last executing test programs: 17.281773059s ago: executing program 3 (id=507): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$inet(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 13.631711526s ago: executing program 1 (id=513): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x800) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='afs_make_fs_calli\x00', r1, 0x0, 0x7}, 0x6c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x29, @multicast1, 0x4e23, 0x3, 'lblcr\x00', 0x24, 0xc, 0x21}, {@rand_addr=0x1000, 0x4e24, 0x4, 0x9, 0x4, 0x2}}, 0x44) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 11.953917558s ago: executing program 1 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) unshare(0x40020000) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_PARAMS={{0x1}, 0x6}}}, 0x7) 11.885911798s ago: executing program 3 (id=515): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) syz_open_dev$video(&(0x7f0000000380), 0xfc, 0x26444) socket$packet(0x11, 0x2, 0x300) 10.980804701s ago: executing program 2 (id=516): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000c7b2ab217728fd00"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5) syz_io_uring_setup(0x779b, &(0x7f0000000380)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, &(0x7f0000000280), &(0x7f0000000200)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xae) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 10.954614058s ago: executing program 0 (id=517): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r3, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a00000008000600777272000c0007002e00000005000000080009002700feff060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x190, r5, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x94da}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb000}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x44001}, 0xc000081) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @time=@time={0x523, 0x1ff}}, {0x0, 0x0, 0x6, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f0000000100)={0x1, 0x0, 0x7c0000, 0x800}) r10 = epoll_create1(0x0) r11 = fcntl$dupfd(r10, 0x0, r6) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, &(0x7f00000000c0)={0x2000}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 10.900060117s ago: executing program 3 (id=518): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20004880) ftruncate(r0, 0x5) fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x5, 0x7}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x280449c, 0x0) read$FUSE(r0, 0x0, 0x0) write$P9_RLERROR(r0, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='ns\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'vlan1\x00'}) getdents64(r2, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x62) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='+\x00\x00\x00\t'], 0x2b) creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) 10.686331866s ago: executing program 1 (id=519): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syslog(0x4, &(0x7f0000000180)=""/153, 0x99) 10.683756445s ago: executing program 0 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x104) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ttynull(0xffffff9c, &(0x7f00000001c0), 0x24800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x4000004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10.13331825s ago: executing program 3 (id=521): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chroot(&(0x7f0000000000)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 8.626641086s ago: executing program 2 (id=522): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000359000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r9, 0x100000000) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5.310078659s ago: executing program 0 (id=523): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x25, 0xd, @val=@tcx}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/244, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x10, &(0x7f0000000380)={[{0x9, 0x4e00, "063771994d29d420f6"}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.290850381s ago: executing program 1 (id=524): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @empty, 0x2, 0x1}, 0x80, &(0x7f0000005fc0)}, 0x40810) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x5}, 0x18) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x25, 0x1, 0x0) 5.109114727s ago: executing program 2 (id=525): r0 = socket(0x10, 0x2, 0x0) unshare(0x28000600) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x2c020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) getpeername$packet(r0, 0x0, 0x0) 4.62528732s ago: executing program 0 (id=526): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K\x00\x00\x00\x00\x00\x00', 0x0) fsopen(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, 0x0) syz_io_uring_setup(0x10b, 0x0, &(0x7f0000000340), &(0x7f0000000480)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, 0x0) 4.625041084s ago: executing program 2 (id=527): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty=0x1000000}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@empty]}]}}}], 0x14}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) 4.04836715s ago: executing program 1 (id=528): openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) epoll_create1(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffd, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@empty, 0x4, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x6, 0xefcb, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) 3.874214989s ago: executing program 3 (id=529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0xfc}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0xb, &(0x7f0000000180)) r7 = dup(r1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x20000001}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004081}, 0x8000) 3.486780811s ago: executing program 0 (id=530): mkdirat(0xffffffffffffff9c, 0x0, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) mount(0x0, 0x0, 0x0, 0xa48410, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close_range(r1, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./cgroup\x00', 0x0) 3.446823123s ago: executing program 2 (id=531): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xc15b) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000080)='./file2\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x40000c0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) 1.6531549s ago: executing program 0 (id=532): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fc", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x40, 0xa, 0x3a, {0x3a, 0xc, "00bab9bb454bb0dd3c558f29e0141e6a41a7fb547b21106b44ae4ebc303adf46ba1a2f485e3157a5f134b1031ff5143b0514870d2b376938"}}, 0x0}, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000340)={0x40, 0x5, 0x1, "b5"}}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_open_pts(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={0x0}}, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1.455219922s ago: executing program 3 (id=533): socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x1d, 0x2, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) syslog(0x4, &(0x7f0000000180)=""/153, 0x99) 1.337128449s ago: executing program 1 (id=534): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x109002, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) shmget$private(0x0, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r5 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="35cb", 0x2, 0xfffffffffffffffd) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x134, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x0, 0x100}, {@in, 0x0, 0x6c}, @in6=@private1, {}, {0x0, 0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x3e7ffffffc}]) 0s ago: executing program 2 (id=535): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a80000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x3a, 0x0, "33d080577968b3107694c2858f48c27f17ef54caf822abcfad9399c494d846140482c7e40195d5f034a72c69ed7330f3000f530ff9525fad6b3db9851a4354d70cc3734d319f852c370cbc9e69c75987"}, 0xd8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000580)={0x0, 0xc, 0x1, 0x0}) kernel console output (not intermixed with test programs): cutor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 89.053385][ T40] audit: type=1326 audit(1768563214.437:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 89.060296][ T40] audit: type=1326 audit(1768563214.437:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 89.236528][ T40] audit: type=1326 audit(1768563214.647:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 89.243111][ T40] audit: type=1326 audit(1768563214.647:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 89.262962][ T6507] netlink: 'syz.3.77': attribute type 4 has an invalid length. [ 90.362042][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 90.376185][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 90.382089][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 90.390233][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 90.687773][ T6521] comedi comedi0: Minor 47 could not be opened [ 91.576122][ T5815] usb 44-1: device descriptor read/8, error -110 [ 92.025377][ T5815] usb usb44-port1: attempt power cycle [ 92.534994][ T53] usb 42-1: device descriptor read/8, error -110 [ 93.573678][ T5815] usb usb44-port1: unable to enumerate USB device [ 93.877476][ T53] usb usb42-port1: attempt power cycle [ 94.062444][ T6544] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 94.064758][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.074881][ T6544] vhci_hcd vhci_hcd.0: Device attached [ 94.247355][ T6543] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 94.376155][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 94.379893][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 94.383922][ T64] Bluetooth: hci2: hardware error 0x00 [ 94.436855][ T53] usb usb42-port1: unable to enumerate USB device [ 94.465308][ T6178] usb 38-1: SetAddress Request (6) to port 0 [ 94.467457][ T6178] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 94.798701][ T6545] vhci_hcd: connection reset by peer [ 94.801020][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 94.802721][ T4007] vhci_hcd vhci_hcd.0: release socket [ 94.804517][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 95.020713][ T6551] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 95.022832][ T6551] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.045677][ T6554] netlink: 'syz.1.87': attribute type 2 has an invalid length. [ 95.048586][ T6551] vhci_hcd vhci_hcd.0: Device attached [ 95.314979][ T5815] usb 40-1: SetAddress Request (6) to port 0 [ 95.317105][ T5815] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 95.516467][ T6552] vhci_hcd: connection reset by peer [ 95.521340][ T1141] vhci_hcd vhci_hcd.1: stop threads [ 95.523299][ T1141] vhci_hcd vhci_hcd.1: release socket [ 95.525664][ T1141] vhci_hcd vhci_hcd.1: disconnect device [ 95.860081][ T6565] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 95.862302][ T6565] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 95.866776][ T6565] vhci_hcd vhci_hcd.0: Device attached [ 96.465943][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 96.841393][ T6566] vhci_hcd: connection closed [ 96.841643][ T82] vhci_hcd vhci_hcd.0: stop threads [ 96.850152][ T82] vhci_hcd vhci_hcd.0: release socket [ 96.862439][ T82] vhci_hcd vhci_hcd.0: disconnect device [ 97.664243][ T40] audit: type=1326 audit(1768563223.067:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.676374][ T40] audit: type=1326 audit(1768563223.067:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.683107][ T40] audit: type=1326 audit(1768563223.067:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.756184][ T40] audit: type=1326 audit(1768563223.067:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.762997][ T40] audit: type=1326 audit(1768563223.067:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.874829][ T40] audit: type=1326 audit(1768563223.077:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.883885][ T40] audit: type=1326 audit(1768563223.117:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.893128][ T40] audit: type=1326 audit(1768563223.117:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.900251][ T40] audit: type=1326 audit(1768563223.127:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 97.907300][ T40] audit: type=1326 audit(1768563223.127:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.1.94" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 98.771509][ T6617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 98.773945][ T6617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.799590][ T6617] vhci_hcd vhci_hcd.0: Device attached [ 98.812878][ T6617] random: crng reseeded on system resumption [ 98.933436][ T6593] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.944133][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.495749][ T6178] usb 38-1: device descriptor read/8, error -110 [ 99.897718][ T6178] usb usb38-port1: attempt power cycle [ 100.140529][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 100.348600][ T6650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.466008][ T6178] usb usb38-port1: unable to enumerate USB device [ 100.714365][ T6655] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 100.717020][ T6655] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 100.721177][ T6655] vhci_hcd vhci_hcd.0: Device attached [ 101.004880][ T1459] usb 42-1: SetAddress Request (10) to port 0 [ 101.007516][ T1459] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 101.127718][ T6658] vhci_hcd: connection reset by peer [ 101.130183][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 101.132323][ T1141] vhci_hcd vhci_hcd.2: release socket [ 101.134679][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 101.164448][ T6618] vhci_hcd: connection reset by peer [ 101.167200][ T6241] vhci_hcd vhci_hcd.1: stop threads [ 101.169240][ T6241] vhci_hcd vhci_hcd.1: release socket [ 101.171751][ T5815] usb 40-1: device descriptor read/8, error -110 [ 101.171880][ T6241] vhci_hcd vhci_hcd.1: disconnect device [ 101.575574][ T5815] usb usb40-port1: attempt power cycle [ 101.829476][ T6667] netlink: 3 bytes leftover after parsing attributes in process `syz.0.113'. [ 101.836129][ T6667] batadv1: entered allmulticast mode [ 102.135801][ T5815] usb usb40-port1: unable to enumerate USB device [ 102.344885][ T6245] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 102.985351][ T6678] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 102.987554][ T6678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.990505][ T6678] vhci_hcd vhci_hcd.0: Device attached [ 103.086475][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 103.086490][ T40] audit: type=1326 audit(1768563228.507:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.105241][ T40] audit: type=1326 audit(1768563228.507:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.114943][ T40] audit: type=1326 audit(1768563228.507:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.125522][ T40] audit: type=1326 audit(1768563228.507:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.134885][ T40] audit: type=1326 audit(1768563228.507:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.144856][ T40] audit: type=1326 audit(1768563228.507:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.3.108" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 103.826647][ T6681] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 103.892904][ T6679] vhci_hcd: connection closed [ 103.896407][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 103.899908][ T1141] vhci_hcd vhci_hcd.2: release socket [ 103.901771][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 104.093656][ T6675] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 104.096280][ T6675] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 104.099609][ T6675] vhci_hcd vhci_hcd.0: Device attached [ 104.265334][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.311107][ T6690] vhci_hcd: connection closed [ 104.311392][ T59] vhci_hcd vhci_hcd.1: stop threads [ 104.315861][ T59] vhci_hcd vhci_hcd.1: release socket [ 104.318282][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 105.432198][ T61] libceph: connect (1)[c::]:6789 error -101 [ 105.441962][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 105.923335][ T6704] ceph: No mds server is up or the cluster is laggy [ 105.927955][ T61] libceph: connect (1)[c::]:6789 error -101 [ 105.936334][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 106.055329][ T1459] usb 42-1: device descriptor read/8, error -110 [ 106.449536][ T1459] usb usb42-port1: attempt power cycle [ 107.537272][ T1459] usb usb42-port1: unable to enumerate USB device [ 107.962904][ T6762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.000745][ T6762] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.695615][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.712576][ T6772] netlink: 3 bytes leftover after parsing attributes in process `syz.2.120'. [ 109.718241][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 109.744242][ T6773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.804145][ T6772] batadv1: entered allmulticast mode [ 110.331100][ T6777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.930453][ T6791] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 112.397847][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 112.430922][ T6796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.127'. [ 112.867861][ T6796] /dev/sr0: Can't open blockdev [ 113.856897][ T6802] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 113.858945][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.861407][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 113.868009][ T6809] vhci_hcd: connection closed [ 113.868905][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 113.872268][ T1242] vhci_hcd vhci_hcd.2: release socket [ 113.874075][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 114.398981][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 114.411868][ T6816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.944172][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.287679][ T6849] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 116.290063][ T6849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.293196][ T6849] vhci_hcd vhci_hcd.0: Device attached [ 116.584974][ T1459] usb 42-1: SetAddress Request (14) to port 0 [ 116.593202][ T1459] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 116.667138][ T6848] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 116.669222][ T6848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 116.671812][ T6848] vhci_hcd vhci_hcd.0: Device attached [ 116.816978][ T6848] netlink: 'syz.0.140': attribute type 2 has an invalid length. [ 116.856704][ T6858] netlink: 52 bytes leftover after parsing attributes in process `syz.3.142'. [ 116.934835][ T34] usb 38-1: SetAddress Request (10) to port 0 [ 116.937022][ T34] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 116.956262][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 116.969330][ T6858] netlink: 72 bytes leftover after parsing attributes in process `syz.3.142'. [ 117.215690][ T6863] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 117.218380][ T6863] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.235950][ T6858] /dev/sr0: Can't open blockdev [ 117.242401][ T6863] vhci_hcd vhci_hcd.0: Device attached [ 117.275655][ T6850] vhci_hcd: connection reset by peer [ 117.300449][ T6241] vhci_hcd vhci_hcd.2: stop threads [ 117.302172][ T6241] vhci_hcd vhci_hcd.2: release socket [ 117.304107][ T6241] vhci_hcd vhci_hcd.2: disconnect device [ 117.514859][ T6725] usb 40-1: SetAddress Request (11) to port 0 [ 117.517542][ T6725] usb 40-1: new SuperSpeed USB device number 11 using vhci_hcd [ 117.526177][ T6854] vhci_hcd: connection reset by peer [ 117.534378][ T82] vhci_hcd vhci_hcd.0: stop threads [ 117.537020][ T82] vhci_hcd vhci_hcd.0: release socket [ 117.544933][ T82] vhci_hcd vhci_hcd.0: disconnect device [ 117.895305][ T6869] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 117.897420][ T6869] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.901337][ T6869] vhci_hcd vhci_hcd.0: Device attached [ 118.077887][ T6864] vhci_hcd: connection reset by peer [ 118.080305][ T4101] vhci_hcd vhci_hcd.1: stop threads [ 118.082301][ T4101] vhci_hcd vhci_hcd.1: release socket [ 118.084409][ T4101] vhci_hcd vhci_hcd.1: disconnect device [ 118.175903][ T5815] usb 44-1: SetAddress Request (14) to port 0 [ 118.178096][ T5815] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 118.720794][ T6879] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 118.722819][ T6879] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.736603][ T6870] vhci_hcd: connection reset by peer [ 118.749803][ T1183] vhci_hcd vhci_hcd.3: stop threads [ 118.752032][ T1183] vhci_hcd vhci_hcd.3: release socket [ 118.754355][ T1183] vhci_hcd vhci_hcd.3: disconnect device [ 118.755643][ T6879] vhci_hcd vhci_hcd.0: Device attached [ 119.395538][ T6880] vhci_hcd: connection closed [ 119.395920][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 119.399330][ T4007] vhci_hcd vhci_hcd.0: release socket [ 119.401115][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 119.875306][ T61] libceph: connect (1)[c::]:6789 error -101 [ 119.878571][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 119.903898][ T6893] ceph: No mds server is up or the cluster is laggy [ 120.449598][ T6900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.313206][ T6905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.467867][ T6904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.539613][ T6904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.595687][ T6904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.664845][ T1459] usb 42-1: device descriptor read/8, error -110 [ 121.692130][ T6904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.756884][ T4007] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.767758][ T4007] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.776147][ T4007] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.787167][ T4101] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.055264][ T34] usb 38-1: device descriptor read/8, error -110 [ 122.058899][ T1459] usb usb42-port1: attempt power cycle [ 122.452469][ T34] usb usb38-port1: attempt power cycle [ 122.614846][ T6725] usb 40-1: device descriptor read/8, error -110 [ 122.618761][ T1459] usb usb42-port1: unable to enumerate USB device [ 123.026284][ T6725] usb usb40-port1: attempt power cycle [ 123.065400][ T34] usb usb38-port1: unable to enumerate USB device [ 123.201179][ T6923] netlink: 52 bytes leftover after parsing attributes in process `syz.0.153'. [ 123.262208][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 123.269568][ T6928] netlink: 72 bytes leftover after parsing attributes in process `syz.0.153'. [ 123.296374][ T5815] usb 44-1: device descriptor read/8, error -110 [ 123.588024][ T6725] usb usb40-port1: unable to enumerate USB device [ 123.745578][ T5815] usb usb44-port1: attempt power cycle [ 124.649872][ T6928] /dev/sr0: Can't open blockdev [ 124.679181][ T6935] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 124.681338][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.684779][ T6936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 124.686986][ T6936] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.690886][ T6936] vhci_hcd vhci_hcd.0: Device attached [ 124.699458][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 124.965678][ T5815] usb usb44-port1: unable to enumerate USB device [ 125.074958][ T10] usb 42-1: SetAddress Request (18) to port 0 [ 125.077730][ T10] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 125.084937][ T34] usb 40-1: SetAddress Request (15) to port 0 [ 125.087608][ T34] usb 40-1: new SuperSpeed USB device number 15 using vhci_hcd [ 125.111408][ T6945] comedi comedi0: Minor 47 could not be opened [ 125.434782][ T6937] vhci_hcd: connection reset by peer [ 125.445009][ T12] vhci_hcd vhci_hcd.2: stop threads [ 125.447091][ T12] vhci_hcd vhci_hcd.2: release socket [ 125.449519][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 126.546695][ T6938] vhci_hcd: connection reset by peer [ 126.549322][ T6245] vhci_hcd vhci_hcd.1: stop threads [ 126.551544][ T6245] vhci_hcd vhci_hcd.1: release socket [ 126.553952][ T6245] vhci_hcd vhci_hcd.1: disconnect device [ 127.099969][ T6948] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 127.102206][ T6948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.105080][ T6948] vhci_hcd vhci_hcd.0: Device attached [ 127.245370][ T6949] vhci_hcd: connection closed [ 127.275798][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 127.279937][ T1141] vhci_hcd vhci_hcd.3: release socket [ 127.286481][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 127.522692][ T6958] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 129.302830][ T6973] ceph: No mds server is up or the cluster is laggy [ 129.315209][ T61] libceph: connect (1)[c::]:6789 error -101 [ 129.317827][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 129.506076][ T6964] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 129.508783][ T6964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 129.519910][ T6964] vhci_hcd vhci_hcd.0: Device attached [ 129.729412][ T6964] netlink: 'syz.1.164': attribute type 2 has an invalid length. [ 130.058480][ T6989] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 130.061241][ T6989] netlink: 224 bytes leftover after parsing attributes in process `syz.2.168'. [ 130.080890][ T6981] vhci_hcd: connection closed [ 130.090466][ T12] vhci_hcd vhci_hcd.1: stop threads [ 130.094973][ T12] vhci_hcd vhci_hcd.1: release socket [ 130.099421][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 130.145463][ T34] usb 40-1: device descriptor read/8, error -110 [ 130.199887][ T10] usb 42-1: device descriptor read/8, error -110 [ 130.538154][ T34] usb usb40-port1: attempt power cycle [ 130.587364][ T10] usb usb42-port1: attempt power cycle [ 130.828785][ T7000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.125489][ T34] usb usb40-port1: unable to enumerate USB device [ 131.176485][ T7006] syz.0.170 (7006): /proc/6998/oom_adj is deprecated, please use /proc/6998/oom_score_adj instead. [ 131.225690][ T10] usb usb42-port1: unable to enumerate USB device [ 132.081293][ T7015] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 132.084076][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.093688][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 132.124235][ T7018] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 132.127079][ T7018] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.141819][ T7018] vhci_hcd vhci_hcd.0: Device attached [ 132.377307][ T34] usb 44-1: SetAddress Request (19) to port 0 [ 132.379979][ T34] usb 44-1: new SuperSpeed USB device number 19 using vhci_hcd [ 132.424887][ T6179] usb 40-1: SetAddress Request (19) to port 0 [ 132.427338][ T6179] usb 40-1: new SuperSpeed USB device number 19 using vhci_hcd [ 132.572032][ T7016] vhci_hcd: connection reset by peer [ 132.574457][ T12] vhci_hcd vhci_hcd.3: stop threads [ 132.576413][ T12] vhci_hcd vhci_hcd.3: release socket [ 132.578167][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 132.789234][ T7019] vhci_hcd: connection reset by peer [ 132.792367][ T12] vhci_hcd vhci_hcd.1: stop threads [ 132.794563][ T12] vhci_hcd vhci_hcd.1: release socket [ 132.797087][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 133.643644][ T7032] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 133.646462][ T7032] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.650199][ T7032] vhci_hcd vhci_hcd.0: Device attached [ 133.665525][ T7031] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 133.668292][ T7031] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 133.676555][ T7031] vhci_hcd vhci_hcd.0: Device attached [ 134.184849][ T5993] usb 42-1: SetAddress Request (22) to port 0 [ 134.187495][ T5815] usb 38-1: SetAddress Request (14) to port 0 [ 134.190107][ T5815] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 134.193384][ T5993] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 134.294668][ T7033] vhci_hcd: connection closed [ 135.051682][ T46] vhci_hcd vhci_hcd.0: stop threads [ 135.057603][ T46] vhci_hcd vhci_hcd.0: release socket [ 135.059389][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 135.280331][ T5815] usb 38-1: enqueue for inactive port 0 [ 135.412751][ T7047] capability: warning: `syz.3.179' uses deprecated v2 capabilities in a way that may be insecure [ 135.544563][ T7034] vhci_hcd: connection reset by peer [ 135.552414][ T46] vhci_hcd vhci_hcd.2: stop threads [ 135.554232][ T46] vhci_hcd vhci_hcd.2: release socket [ 135.556150][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 135.655219][ T7051] mmap: syz.1.180 (7051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.675703][ T5815] usb usb38-port1: attempt power cycle [ 136.098787][ T7059] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 136.100904][ T7059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 136.103817][ T7059] vhci_hcd vhci_hcd.0: Device attached [ 136.119835][ T7059] netlink: 9 bytes leftover after parsing attributes in process `syz.1.181'. [ 136.142209][ T7059] 0: renamed from hsr_slave_1 (while UP) [ 136.163790][ T7059] 0: entered allmulticast mode [ 136.172601][ T7059] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 136.265640][ T5815] usb usb38-port1: unable to enumerate USB device [ 136.400218][ T7066] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 136.873158][ T7071] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.161234][ T7060] vhci_hcd: connection closed [ 137.162180][ T59] vhci_hcd vhci_hcd.1: stop threads [ 137.167146][ T59] vhci_hcd vhci_hcd.1: release socket [ 137.174508][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 137.414828][ T34] usb 44-1: device descriptor read/8, error -110 [ 137.424322][ T7077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.185'. [ 137.453539][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 137.478030][ T7077] netlink: 72 bytes leftover after parsing attributes in process `syz.2.185'. [ 137.497363][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.497723][ T6179] usb 40-1: device descriptor read/8, error -110 [ 137.499419][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.665622][ T7077] /dev/sr0: Can't open blockdev [ 137.815408][ T34] usb usb44-port1: attempt power cycle [ 138.017885][ T6179] usb usb40-port1: attempt power cycle [ 138.124028][ T7090] input: syz1 as /devices/virtual/input/input8 [ 138.159339][ T7085] ceph: No mds server is up or the cluster is laggy [ 138.187184][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 138.189690][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 138.289691][ T7094] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 138.291908][ T7094] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 138.295863][ T7094] vhci_hcd vhci_hcd.0: Device attached [ 138.464876][ T34] usb 44-1: SetAddress Request (22) to port 0 [ 138.467418][ T34] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 138.581268][ T6179] usb usb40-port1: unable to enumerate USB device [ 138.772622][ T7095] vhci_hcd: connection reset by peer [ 138.777105][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 138.778875][ T1160] vhci_hcd vhci_hcd.3: release socket [ 138.780788][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 139.407582][ T7110] netlink: 'syz.1.190': attribute type 4 has an invalid length. [ 140.185625][ T7118] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 140.188710][ T7118] netlink: 224 bytes leftover after parsing attributes in process `syz.3.191'. [ 140.304976][ T5993] usb 42-1: device descriptor read/8, error -110 [ 140.698420][ T5993] usb usb42-port1: attempt power cycle [ 141.202771][ T7134] input: syz1 as /devices/virtual/input/input9 [ 141.290291][ T5993] usb usb42-port1: unable to enumerate USB device [ 141.538427][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 141.716632][ T7140] netlink: 'syz.0.202': attribute type 4 has an invalid length. [ 141.756376][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.494841][ T34] usb 44-1: device descriptor read/8, error -110 [ 143.611785][ T34] usb usb44-port1: unable to enumerate USB device [ 144.926255][ T7156] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 144.928419][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 144.933262][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 145.040196][ T7148] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 145.066849][ T7156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 145.069675][ T7164] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 145.071782][ T7164] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.087080][ T7164] vhci_hcd vhci_hcd.0: Device attached [ 145.204899][ T34] usb 38-1: SetAddress Request (18) to port 0 [ 145.206985][ T34] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 145.354977][ T5986] usb 42-1: SetAddress Request (26) to port 0 [ 145.357758][ T5986] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd [ 145.453918][ T7160] vhci_hcd: connection reset by peer [ 145.456738][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 145.464812][ T1141] vhci_hcd vhci_hcd.0: release socket [ 145.469307][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 145.818446][ T7165] vhci_hcd: connection reset by peer [ 145.828447][ T59] vhci_hcd vhci_hcd.2: stop threads [ 145.830705][ T59] vhci_hcd vhci_hcd.2: release socket [ 145.833498][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 146.419228][ T7181] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 146.421923][ T7181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.204'. [ 146.831112][ T7193] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 150.077705][ T7223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 150.079853][ T7223] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 150.085416][ T7223] vhci_hcd vhci_hcd.0: Device attached [ 150.192535][ T7222] x_tables: duplicate underflow at hook 1 [ 150.206210][ T7222] hub 8-0:1.0: USB hub found [ 150.213574][ T7222] hub 8-0:1.0: 1 port detected [ 150.464888][ T5986] usb 42-1: device descriptor read/8, error -110 [ 150.821762][ T7224] vhci_hcd: connection reset by peer [ 150.836763][ T4101] vhci_hcd vhci_hcd.0: stop threads [ 150.838477][ T4101] vhci_hcd vhci_hcd.0: release socket [ 150.841284][ T34] usb 38-1: device descriptor read/8, error -110 [ 150.846493][ T4101] vhci_hcd vhci_hcd.0: disconnect device [ 150.885641][ T5986] usb usb42-port1: attempt power cycle [ 151.356396][ T34] usb usb38-port1: attempt power cycle [ 151.608333][ T5986] usb usb42-port1: unable to enumerate USB device [ 151.915366][ T34] usb usb38-port1: unable to enumerate USB device [ 152.148785][ T7257] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 152.150866][ T7257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.161197][ T7257] vhci_hcd vhci_hcd.0: Device attached [ 152.427758][ T10] usb 40-1: SetAddress Request (23) to port 0 [ 152.430275][ T10] usb 40-1: new SuperSpeed USB device number 23 using vhci_hcd [ 152.584829][ T6024] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.738609][ T6024] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 152.738637][ T6024] usb 7-1: config 160 has no interface number 0 [ 152.738662][ T6024] usb 7-1: config 160 interface 200 has no altsetting 0 [ 152.740517][ T6024] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 152.740539][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.740555][ T6024] usb 7-1: Product: syz [ 152.740568][ T6024] usb 7-1: Manufacturer: syz [ 152.740579][ T6024] usb 7-1: SerialNumber: syz [ 152.745297][ T7267] process 'syz.3.222' launched './file0' with NULL argv: empty string added [ 152.991144][ T7258] vhci_hcd: connection reset by peer [ 152.993767][ T4586] vhci_hcd vhci_hcd.1: stop threads [ 152.996154][ T4586] vhci_hcd vhci_hcd.1: release socket [ 152.999768][ T4586] vhci_hcd vhci_hcd.1: disconnect device [ 155.056552][ T6024] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.059263][ T6024] usb 7-1: MIDIStreaming interface descriptor not found [ 155.085714][ T6024] usb 7-1: USB disconnect, device number 2 [ 156.321181][ T7285] ceph: No mds server is up or the cluster is laggy [ 156.324530][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 156.326924][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 156.585144][ T7157] libceph: connect (1)[c::]:6789 error -101 [ 156.587799][ T7157] libceph: mon0 (1)[c::]:6789 connect error [ 156.637082][ T7292] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 156.639839][ T7292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.225'. [ 156.977395][ T7297] smc: removing ib device syz2 [ 157.400096][ T7305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 157.402721][ T7305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.410482][ T7305] vhci_hcd vhci_hcd.0: Device attached [ 157.449546][ T7308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 157.451617][ T7308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.454561][ T7308] vhci_hcd vhci_hcd.0: Device attached [ 157.496200][ T10] usb 40-1: device descriptor read/8, error -110 [ 157.736821][ T34] usb 42-1: SetAddress Request (30) to port 0 [ 157.742150][ T34] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd [ 157.746570][ T6725] usb 38-1: SetAddress Request (22) to port 0 [ 157.749651][ T6725] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 157.886117][ T10] usb usb40-port1: attempt power cycle [ 158.063376][ T7306] vhci_hcd: connection reset by peer [ 158.067480][ T6245] vhci_hcd vhci_hcd.2: stop threads [ 158.069444][ T6245] vhci_hcd vhci_hcd.2: release socket [ 158.072580][ T6245] vhci_hcd vhci_hcd.2: disconnect device [ 158.110806][ T7309] vhci_hcd: connection reset by peer [ 158.114148][ T46] vhci_hcd vhci_hcd.0: stop threads [ 158.119116][ T46] vhci_hcd vhci_hcd.0: release socket [ 158.121976][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 158.458774][ T10] usb usb40-port1: unable to enumerate USB device [ 159.012874][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.018129][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.021276][ T7326] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.024494][ T7326] UDF-fs: Scanning with blocksize 512 failed [ 159.026993][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.031206][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.034236][ T7326] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.037851][ T7326] UDF-fs: Scanning with blocksize 1024 failed [ 159.040496][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.043627][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.046992][ T7326] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.049570][ T7326] UDF-fs: Scanning with blocksize 2048 failed [ 159.053094][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 159.056998][ T7326] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 159.060119][ T7326] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 159.062597][ T7326] UDF-fs: Scanning with blocksize 4096 failed [ 159.064691][ T7326] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 159.123996][ T7326] block nbd3: NBD_DISCONNECT [ 160.202130][ T7157] libceph: connect (1)[c::]:6789 error -101 [ 160.205521][ T7157] libceph: mon0 (1)[c::]:6789 connect error [ 160.236738][ T7343] ceph: No mds server is up or the cluster is laggy [ 160.467565][ T7157] libceph: connect (1)[c::]:6789 error -101 [ 160.477198][ T7157] libceph: mon0 (1)[c::]:6789 connect error [ 162.777972][ T34] usb 42-1: device descriptor read/8, error -110 [ 163.111270][ T6725] usb 38-1: device descriptor read/8, error -110 [ 163.145141][ T7374] input: syz1 as /devices/virtual/input/input10 [ 163.396210][ T34] usb usb42-port1: attempt power cycle [ 163.546873][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 163.580961][ T6725] usb usb38-port1: attempt power cycle [ 164.021795][ T34] usb usb42-port1: unable to enumerate USB device [ 164.230986][ T6725] usb usb38-port1: unable to enumerate USB device [ 166.856677][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 166.993938][ T7409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.746757][ T7404] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.848301][ T7404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.474606][ T7404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.562292][ T7404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.687317][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.728381][ T1141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.782328][ T1141] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.828676][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.550882][ T7439] input: syz1 as /devices/virtual/input/input11 [ 170.678410][ T7444] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.257'. [ 171.418415][ T7457] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 171.420582][ T7457] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.423352][ T7457] vhci_hcd vhci_hcd.0: Device attached [ 171.607416][ T7463] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 171.610385][ T7463] netlink: 224 bytes leftover after parsing attributes in process `syz.2.260'. [ 171.664831][ T5986] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 171.694959][ T5815] usb 44-1: SetAddress Request (23) to port 0 [ 171.697657][ T5815] usb 44-1: new SuperSpeed USB device number 23 using vhci_hcd [ 171.824814][ T5986] usb 6-1: Using ep0 maxpacket: 32 [ 171.828975][ T5986] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 171.833431][ T5986] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 171.838666][ T5986] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.843191][ T5986] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 171.851189][ T5986] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 171.855414][ T5986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.859478][ T5986] usb 6-1: Product: syz [ 171.861272][ T5986] usb 6-1: Manufacturer: syz [ 171.863192][ T5986] usb 6-1: SerialNumber: syz [ 171.874579][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 171.881346][ T5986] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input12 [ 171.991142][ T7461] vhci_hcd: connection reset by peer [ 171.993181][ T6245] vhci_hcd vhci_hcd.3: stop threads [ 171.995510][ T6245] vhci_hcd vhci_hcd.3: release socket [ 171.997619][ T6245] vhci_hcd vhci_hcd.3: disconnect device [ 172.001170][ T7468] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 172.006839][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.262'. [ 172.010703][ T7468] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 172.105250][ T5986] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 172.108843][ T5986] (id 0x00) [ 172.166080][ T5986] rc_core: IR keymap rc-imon-pad not found [ 172.167989][ T5986] Registered IR keymap rc-empty [ 172.169591][ T5986] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 172.172861][ T5986] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.306138][ T5986] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 172.313677][ T5986] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input13 [ 172.325964][ T5986] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:2> initialized [ 172.793397][ T6725] usb 6-1: USB disconnect, device number 2 [ 172.794007][ T7460] imon:send_packet: packet tx failed (-71) [ 172.905148][ T7460] imon:vfd_write: send packet #1 failed [ 173.604252][ T7482] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 173.607103][ T7482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 173.614119][ T7482] vhci_hcd vhci_hcd.0: Device attached [ 173.660892][ T7485] usbip_core: unknown command [ 173.662427][ T7485] vhci_hcd: unknown pdu 3587178197 [ 173.664096][ T7485] usbip_core: unknown command [ 173.720927][ T6245] vhci_hcd vhci_hcd.2: stop threads [ 173.725208][ T7489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 173.727344][ T7489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 173.739579][ T6245] vhci_hcd vhci_hcd.2: release socket [ 173.750877][ T7490] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.775053][ T6245] vhci_hcd vhci_hcd.2: disconnect device [ 173.840067][ T7489] vhci_hcd vhci_hcd.0: Device attached [ 173.865926][ T7490] bond1 (unregistering): Released all slaves [ 174.155670][ T6006] usb 38-1: SetAddress Request (26) to port 0 [ 174.158423][ T6006] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 174.201144][ T7502] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 174.464233][ T7491] vhci_hcd: connection reset by peer [ 174.467363][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 174.469287][ T4007] vhci_hcd vhci_hcd.0: release socket [ 174.471159][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 176.172322][ T7535] 9pnet_virtio: no channels available for device syz [ 176.194992][ T5993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 176.468467][ T5993] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 176.471406][ T5993] usb 8-1: config 160 has no interface number 0 [ 176.473522][ T5993] usb 8-1: config 160 interface 200 has no altsetting 0 [ 176.538445][ T5993] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 176.538939][ T7536] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 176.541384][ T5993] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.544152][ T7536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.548073][ T5993] usb 8-1: Product: syz [ 176.552633][ T7536] vhci_hcd vhci_hcd.0: Device attached [ 176.556433][ T5993] usb 8-1: Manufacturer: syz [ 176.559714][ T5993] usb 8-1: SerialNumber: syz [ 176.709821][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.273'. [ 176.775284][ T5815] usb 44-1: device descriptor read/8, error -110 [ 176.854992][ T6725] usb 42-1: SetAddress Request (34) to port 0 [ 176.857640][ T6725] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd [ 177.175957][ T5815] usb usb44-port1: attempt power cycle [ 177.747092][ T5815] usb usb44-port1: unable to enumerate USB device [ 177.815517][ T7537] vhci_hcd: connection reset by peer [ 177.818919][ T12] vhci_hcd vhci_hcd.2: stop threads [ 177.821018][ T12] vhci_hcd vhci_hcd.2: release socket [ 177.823417][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 177.847851][ T7547] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 177.868851][ T7547] bond1 (unregistering): Released all slaves [ 177.997898][ T7553] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.628431][ T5993] usb 8-1: USB disconnect, device number 3 [ 178.871887][ T7568] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 179.267459][ T6006] usb 38-1: device descriptor read/8, error -110 [ 179.411884][ T7573] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 179.414081][ T7573] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 179.447552][ T7573] vhci_hcd vhci_hcd.0: Device attached [ 179.678468][ T6006] usb usb38-port1: attempt power cycle [ 179.721023][ T5993] usb 40-1: SetAddress Request (27) to port 0 [ 179.725138][ T5993] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd [ 180.145407][ T7574] vhci_hcd: connection reset by peer [ 180.148483][ T12] vhci_hcd vhci_hcd.1: stop threads [ 180.158364][ T12] vhci_hcd vhci_hcd.1: release socket [ 180.163156][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 180.165870][ T7576] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 180.170333][ T7576] block device autoloading is deprecated and will be removed. [ 180.255576][ T6006] usb usb38-port1: unable to enumerate USB device [ 180.535648][ T5951] Bluetooth: hci3: command 0x0406 tx timeout [ 180.539369][ T5951] Bluetooth: hci1: command 0x0406 tx timeout [ 180.544819][ T5951] Bluetooth: hci0: command 0x0406 tx timeout [ 182.108437][ T6725] usb 42-1: device descriptor read/8, error -110 [ 182.968378][ T6725] usb usb42-port1: attempt power cycle [ 183.547145][ T6725] usb usb42-port1: unable to enumerate USB device [ 183.767319][ T7609] bridge0: entered allmulticast mode [ 183.769708][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 183.772990][ T7609] bridge_slave_1: left allmulticast mode [ 183.775795][ T7609] bridge_slave_1: left promiscuous mode [ 183.778747][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.882467][ T7609] bridge_slave_0: left allmulticast mode [ 183.885140][ T7609] bridge_slave_0: left promiscuous mode [ 183.893106][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.019328][ T7609] bridge0 (unregistering): left allmulticast mode [ 184.310671][ T7616] netlink: 'syz.0.291': attribute type 4 has an invalid length. [ 184.788975][ T5993] usb 40-1: device descriptor read/8, error -110 [ 185.184049][ T7629] pim6reg: entered allmulticast mode [ 185.188177][ T5993] usb usb40-port1: attempt power cycle [ 185.785252][ T5993] usb usb40-port1: unable to enumerate USB device [ 187.311164][ T40] audit: type=1326 audit(2000000014.269:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.297" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f71579 code=0x0 [ 188.932682][ T7652] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.718273][ T40] audit: type=1326 audit(2000000016.679:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.726458][ T40] audit: type=1326 audit(2000000016.679:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.734592][ T40] audit: type=1326 audit(2000000016.679:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.743149][ T40] audit: type=1326 audit(2000000016.679:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.750045][ T40] audit: type=1326 audit(2000000016.679:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.757061][ T40] audit: type=1326 audit(2000000016.679:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.763923][ T40] audit: type=1326 audit(2000000016.689:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.770996][ T40] audit: type=1326 audit(2000000016.689:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 189.778668][ T40] audit: type=1326 audit(2000000016.689:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.2.299" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 194.169488][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 194.198806][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 198.939221][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.941767][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.451249][ T7754] netlink: 'syz.2.317': attribute type 4 has an invalid length. [ 199.455305][ T7765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 199.457423][ T7765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 199.460228][ T7765] vhci_hcd vhci_hcd.0: Device attached [ 199.471313][ T7765] netlink: 9 bytes leftover after parsing attributes in process `syz.3.318'. [ 199.474363][ T7765] 0: renamed from hsr_slave_1 (while UP) [ 199.482488][ T7765] 0: entered allmulticast mode [ 199.485226][ T7765] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 199.706897][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.316'. [ 199.724940][ T6725] usb 44-1: SetAddress Request (27) to port 0 [ 199.732653][ T6725] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 200.225182][ T7766] vhci_hcd: connection reset by peer [ 200.233273][ T1183] vhci_hcd vhci_hcd.3: stop threads [ 200.236322][ T1183] vhci_hcd vhci_hcd.3: release socket [ 200.239239][ T1183] vhci_hcd vhci_hcd.3: