number 0 [ 633.585158][ T36] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 633.588310][ T36] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 633.588695][ T36] usb 6-1: media controller created [ 634.069401][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 634.345770][ T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 634.345832][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.345854][ T9] usb 7-1: Product: syz [ 634.345868][ T9] usb 7-1: Manufacturer: syz [ 634.345882][ T9] usb 7-1: SerialNumber: syz [ 634.361733][ T9] usb 7-1: config 0 descriptor?? [ 634.411409][ T9] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 634.718654][T11288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.751932][T11288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.931222][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 635.017543][ T9] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 635.061653][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 635.156883][ T5798] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 635.177594][ T36] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 635.178985][T11278] usb 6-1: dvb_usb_ec168: I2C read not implemented [ 635.266645][ T36] usb 6-1: USB disconnect, device number 19 [ 635.384208][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 635.386632][ T31] usb 7-1: USB disconnect, device number 3 [ 635.415890][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 635.440948][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 635.442164][ T31] quatech2 7-1:0.51: device disconnected [ 635.791447][T11324] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 635.791625][T11324] dvmrp1: linktype set to 823 [ 637.178799][T11365] ALSA: mixer_oss: invalid OSS volume 'ÝÝ' [ 639.357295][ T809] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 639.519281][ T809] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 639.519315][ T809] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.519337][ T809] usb 6-1: Product: syz [ 639.519352][ T809] usb 6-1: Manufacturer: syz [ 639.519367][ T809] usb 6-1: SerialNumber: syz [ 639.738038][T11392] program syz.6.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.237317][ T809] (unnamed net_device) (uninitialized): Assigned a random MAC address: 62:10:72:8f:a1:98 [ 640.289776][ T809] rtl8150 6-1:1.0: eth9: rtl8150 is detected [ 640.445240][ T809] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 640.449586][ T10] usb 6-1: USB disconnect, device number 20 [ 640.632366][ T809] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 640.632401][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.670127][ T809] usb 5-1: config 0 descriptor?? [ 641.874630][ T809] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 642.152282][ T809] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 642.152310][ T809] [drm] Initialized udl on minor 2 [ 642.188868][ T809] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 642.201536][ T809] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 642.732710][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 642.776122][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 642.778352][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 642.826560][ T809] usb 5-1: USB disconnect, device number 30 [ 643.541092][T11447] qrtr: Invalid version 0 [ 647.570165][T11503] qrtr: Invalid version 0 [ 650.281573][T11538] overlayfs: overlapping lowerdir path [ 651.541638][T11559] syzkaller1: entered promiscuous mode [ 651.541657][T11559] syzkaller1: entered allmulticast mode [ 653.411245][ T5867] kernel write not supported for file /sequencer2 (pid: 5867 comm: kworker/1:4) [ 653.618287][T11598] qrtr: Invalid version 0 [ 655.012008][T11622] pim6reg: entered allmulticast mode [ 655.251100][T11627] sock: sock_set_timeout: `syz.1.1745' (pid 11627) tries to set negative timeout [ 655.823769][T11639] loop5: detected capacity change from 0 to 7 [ 655.891990][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.892136][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.902412][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.902460][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.912615][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.912650][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.921937][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.921968][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.930642][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.930688][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.930934][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.930963][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.931174][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.931203][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.931291][T11314] ldm_validate_partition_table(): Disk read failed. [ 655.931425][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.931452][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.931658][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.931694][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 655.943497][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.943558][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 656.143914][T11641] loop5: detected capacity change from 7 to 0 [ 656.154273][T11314] Dev loop5: unable to read RDB block 0 [ 656.154311][T11314] loop5: unable to read partition table [ 656.154569][T11314] loop5: partition table beyond EOD, truncated [ 656.666463][T11659] qrtr: Invalid version 0 [ 657.399372][T11670] hsr0: entered promiscuous mode [ 658.402808][ T5867] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 658.552895][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 658.555836][ T5867] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 658.555864][ T5867] usb 7-1: config 0 has no interface number 0 [ 658.555910][ T5867] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.558410][ T5867] usb 7-1: config 0 interface 85 has no altsetting 0 [ 658.561803][ T5867] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 658.561834][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.561856][ T5867] usb 7-1: Product: syz [ 658.561870][ T5867] usb 7-1: Manufacturer: syz [ 658.561884][ T5867] usb 7-1: SerialNumber: syz [ 658.683441][ T5867] usb 7-1: config 0 descriptor?? [ 659.135295][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 660.018925][ T5867] appletouch 7-1:0.85: Geyser mode initialized. [ 660.030165][ T5867] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input23 [ 660.043627][ C0] appletouch 7-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 660.428648][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 660.428798][ T9280] usb 7-1: USB disconnect, device number 4 [ 660.611787][T11725] qrtr: Invalid version 0 [ 661.535003][ T9280] appletouch 7-1:0.85: input: appletouch disconnected [ 662.948571][T11737] qrtr: Invalid version 0 [ 663.666761][T11748] dummy0: entered promiscuous mode [ 663.675542][T11748] team0: entered promiscuous mode [ 663.675578][T11748] team_slave_0: entered promiscuous mode [ 663.675793][T11748] team_slave_1: entered promiscuous mode [ 663.694788][T11748] hsr1: entered allmulticast mode [ 663.694815][T11748] dummy0: entered allmulticast mode [ 663.694837][T11748] team0: entered allmulticast mode [ 663.694851][T11748] team_slave_0: entered allmulticast mode [ 663.694871][T11748] team_slave_1: entered allmulticast mode [ 665.818627][T11780] qrtr: Invalid version 48 [ 672.347658][T11853] veth0: entered promiscuous mode [ 672.349255][T11852] veth0: left promiscuous mode [ 675.279916][ T9280] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 675.514563][ T9280] usb 2-1: unable to get BOS descriptor or descriptor too short [ 675.589318][ T9280] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 675.589397][ T9280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.589475][ T9280] usb 2-1: Product: syz [ 675.589492][ T9280] usb 2-1: Manufacturer: syz [ 675.589549][ T9280] usb 2-1: SerialNumber: syz [ 680.073016][ T9280] usb 2-1: Unsupported UAC3 BADD profile [ 680.236611][ T9280] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 681.552455][ T9280] usb 2-1: USB disconnect, device number 27 [ 682.038690][T11314] udevd[11314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.949305][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949734][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.025329][T11952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1855'. [ 691.025362][T11952] block nbd0: Unsupported socket: should be TCP or UNIX. [ 692.119569][T11961] NILFS (nullb0): couldn't find nilfs on the device [ 697.225482][T12005] loop2: detected capacity change from 0 to 7 [ 697.246392][T12005] Dev loop2: unable to read RDB block 7 [ 697.246443][T12005] loop2: unable to read partition table [ 697.246693][T12005] loop2: partition table beyond EOD, truncated [ 697.246728][T12005] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 697.522663][ T809] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 697.531461][T12009] syzkaller1: entered promiscuous mode [ 697.531488][T12009] syzkaller1: entered allmulticast mode [ 697.672970][ T809] usb 7-1: Using ep0 maxpacket: 32 [ 697.675663][ T809] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 697.675694][ T809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.017285][ T809] usb 7-1: config 0 descriptor?? [ 698.083248][ T809] as10x_usb: device has been detected [ 698.086589][ T809] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 698.184506][ T809] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 698.235605][T12004] INFO: trying to register non-static key. [ 698.235620][T12004] The code is fine but needs lockdep annotation, or maybe [ 698.235630][T12004] you didn't initialize this object before use? [ 698.235638][T12004] turning off the locking correctness validator. [ 698.235655][T12004] CPU: 1 UID: 0 PID: 12004 Comm: syz.6.1873 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 698.235685][T12004] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 698.235693][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.235706][T12004] Call Trace: [ 698.235714][T12004] [ 