disconnect device [ 200.356895][ T7776] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 200.359421][ T7776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.362466][ T7776] vhci_hcd vhci_hcd.0: Device attached [ 200.644852][ T10] usb 42-1: SetAddress Request (38) to port 0 [ 200.646906][ T10] usb 42-1: new SuperSpeed USB device number 38 using vhci_hcd [ 200.918488][ T7777] vhci_hcd: connection reset by peer [ 200.921883][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 200.924179][ T1242] vhci_hcd vhci_hcd.2: release socket [ 200.927294][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 201.878253][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 201.880524][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.883135][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 201.929641][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 201.931795][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.934480][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 201.958429][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 201.961258][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 201.974932][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 201.978764][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(14) [ 201.980927][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.983324][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 202.006750][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 202.008893][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.011713][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 202.015975][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(18) [ 202.018095][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.034827][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 202.055411][ T7795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.075175][ T6032] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 202.087476][ T7795] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.115453][ T7795] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(24) [ 202.117597][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.144868][ T6032] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 202.150264][ T7817] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.195092][ T7817] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(31) [ 202.197952][ T7817] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.216575][ T7817] vhci_hcd vhci_hcd.0: Device attached [ 202.285097][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 202.315449][ T7814] vhci_hcd: connection closed [ 202.316254][ T7811] vhci_hcd: connection closed [ 202.316475][ T7806] vhci_hcd: connection closed [ 202.317459][ T7802] vhci_hcd: connection closed [ 202.317906][ T7796] vhci_hcd: connection reset by peer [ 202.324987][ T7809] vhci_hcd: connection closed [ 202.325070][ T7804] vhci_hcd: connection closed [ 202.337556][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.341361][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.343235][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.345469][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.347246][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.350241][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.352413][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.354187][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.358704][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.362954][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.367966][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.370992][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.375865][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.380086][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.380676][ T7823] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 202.383662][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.390857][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.394103][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.397266][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.400521][ T4007] vhci_hcd vhci_hcd.0: stop threads [ 202.403686][ T4007] vhci_hcd vhci_hcd.0: release socket [ 202.408184][ T4007] vhci_hcd vhci_hcd.0: disconnect device [ 202.413618][ T7823] bond1: entered promiscuous mode [ 202.416323][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.444637][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.447881][ T7823] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 202.451845][ T7823] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 202.467766][ T7823] bond1: (slave gre1): making interface the new active one [ 202.470790][ T7823] gre1: entered promiscuous mode [ 202.477225][ T7823] bond1: (slave gre1): Enslaving as an active interface with an up link [ 202.509941][ T7826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 202.512713][ T7826] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 202.527149][ T7826] vhci_hcd vhci_hcd.0: Device attached [ 202.553935][ T7826] random: crng reseeded on system resumption [ 202.824837][ T5993] usb 40-1: SetAddress Request (31) to port 0 [ 202.827526][ T5993] usb 40-1: new SuperSpeed USB device number 31 using vhci_hcd [ 202.917813][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 202.922205][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 202.926850][ T7834] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 202.930063][ T7834] UDF-fs: Scanning with blocksize 512 failed [ 202.933650][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 202.939026][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 202.943138][ T7834] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 202.946963][ T7834] UDF-fs: Scanning with blocksize 1024 failed [ 202.950216][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 202.954385][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 202.958477][ T7834] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 202.961801][ T7834] UDF-fs: Scanning with blocksize 2048 failed [ 202.966764][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 202.971558][ T7834] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 202.976413][ T7834] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 202.979619][ T7834] UDF-fs: Scanning with blocksize 4096 failed [ 202.982211][ T7834] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 203.057239][ T7827] vhci_hcd: connection reset by peer [ 203.060890][ T1183] vhci_hcd vhci_hcd.1: stop threads [ 203.062835][ T1183] vhci_hcd vhci_hcd.1: release socket [ 203.065354][ T1183] vhci_hcd vhci_hcd.1: disconnect device [ 203.070152][ T7818] vhci_hcd: connection closed [ 203.070337][ T1242] vhci_hcd vhci_hcd.0: stop threads [ 203.094886][ T1242] vhci_hcd vhci_hcd.0: release socket [ 203.105701][ T1242] vhci_hcd vhci_hcd.0: disconnect device [ 203.555243][ T7834] block nbd2: NBD_DISCONNECT [ 204.625077][ T7857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 204.627205][ T7857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.630235][ T7857] vhci_hcd vhci_hcd.0: Device attached [ 204.649485][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 204.649501][ T40] audit: type=1800 audit(2000000031.609:73): pid=7857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.332" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 204.784863][ T6725] usb 44-1: device descriptor read/8, error -110 [ 204.965675][ T7862] loop7: detected capacity change from 0 to 16384 [ 205.185436][ T6725] usb usb44-port1: attempt power cycle [ 205.275378][ T7863] loop7: detected capacity change from 16384 to 0 [ 205.540188][ T7858] vhci_hcd: connection closed [ 205.540367][ T46] vhci_hcd vhci_hcd.2: stop threads [ 205.543456][ T46] vhci_hcd vhci_hcd.2: release socket [ 205.547742][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 205.734971][ T10] usb 42-1: device descriptor read/8, error -110 [ 205.745743][ T6725] usb usb44-port1: unable to enumerate USB device [ 206.135750][ T10] usb usb42-port1: attempt power cycle [ 206.967821][ T10] usb usb42-port1: unable to enumerate USB device [ 207.315233][ T6032] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 207.657942][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.662448][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.668184][ T7913] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.673721][ T7913] UDF-fs: Scanning with blocksize 512 failed [ 207.678976][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.682587][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.686218][ T7913] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.688924][ T7913] UDF-fs: Scanning with blocksize 1024 failed [ 207.691376][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.695059][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.698827][ T7913] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.701562][ T7913] UDF-fs: Scanning with blocksize 2048 failed [ 207.704041][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 207.708573][ T7913] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 207.712029][ T7913] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 207.714980][ T7913] UDF-fs: Scanning with blocksize 4096 failed [ 207.717279][ T7913] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 207.759122][ T7913] block nbd0: NBD_DISCONNECT [ 207.894895][ T5993] usb 40-1: device descriptor read/8, error -110 [ 208.630078][ T40] audit: type=1326 audit(2000000035.589:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.645037][ T40] audit: type=1326 audit(2000000035.589:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.653296][ T40] audit: type=1326 audit(2000000035.589:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.660540][ T40] audit: type=1326 audit(2000000035.589:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.677680][ T40] audit: type=1326 audit(2000000035.589:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.687386][ T5993] usb usb40-port1: attempt power cycle [ 208.691185][ T40] audit: type=1326 audit(2000000035.609:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.700642][ T40] audit: type=1326 audit(2000000035.609:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.708917][ T40] audit: type=1326 audit(2000000035.609:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 208.717120][ T40] audit: type=1326 audit(2000000035.609:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.105604][ T9] usb usb38-port1: attempt power cycle [ 209.285564][ T5993] usb usb40-port1: unable to enumerate USB device [ 209.382418][ T7933] bond2: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 209.544903][ T7933] bond2 (unregistering): Released all slaves [ 209.665779][ T9] usb usb38-port1: unable to enumerate USB device [ 209.697253][ T40] kauditd_printk_skb: 166 callbacks suppressed [ 209.697263][ T40] audit: type=1326 audit(2000000036.329:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.718404][ T40] audit: type=1326 audit(2000000036.669:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f715a7 code=0x7ffc0000 [ 209.751815][ T40] audit: type=1326 audit(2000000036.669:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.763904][ T40] audit: type=1326 audit(2000000036.669:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f715a7 code=0x7ffc0000 [ 209.775256][ T40] audit: type=1326 audit(2000000036.669:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.782158][ T40] audit: type=1326 audit(2000000036.669:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f715a7 code=0x7ffc0000 [ 209.789331][ T40] audit: type=1326 audit(2000000036.669:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.798781][ T40] audit: type=1326 audit(2000000036.669:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f715a7 code=0x7ffc0000 [ 209.807533][ T40] audit: type=1326 audit(2000000036.669:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f71579 code=0x7ffc0000 [ 209.816246][ T40] audit: type=1326 audit(2000000036.669:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7925 comm="syz.2.345" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f715a7 code=0x7ffc0000 [ 210.248626][ T7951] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 210.251237][ T7951] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.254168][ T7951] vhci_hcd vhci_hcd.0: Device attached [ 210.585014][ T9] usb 38-1: SetAddress Request (34) to port 0 [ 210.587757][ T9] usb 38-1: new SuperSpeed USB device number 34 using vhci_hcd [ 210.796855][ T7952] vhci_hcd: connection reset by peer [ 210.806415][ T59] vhci_hcd vhci_hcd.0: stop threads [ 210.808071][ T59] vhci_hcd vhci_hcd.0: release socket [ 210.810275][ T59] vhci_hcd vhci_hcd.0: disconnect device [ 212.005752][ T7970] block device autoloading is deprecated and will be removed. [ 212.777776][ T7983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 212.780573][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 212.784389][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 