698.235723][T12004] dump_stack_lvl+0xe8/0x150 [ 698.235757][T12004] assign_lock_key+0x133/0x150 [ 698.235780][T12004] register_lock_class+0xcc/0x2e0 [ 698.235799][T12004] __lock_acquire+0xad/0x2cf0 [ 698.235817][T12004] ? __lock_acquire+0x6b5/0x2cf0 [ 698.235839][T12004] ? do_raw_spin_lock+0x12b/0x2f0 [ 698.235869][T12004] lock_acquire+0xf0/0x2e0 [ 698.235885][T12004] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 698.236007][T12004] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 698.236031][T12004] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 698.236052][T12004] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 698.236192][T12004] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 698.236214][T12004] ? lockdep_hardirqs_on+0x7a/0x110 [ 698.236255][T12004] as102_dvb_dmx_start_feed+0x70/0x290 [ 698.236280][T12004] dmx_section_feed_start_filtering+0x518/0x6c0 [ 698.236357][T12004] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 698.236403][T12004] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 698.236430][T12004] dvb_demux_do_ioctl+0x473/0x540 [ 698.236456][T12004] dvb_usercopy+0x199/0x2e0 [ 698.236480][T12004] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 698.236505][T12004] ? __pfx_dvb_usercopy+0x10/0x10 [ 698.236534][T12004] ? __fget_files+0x3a6/0x420 [ 698.236608][T12004] ? __fget_files+0x2a/0x420 [ 698.236635][T12004] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 698.236665][T12004] dvb_demux_ioctl+0x29/0x40 [ 698.236695][T12004] __se_sys_ioctl+0xff/0x170 [ 698.236738][T12004] do_syscall_64+0x14d/0xf80 [ 698.236781][T12004] ? trace_irq_disable+0x3b/0x150 [ 698.236808][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.236832][T12004] ? clear_bhb_loop+0x40/0x90 [ 698.236857][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.236878][T12004] RIP: 0033:0x7f77e751c799 [ 698.236899][T12004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.236916][T12004] RSP: 002b:00007f77e5776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.236941][T12004] RAX: ffffffffffffffda RBX: 00007f77e7795fa0 RCX: 00007f77e751c799 [ 698.236957][T12004] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 698.236972][T12004] RBP: 00007f77e75b2c99 R08: 0000000000000000 R09: 0000000000000000 [ 698.236986][T12004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.237000][T12004] R13: 00007f77e7796038 R14: 00007f77e7795fa0 R15: 00007ffead97c498 [ 698.237025][T12004] [ 698.619749][ T809] as10x_usb: error during firmware upload part1 [ 698.620189][ T809] Registered device nBox DVB-T Dongle [ 698.633445][ T809] usb 7-1: USB disconnect, device number 5 [ 698.658368][ T809] Unregistered device nBox DVB-T Dongle [ 699.005654][ T809] as10x_usb: device has been disconnected [ 699.373389][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 699.782590][ T9] usb 2-1: device not accepting address 28, error -71 [ 701.344422][ T1020] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.554432][ T1020] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.783791][ T1020] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.983641][ T1020] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.192764][ T1020] bridge_slave_1: left allmulticast mode [ 702.192792][ T1020] bridge_slave_1: left promiscuous mode [ 702.192965][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.283742][ T1020] bridge_slave_0: left allmulticast mode [ 702.283769][ T1020] bridge_slave_0: left promiscuous mode [ 702.283934][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.953026][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.033715][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.053843][ T1020] bond0 (unregistering): Released all slaves [ 704.002769][ T1020] dummy0: left promiscuous mode [ 704.022663][ T1020] team0: left promiscuous mode [ 704.022686][ T1020] team_slave_0: left promiscuous mode [ 704.022799][ T1020] team_slave_1: left promiscuous mode [ 704.152646][ T1020] hsr_slave_0: left promiscuous mode [ 704.172678][ T1020] hsr_slave_1: left promiscuous mode [ 704.173174][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.173189][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.213251][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.213275][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.283168][ T1020] veth1_macvtap: left promiscuous mode [ 704.283239][ T1020] veth0_macvtap: left promiscuous mode [ 704.283374][ T1020] veth1_vlan: left promiscuous mode [ 704.283425][ T1020] veth0_vlan: left promiscuous mode [ 704.476782][ T1020] pim6reg (unregistering): left allmulticast mode [ 704.719312][ T1020] team_slave_1 (unregistering): left allmulticast mode [ 704.753132][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 704.756824][ T1020] team_slave_0 (unregistering): left allmulticast mode [ 704.793432][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 707.283571][ T1020] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.504357][ T1020] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.724526][ T1020] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.983589][ T1020] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0