212.821578][ T7983] netlink: 9 bytes leftover after parsing attributes in process `syz.0.352'. [ 212.834964][ T7983] 0: renamed from hsr_slave_1 (while UP) [ 212.887834][ T7983] 0: entered allmulticast mode [ 212.946492][ T7983] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 213.006969][ T5986] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 213.167041][ T5986] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 213.170517][ T5986] usb 8-1: config 160 has no interface number 0 [ 213.173362][ T5986] usb 8-1: config 160 interface 200 has no altsetting 0 [ 213.179923][ T5986] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 213.183261][ T5986] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.186006][ T5986] usb 8-1: Product: syz [ 213.187326][ T5986] usb 8-1: Manufacturer: syz [ 213.188816][ T5986] usb 8-1: SerialNumber: syz [ 213.509039][ T7984] vhci_hcd: connection closed [ 213.509243][ T46] vhci_hcd vhci_hcd.0: stop threads [ 213.512576][ T46] vhci_hcd vhci_hcd.0: release socket [ 213.514351][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 214.300472][ T7995] netlink: 'syz.0.355': attribute type 15 has an invalid length. [ 214.303875][ T7995] netlink: 666 bytes leftover after parsing attributes in process `syz.0.355'. [ 215.518433][ T5986] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 215.521075][ T5986] usb 8-1: MIDIStreaming interface descriptor not found [ 215.585476][ T5986] usb 8-1: USB disconnect, device number 4 [ 215.655214][ T9] usb 38-1: device descriptor read/8, error -110 [ 216.048336][ T9] usb usb38-port1: attempt power cycle [ 216.612618][ T9] usb usb38-port1: unable to enumerate USB device [ 217.045737][ T8027] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 217.047744][ T8027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.050447][ T8027] vhci_hcd vhci_hcd.0: Device attached [ 217.105684][ T8027] netlink: 'syz.0.362': attribute type 2 has an invalid length. [ 217.314887][ T5986] usb 38-1: SetAddress Request (38) to port 0 [ 217.317393][ T5986] usb 38-1: new SuperSpeed USB device number 38 using vhci_hcd [ 217.767358][ T40] kauditd_printk_skb: 944 callbacks suppressed [ 217.767373][ T40] audit: type=1326 audit(2000000044.729:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8014 comm="syz.1.360" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 219.187198][ T8028] vhci_hcd: connection reset by peer [ 219.191281][ T46] vhci_hcd vhci_hcd.0: stop threads [ 219.196238][ T46] vhci_hcd vhci_hcd.0: release socket [ 219.202199][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 219.250092][ T8038] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 219.252678][ T8038] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.256602][ T8038] vhci_hcd vhci_hcd.0: Device attached [ 219.614987][ T5993] usb 40-1: SetAddress Request (35) to port 0 [ 219.617604][ T5993] usb 40-1: new SuperSpeed USB device number 35 using vhci_hcd [ 219.688166][ T8044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 219.690304][ T8044] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.693687][ T8044] vhci_hcd vhci_hcd.0: Device attached [ 219.956318][ T60] usb 42-1: SetAddress Request (42) to port 0 [ 219.958702][ T60] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 220.099639][ T8039] vhci_hcd: connection reset by peer [ 220.102757][ T4007] vhci_hcd vhci_hcd.1: stop threads [ 220.104505][ T4007] vhci_hcd vhci_hcd.1: release socket [ 220.116083][ T4007] vhci_hcd vhci_hcd.1: disconnect device [ 220.242514][ T8053] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.247046][ T8053] bond1 (unregistering): Released all slaves [ 220.360633][ T8045] vhci_hcd: connection reset by peer [ 220.362895][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 220.366571][ T1242] vhci_hcd vhci_hcd.2: release socket [ 220.368464][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 222.548860][ T5986] usb 38-1: device descriptor read/8, error -110 [ 222.674793][ T6050] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 222.834784][ T6050] usb 6-1: Using ep0 maxpacket: 8 [ 222.839055][ T6050] usb 6-1: config 0 has an invalid interface number: 32 but max is 3 [ 222.841764][ T6050] usb 6-1: config 0 has an invalid interface number: 210 but max is 3 [ 222.844537][ T6050] usb 6-1: config 0 has an invalid interface number: 128 but max is 3 [ 222.847493][ T6050] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 222.850467][ T6050] usb 6-1: config 0 has an invalid interface number: 172 but max is 3 [ 222.853611][ T6050] usb 6-1: config 0 has no interface number 0 [ 222.856225][ T6050] usb 6-1: config 0 has no interface number 1 [ 222.858456][ T6050] usb 6-1: config 0 has no interface number 2 [ 222.860590][ T6050] usb 6-1: config 0 has no interface number 3 [ 222.864967][ T6050] usb 6-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 222.868465][ T6050] usb 6-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.872900][ T6050] usb 6-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 222.885017][ T6050] usb 6-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 222.889587][ T6050] usb 6-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 222.894011][ T6050] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 222.910736][ T6050] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 222.914320][ T6050] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 222.924828][ T6050] usb 6-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 222.929551][ T6050] usb 6-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 222.933878][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 222.944837][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 222.948708][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 222.952863][ T6050] usb 6-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 222.958560][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 222.963146][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 222.965748][ T5986] usb usb38-port1: attempt power cycle [ 222.968158][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 222.974474][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 222.979251][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 222.983846][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 222.988601][ T6050] usb 6-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 222.993080][ T6050] usb 6-1: config 0 interface 210 has no altsetting 0 [ 222.996122][ T6050] usb 6-1: config 0 interface 172 has no altsetting 0 [ 223.001146][ T6050] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 223.005156][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.008635][ T6050] usb 6-1: Product: ᐌ [ 223.010447][ T6050] usb 6-1: Manufacturer: ᠁ [ 223.012485][ T6050] usb 6-1: SerialNumber: ц [ 223.016836][ T6050] usb 6-1: config 0 descriptor?? [ 223.021221][ T8073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.249983][ T8073] : renamed from lo (while UP) [ 223.536689][ T5986] usb usb38-port1: unable to enumerate USB device [ 223.668874][ T8090] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 223.670996][ T8090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 223.732680][ T40] audit: type=1326 audit(2000000050.689:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8083 comm="syz.0.373" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 223.866068][ T8090] vhci_hcd vhci_hcd.0: Device attached [ 224.338597][ T8099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 224.341540][ T8099] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.347358][ T8091] vhci_hcd: connection closed [ 224.347874][ T1242] vhci_hcd vhci_hcd.2: stop threads [ 224.351716][ T1242] vhci_hcd vhci_hcd.2: release socket [ 224.354074][ T1242] vhci_hcd vhci_hcd.2: disconnect device [ 224.472696][ T8099] vhci_hcd vhci_hcd.0: Device attached [ 224.704836][ T5993] usb 40-1: device descriptor read/8, error -110 [ 224.744821][ T8061] usb 44-1: SetAddress Request (31) to port 0 [ 224.753158][ T8061] usb 44-1: new SuperSpeed USB device number 31 using vhci_hcd [ 224.756815][ T8099] netlink: 'syz.3.375': attribute type 2 has an invalid length. [ 225.014881][ T60] usb 42-1: device descriptor read/8, error -110 [ 225.107667][ T5993] usb usb40-port1: attempt power cycle [ 225.248893][ T8100] vhci_hcd: connection reset by peer [ 225.253235][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 225.257037][ T1141] vhci_hcd vhci_hcd.3: release socket [ 225.263547][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 225.273566][ T6050] powermate 6-1:0.32: probe with driver powermate failed with error -5 [ 225.308780][ T6050] powermate 6-1:0.210: probe with driver powermate failed with error -5 [ 225.326017][ T6050] powermate 6-1:0.128: probe with driver powermate failed with error -5 [ 225.344230][ T6050] powermate 6-1:0.172: probe with driver powermate failed with error -5 [ 225.355770][ T6050] usb 6-1: USB disconnect, device number 3 [ 225.415765][ T60] usb usb42-port1: attempt power cycle [ 225.484874][ T5986] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 225.675762][ T5993] usb usb40-port1: unable to enumerate USB device [ 226.785695][ T60] usb usb42-port1: unable to enumerate USB device [ 227.253957][ T8130] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt:u' [ 227.259157][ T8130] CPU: 3 UID: 0 PID: 8130 Comm: syz.2.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.259177][ T8130] Tainted: [L]=SOFTLOCKUP [ 227.259180][ T8130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 227.259187][ T8130] Call Trace: [ 227.259192][ T8130] [ 227.259197][ T8130] dump_stack_lvl+0x16c/0x1f0 [ 227.259217][ T8130] sysfs_warn_dup+0x7f/0xa0 [ 227.259232][ T8130] sysfs_do_create_link_sd+0x124/0x140 [ 227.259246][ T8130] sysfs_create_link+0x61/0xc0 [ 227.259258][ T8130] device_add+0x652/0x1980 [ 227.259275][ T8130] ? __pfx_device_add+0x10/0x10 [ 227.259289][ T8130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.259307][ T8130] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 227.259325][ T8130] wiphy_register+0x1ea1/0x2cc0 [ 227.259336][ T8130] ? __rtnl_unlock+0x68/0xf0 [ 227.259346][ T8130] ? netif_receive_skb_list+0x3e0/0x460 [ 227.259362][ T8130] ? __pfx_wiphy_register+0x10/0x10 [ 227.259377][ T8130] ? __asan_memset+0x23/0x50 [ 227.259408][ T8130] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 227.259422][ T8130] ieee80211_register_hw+0x2bb2/0x4160 [ 227.259440][ T8130] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 227.259452][ T8130] ? __pfx___debug_object_init+0x10/0x10 [ 227.259474][ T8130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.259489][ T8130] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 227.259511][ T8130] ? __hrtimer_setup+0x176/0x280 [ 227.259525][ T8130] mac80211_hwsim_new_radio+0x3323/0x5150 [ 227.259547][ T8130] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 227.259562][ T8130] ? __asan_memcpy+0x3c/0x60 [ 227.259577][ T8130] hwsim_new_radio_nl+0xba2/0x1330 [ 227.259593][ T8130] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.259612][ T8130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 227.259625][ T8130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 227.259641][ T8130] genl_family_rcv_msg_doit+0x209/0x2f0 [ 227.259653][ T8130] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.259664][ T8130] ? genl_get_cmd+0x194/0x580 [ 227.259681][ T8130] ? bpf_lsm_capable+0x9/0x10 [ 227.259694][ T8130] ? security_capable+0x7e/0x260 [ 227.259705][ T8130] ? ns_capable+0xd7/0x110 [ 227.259719][ T8130] genl_rcv_msg+0x55c/0x800 [ 227.259731][ T8130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.259743][ T8130] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.259763][ T8130] netlink_rcv_skb+0x158/0x420 [ 227.259780][ T8130] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.259792][ T8130] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.259813][ T8130] ? netlink_deliver_tap+0x1ae/0xd30 [ 227.259830][ T8130] genl_rcv+0x28/0x40 [ 227.259838][ T8130] netlink_unicast+0x5aa/0x870 [ 227.259856][ T8130] ? __pfx_netlink_unicast+0x10/0x10 [ 227.259877][ T8130] netlink_sendmsg+0x8c8/0xdd0 [ 227.259894][ T8130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.259911][ T8130] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 227.259925][ T8130] ____sys_sendmsg+0xa5d/0xc30 [ 227.259937][ T8130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.259946][ T8130] ? get_compat_msghdr+0x11a/0x170 [ 227.259962][ T8130] ? __pfx_futex_wake_mark+0x10/0x10 [ 227.259978][ T8130] ___sys_sendmsg+0x134/0x1d0 [ 227.259993][ T8130] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.260006][ T8130] ? futex_private_hash_put+0x160/0x1b0 [ 227.260023][ T8130] ? find_held_lock+0x2b/0x80 [ 227.260081][ T8130] __sys_sendmsg+0x16d/0x220 [ 227.260098][ T8130] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.260112][ T8130] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 227.260137][ T8130] __do_fast_syscall_32+0xe8/0x680 [ 227.260150][ T8130] do_fast_syscall_32+0x32/0x80 [ 227.260161][ T8130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 227.260174][ T8130] RIP: 0023:0xf7f71579 [ 227.260183][ T8130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 227.260193][ T8130] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 227.260202][ T8130] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000100 [ 227.260209][ T8130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.260214][ T8130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 227.260220][ T8130] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 227.260225][ T8130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 227.260239][ T8130] [ 229.312356][ T8150] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 229.315215][ T8150] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.347442][ T8150] vhci_hcd vhci_hcd.0: Device attached [ 229.614905][ T5986] usb 38-1: SetAddress Request (42) to port 0 [ 229.617090][ T5986] usb 38-1: new SuperSpeed USB device number 42 using vhci_hcd [ 229.815456][ T8061] usb 44-1: device descriptor read/8, error -110 [ 229.972290][ T8152] vhci_hcd: connection reset by peer [ 229.975189][ T46] vhci_hcd vhci_hcd.0: stop threads [ 229.977792][ T46] vhci_hcd vhci_hcd.0: release socket [ 229.980224][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 230.224980][ T8061] usb usb44-port1: attempt power cycle [ 230.528085][ T8165] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 230.530185][ T8165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 230.600137][ T8165] vhci_hcd vhci_hcd.0: Device attached [ 230.854455][ T8061] usb usb44-port1: unable to enumerate USB device [ 231.005377][ T6077] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 231.512149][ T8179] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 231.721190][ T8179] bond1 (unregistering): Released all slaves [ 232.496020][ T8182] : renamed from bond_slave_0 (while UP) [ 233.020373][ T8166] vhci_hcd: connection reset by peer [ 233.022597][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 233.024964][ T1160] vhci_hcd vhci_hcd.3: release socket [ 233.027363][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 234.207831][ T5942] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 234.212039][ T5942] CPU: 2 UID: 0 PID: 5942 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.212066][ T5942] Tainted: [L]=SOFTLOCKUP [ 234.212072][ T5942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 234.212085][ T5942] Workqueue: hci0 hci_rx_work [ 234.212115][ T5942] Call Trace: [ 234.212121][ T5942] [ 234.212129][ T5942] dump_stack_lvl+0x16c/0x1f0 [ 234.212160][ T5942] sysfs_warn_dup+0x7f/0xa0 [ 234.212183][ T5942] sysfs_create_dir_ns+0x24b/0x2b0 [ 234.212205][ T5942] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 234.212237][ T5942] ? find_held_lock+0x2b/0x80 [ 234.212263][ T5942] ? do_raw_spin_unlock+0x172/0x230 [ 234.212287][ T5942] kobject_add_internal+0x2c4/0x9d0 [ 234.212318][ T5942] kobject_add+0x16e/0x240 [ 234.212338][ T5942] ? __pfx_kobject_add+0x10/0x10 [ 234.212361][ T5942] ? kobject_put+0xaf/0x6f0 [ 234.212376][ T5942] ? _raw_spin_unlock+0x28/0x50 [ 234.212412][ T5942] device_add+0x288/0x1980 [ 234.212442][ T5942] ? __pfx_dev_set_name+0x10/0x10 [ 234.212460][ T5942] ? __pfx_device_add+0x10/0x10 [ 234.212485][ T5942] ? mgmt_send_event_skb+0x2fb/0x460 [ 234.212517][ T5942] hci_conn_add_sysfs+0x1a8/0x260 [ 234.212546][ T5942] le_conn_complete_evt+0x11ed/0x1fa0 [ 234.212578][ T5942] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 234.212610][ T5942] hci_le_conn_complete_evt+0x23c/0x3a0 [ 234.212640][ T5942] hci_le_meta_evt+0x357/0x610 [ 234.212666][ T5942] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 234.212693][ T5942] hci_event_packet+0x685/0x1210 [ 234.212716][ T5942] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 234.212742][ T5942] ? __pfx_hci_event_packet+0x10/0x10 [ 234.212769][ T5942] ? kcov_remote_start+0x399/0x680 [ 234.212795][ T5942] ? lockdep_hardirqs_on+0x7c/0x110 [ 234.212817][ T5942] hci_rx_work+0x2c9/0x1020 [ 234.212846][ T5942] process_one_work+0x9ba/0x1b20 [ 234.212876][ T5942] ? __pfx_process_one_work+0x10/0x10 [ 234.212903][ T5942] ? assign_work+0x1a0/0x250 [ 234.212925][ T5942] worker_thread+0x6c8/0xf10 [ 234.212951][ T5942] ? __kthread_parkme+0x19e/0x250 [ 234.212978][ T5942] ? __pfx_worker_thread+0x10/0x10 [ 234.212995][ T5942] kthread+0x3c5/0x780 [ 234.213015][ T5942] ? __pfx_kthread+0x10/0x10 [ 234.213034][ T5942] ? rcu_is_watching+0x12/0xc0 [ 234.213059][ T5942] ? __pfx_kthread+0x10/0x10 [ 234.213076][ T5942] ret_from_fork+0x983/0xb10 [ 234.213095][ T5942] ? __pfx_ret_from_fork+0x10/0x10 [ 234.213114][ T5942] ? native_load_gs_index+0x5b/0xd0 [ 234.213136][ T5942] ? __switch_to+0x7af/0x10d0 [ 234.213156][ T5942] ? __pfx_kthread+0x10/0x10 [ 234.213175][ T5942] ret_from_fork_asm+0x1a/0x30 [ 234.213213][ T5942] [ 234.213304][ T5942] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.334832][ T5942] Bluetooth: hci0: failed to register connection device [ 234.606144][ T8208] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 234.608976][ T8208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.613196][ T8208] vhci_hcd vhci_hcd.0: Device attached [ 234.694917][ T5986] usb 38-1: device descriptor read/8, error -110 [ 234.955082][ T6689] usb 42-1: SetAddress Request (46) to port 0 [ 234.975138][ T6689] usb 42-1: new SuperSpeed USB device number 46 using vhci_hcd [ 235.097411][ T5986] usb usb38-port1: attempt power cycle [ 235.448023][ T8224] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 235.567833][ T8209] vhci_hcd: connection reset by peer [ 235.570754][ T1160] vhci_hcd vhci_hcd.2: stop threads [ 235.573737][ T8224] bond1 (unregistering): Released all slaves [ 235.575672][ T1160] vhci_hcd vhci_hcd.2: release socket [ 235.575713][ T1160] vhci_hcd vhci_hcd.2: disconnect device [ 235.675623][ T5986] usb usb38-port1: unable to enumerate USB device [ 235.946977][ T8235] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 235.949744][ T8235] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.954828][ T8235] vhci_hcd vhci_hcd.0: Device attached [ 236.049349][ T8235] md: md2 stopped. [ 236.124899][ T6077] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 236.214842][ T8061] usb 38-1: SetAddress Request (46) to port 0 [ 236.217599][ T8061] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 236.837299][ T8236] vhci_hcd: connection reset by peer [ 236.839318][ T1160] vhci_hcd vhci_hcd.0: stop threads [ 236.841011][ T1160] vhci_hcd vhci_hcd.0: release socket [ 236.843380][ T1160] vhci_hcd vhci_hcd.0: disconnect device [ 237.326031][ T8255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 237.328848][ T8255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 237.332784][ T8255] vhci_hcd vhci_hcd.0: Device attached [ 237.830634][ T8256] vhci_hcd: connection closed [ 237.831285][ T6245] vhci_hcd vhci_hcd.2: stop threads [ 237.846281][ T6245] vhci_hcd vhci_hcd.2: release socket [ 237.849514][ T6245] vhci_hcd vhci_hcd.2: disconnect device [ 239.261473][ T8274] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 239.263737][ T8274] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.275020][ T8272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.333908][ T8274] vhci_hcd vhci_hcd.0: Device attached [ 239.367492][ T8271] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 239.369603][ T8271] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 239.398042][ T8271] vhci_hcd vhci_hcd.0: Device attached [ 239.470780][ T8274] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 239.594956][ T5986] usb 40-1: SetAddress Request (39) to port 0 [ 239.597643][ T5986] usb 40-1: new SuperSpeed USB device number 39 using vhci_hcd [ 239.674919][ T5993] usb 44-1: SetAddress Request (35) to port 0 [ 239.677545][ T5993] usb 44-1: new SuperSpeed USB device number 35 using vhci_hcd [ 240.018709][ T8275] vhci_hcd: connection reset by peer [ 240.023823][ T8277] vhci_hcd: connection reset by peer [ 240.026546][ T46] vhci_hcd vhci_hcd.1: stop threads [ 240.028783][ T46] vhci_hcd vhci_hcd.1: release socket [ 240.032860][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 240.045106][ T46] vhci_hcd vhci_hcd.3: stop threads [ 240.047315][ T46] vhci_hcd vhci_hcd.3: release socket [ 240.049618][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 240.055716][ T6689] usb 42-1: device descriptor read/8, error -110 [ 240.185671][ T8287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.454960][ T5942] Bluetooth: hci0: command 0x0406 tx timeout [ 240.517647][ T6689] usb usb42-port1: attempt power cycle [ 241.215603][ T8305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 241.218308][ T8305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 241.225613][ T8305] vhci_hcd vhci_hcd.0: Device attached [ 241.264901][ T8061] usb 38-1: device descriptor read/8, error -110 [ 241.345619][ T6689] usb usb42-port1: unable to enumerate USB device [ 241.675671][ T8061] usb usb38-port1: attempt power cycle [ 242.068662][ T8309] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.072912][ T8309] block device autoloading is deprecated and will be removed. [ 242.195262][ T8306] vhci_hcd: connection closed [ 242.195498][ T6241] vhci_hcd vhci_hcd.3: stop threads [ 242.198687][ T6241] vhci_hcd vhci_hcd.3: release socket [ 242.200493][ T6241] vhci_hcd vhci_hcd.3: disconnect device [ 242.275281][ T8061] usb usb38-port1: unable to enumerate USB device [ 243.592259][ T8326] comedi comedi0: Minor 47 could not be opened [ 243.834955][ T8328] netlink: 3 bytes leftover after parsing attributes in process `syz.1.421'. [ 243.868896][ T8328] batadv1: entered allmulticast mode [ 244.719372][ T5986] usb 40-1: device descriptor read/8, error -110 [ 244.784958][ T5993] usb 44-1: device descriptor read/8, error -110 [ 245.106647][ T5986] usb usb40-port1: attempt power cycle [ 245.176339][ T5993] usb usb44-port1: attempt power cycle [ 245.695234][ T5986] usb usb40-port1: unable to enumerate USB device [ 245.745490][ T5993] usb usb44-port1: unable to enumerate USB device [ 246.120679][ T8352] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 246.138122][ T8358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 246.140312][ T8358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.143553][ T8358] vhci_hcd vhci_hcd.0: Device attached [ 246.174800][ T8352] bond1 (unregistering): Released all slaves [ 246.228545][ T8353] netlink: 'syz.3.430': attribute type 15 has an invalid length. [ 246.231781][ T8353] netlink: 666 bytes leftover after parsing attributes in process `syz.3.430'. [ 246.326046][ T8357] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 246.406043][ T9] usb 42-1: SetAddress Request (50) to port 0 [ 246.408178][ T9] usb 42-1: new SuperSpeed USB device number 50 using vhci_hcd [ 246.432138][ T8358] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 247.006127][ T8360] vhci_hcd: connection reset by peer [ 247.008785][ T6286] vhci_hcd vhci_hcd.2: stop threads [ 247.010655][ T6286] vhci_hcd vhci_hcd.2: release socket [ 247.012595][ T6286] vhci_hcd vhci_hcd.2: disconnect device [ 248.587761][ T8378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 248.589910][ T8378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 248.593071][ T8378] vhci_hcd vhci_hcd.0: Device attached [ 248.728142][ T8378] md: md2 stopped. [ 249.202673][ T8380] vhci_hcd: connection closed [ 249.205717][ T46] vhci_hcd vhci_hcd.2: stop threads [ 249.209004][ T46] vhci_hcd vhci_hcd.2: release socket [ 249.211035][ T46] vhci_hcd vhci_hcd.2: disconnect device [ 249.223205][ T8389] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 249.225659][ T8389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 249.235087][ T8389] vhci_hcd vhci_hcd.0: Device attached [ 249.261073][ T40] audit: type=1800 audit(2000000076.219:1205): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.437" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 249.604836][ T10] usb 40-1: SetAddress Request (43) to port 0 [ 249.606802][ T10] usb 40-1: new SuperSpeed USB device number 43 using vhci_hcd [ 249.793751][ T8395] comedi comedi0: Minor 47 could not be opened [ 250.024182][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 250.028638][ T5945] CPU: 3 UID: 0 PID: 5945 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.028657][ T5945] Tainted: [L]=SOFTLOCKUP [ 250.028660][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 250.028668][ T5945] Workqueue: hci1 hci_rx_work [ 250.028688][ T5945] Call Trace: [ 250.028693][ T5945] [ 250.028698][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 250.028717][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 250.028730][ T5945] sysfs_create_dir_ns+0x24b/0x2b0 [ 250.028742][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 250.028754][ T5945] ? find_held_lock+0x2b/0x80 [ 250.028769][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 250.028782][ T5945] kobject_add_internal+0x2c4/0x9d0 [ 250.028796][ T5945] kobject_add+0x16e/0x240 [ 250.028808][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 250.028821][ T5945] ? kobject_put+0xaf/0x6f0 [ 250.028830][ T5945] ? _raw_spin_unlock+0x28/0x50 [ 250.028848][ T5945] device_add+0x288/0x1980 [ 250.028864][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 250.028874][ T5945] ? __pfx_device_add+0x10/0x10 [ 250.028889][ T5945] ? mgmt_send_event_skb+0x2fb/0x460 [ 250.028908][ T5945] hci_conn_add_sysfs+0x1a8/0x260 [ 250.028924][ T5945] le_conn_complete_evt+0x11ed/0x1fa0 [ 250.028942][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 250.028960][ T5945] hci_le_conn_complete_evt+0x23c/0x3a0 [ 250.028978][ T5945] hci_le_meta_evt+0x357/0x610 [ 250.028992][ T5945] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 250.029008][ T5945] hci_event_packet+0x685/0x1210 [ 250.029023][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 250.029038][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 250.029053][ T5945] ? kcov_remote_start+0x399/0x680 [ 250.029068][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.029081][ T5945] hci_rx_work+0x2c9/0x1020 [ 250.029097][ T5945] process_one_work+0x9ba/0x1b20 [ 250.029120][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 250.029137][ T5945] ? assign_work+0x1a0/0x250 [ 250.029149][ T5945] worker_thread+0x6c8/0xf10 [ 250.029165][ T5945] ? __kthread_parkme+0x19e/0x250 [ 250.029180][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 250.029192][ T5945] kthread+0x3c5/0x780 [ 250.029203][ T5945] ? __pfx_kthread+0x10/0x10 [ 250.029215][ T5945] ? rcu_is_watching+0x12/0xc0 [ 250.029230][ T5945] ? __pfx_kthread+0x10/0x10 [ 250.029241][ T5945] ret_from_fork+0x983/0xb10 [ 250.029252][ T5945] ? __pfx_ret_from_fork+0x10/0x10 [ 250.029263][ T5945] ? native_load_gs_index+0x5b/0xd0 [ 250.029275][ T5945] ? __switch_to+0x7af/0x10d0 [ 250.029287][ T5945] ? __pfx_kthread+0x10/0x10 [ 250.029298][ T5945] ret_from_fork_asm+0x1a/0x30 [ 250.029320][ T5945] [ 250.029334][ T5945] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.135565][ T5945] Bluetooth: hci1: failed to register connection device [ 250.754196][ T8390] vhci_hcd: connection reset by peer [ 250.757091][ T6241] vhci_hcd vhci_hcd.1: stop threads [ 250.759442][ T6241] vhci_hcd vhci_hcd.1: release socket [ 250.761830][ T6241] vhci_hcd vhci_hcd.1: disconnect device [ 252.227274][ T9] usb 42-1: device descriptor read/8, error -110 [ 252.498064][ T8415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 252.498082][ T8415] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.498250][ T8415] vhci_hcd vhci_hcd.0: Device attached [ 252.517154][ T8415] random: crng reseeded on system resumption [ 252.648024][ T9] usb usb42-port1: attempt power cycle [ 252.794889][ T8061] usb 44-1: SetAddress Request (39) to port 0 [ 252.797488][ T8061] usb 44-1: new SuperSpeed USB device number 39 using vhci_hcd [ 253.227167][ T9] usb usb42-port1: unable to enumerate USB device [ 253.914785][ T8416] vhci_hcd: connection reset by peer [ 253.975094][ T12] vhci_hcd vhci_hcd.3: stop threads [ 253.977501][ T12] vhci_hcd vhci_hcd.3: release socket [ 253.980216][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 254.268942][ T8430] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 254.271080][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 254.295054][ T8430] vhci_hcd vhci_hcd.0: Device attached [ 254.545141][ T5993] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 254.571714][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 254.694891][ T10] usb 40-1: device descriptor read/8, error -110 [ 255.095235][ T10] usb usb40-port1: attempt power cycle [ 255.484813][ T5986] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 255.735214][ T5986] usb 7-1: config 0 has no interfaces? [ 255.737584][ T5986] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 255.741363][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.757224][ T5986] usb 7-1: config 0 descriptor?? [ 255.971516][ T6077] usb 7-1: USB disconnect, device number 3 [ 256.013722][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.016430][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.132704][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.141609][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.225655][ T10] usb usb40-port1: unable to enumerate USB device [ 256.239152][ T8431] vhci_hcd: connection reset by peer [ 256.242663][ T6241] vhci_hcd vhci_hcd.0: stop threads [ 256.248650][ T6241] vhci_hcd vhci_hcd.0: release socket [ 256.254467][ T6241] vhci_hcd vhci_hcd.0: disconnect device [ 256.284514][ T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.287719][ T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.290472][ T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.293217][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.304842][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 257.051499][ T8466] netlink: 72 bytes leftover after parsing attributes in process `syz.3.453'. [ 257.894911][ T8061] usb 44-1: device descriptor read/8, error -110 [ 257.966327][ T8473] netlink: 84 bytes leftover after parsing attributes in process `syz.3.456'. [ 258.204792][ T6050] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 258.286078][ T8061] usb usb44-port1: attempt power cycle [ 258.431824][ T6050] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 258.444785][ T6050] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 258.449070][ T6050] usb 8-1: config 0 interface 0 has no altsetting 0 [ 258.454335][ T6050] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.457663][ T6050] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.460280][ T6050] usb 8-1: Product: syz [ 258.461652][ T6050] usb 8-1: Manufacturer: syz [ 258.463164][ T6050] usb 8-1: SerialNumber: syz [ 258.516662][ T6050] usb 8-1: config 0 descriptor?? [ 258.529875][ T6050] usb 8-1: selecting invalid altsetting 0 [ 259.007040][ T6689] usb 8-1: USB disconnect, device number 5 [ 259.046121][ T8061] usb usb44-port1: unable to enumerate USB device [ 259.061958][ T8483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.615920][ T7157] libceph: connect (1)[c::]:6789 error -101 [ 259.644878][ T5993] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 259.647519][ T7157] libceph: mon0 (1)[c::]:6789 connect error [ 259.917667][ T7157] libceph: connect (1)[c::]:6789 error -101 [ 259.922040][ T7157] libceph: mon0 (1)[c::]:6789 connect error [ 259.952393][ T8499] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 259.954559][ T8499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 259.958561][ T8499] vhci_hcd vhci_hcd.0: Device attached [ 260.073789][ T8488] ceph: No mds server is up or the cluster is laggy [ 260.235683][ T5986] usb 44-1: SetAddress Request (43) to port 0 [ 260.238473][ T5986] usb 44-1: new SuperSpeed USB device number 43 using vhci_hcd [ 260.378656][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.381368][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.554986][ T5815] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 260.595188][ T8514] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 260.597279][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 260.617054][ T8500] vhci_hcd: connection reset by peer [ 260.619548][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 260.623552][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 260.625516][ T1141] vhci_hcd vhci_hcd.3: release socket [ 260.627602][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 260.706632][ T5815] usb 5-1: config 0 has no interfaces? [ 260.709011][ T5815] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 260.712764][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.726143][ T5815] usb 5-1: config 0 descriptor?? [ 260.884883][ T5815] usb 40-1: SetAddress Request (47) to port 0 [ 260.887674][ T5815] usb 40-1: new SuperSpeed USB device number 47 using vhci_hcd [ 260.940026][ T8061] usb 5-1: USB disconnect, device number 2 [ 261.051251][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.053883][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.104308][ T8508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.203601][ T6241] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.206818][ T6241] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.209917][ T6241] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.212790][ T6241] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.339549][ T8515] vhci_hcd: connection reset by peer [ 261.342526][ T6241] vhci_hcd vhci_hcd.1: stop threads [ 261.350458][ T6241] vhci_hcd vhci_hcd.1: release socket [ 261.353034][ T6241] vhci_hcd vhci_hcd.1: disconnect device [ 262.643186][ T8528] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 262.645718][ T8528] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 262.650264][ T8528] vhci_hcd vhci_hcd.0: Device attached [ 263.364888][ T8536] vhci_hcd: connection closed [ 263.424879][ T1141] vhci_hcd vhci_hcd.3: stop threads [ 263.429373][ T1141] vhci_hcd vhci_hcd.3: release socket [ 263.432007][ T1141] vhci_hcd vhci_hcd.3: disconnect device [ 263.532894][ T8543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.718716][ T8546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.470'. [ 263.954845][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 264.106201][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 264.110042][ T10] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 264.114323][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.120718][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.124379][ T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 264.128260][ T10] usb 6-1: Product: syz [ 264.130014][ T10] usb 6-1: Manufacturer: syz [ 264.131944][ T10] usb 6-1: SerialNumber: syz [ 264.136311][ T10] usb 6-1: config 0 descriptor?? [ 264.142044][ T10] usb 6-1: selecting invalid altsetting 0 [ 264.250222][ T8547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.910862][ T10] usb 6-1: USB disconnect, device number 4 [ 265.334855][ T5986] usb 44-1: device descriptor read/8, error -110 [ 265.825991][ T5986] usb usb44-port1: attempt power cycle [ 265.975071][ T5815] usb 40-1: device descriptor read/8, error -110 [ 266.375283][ T5815] usb usb40-port1: attempt power cycle [ 266.452585][ T8584] 9pnet_virtio: no channels available for device syz [ 266.618224][ T5986] usb usb44-port1: unable to enumerate USB device [ 266.732797][ T8586] siw: device registration error -23 [ 267.106198][ T5815] usb usb40-port1: unable to enumerate USB device [ 268.991235][ T6050] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 270.064892][ T6050] usb 5-1: Using ep0 maxpacket: 8 [ 270.082296][ T6050] usb 5-1: config 0 has an invalid interface number: 32 but max is 3 [ 270.086548][ T6050] usb 5-1: config 0 has an invalid interface number: 210 but max is 3 [ 270.091843][ T6050] usb 5-1: config 0 has an invalid interface number: 128 but max is 3 [ 270.096995][ T6050] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 270.101581][ T6050] usb 5-1: config 0 has an invalid interface number: 172 but max is 3 [ 270.105547][ T6050] usb 5-1: config 0 has no interface number 0 [ 270.109087][ T6050] usb 5-1: config 0 has no interface number 1 [ 270.113062][ T6050] usb 5-1: config 0 has no interface number 2 [ 270.117533][ T6050] usb 5-1: config 0 has no interface number 3 [ 270.121461][ T6050] usb 5-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 270.126288][ T6050] usb 5-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.132267][ T6050] usb 5-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 270.875161][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.895213][ T8613] batadv_slave_0: entered promiscuous mode [ 270.951182][ T6050] usb 5-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 270.954913][ T6050] usb 5-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 270.959441][ T6050] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 270.963753][ T6050] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 270.971874][ T6050] usb 5-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 270.976047][ T6050] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 270.980358][ T6050] usb 5-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 270.984496][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 270.988290][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 270.992524][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 270.997251][ T6050] usb 5-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 271.001277][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 271.004929][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 271.008332][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 271.011670][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 271.016228][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 271.023501][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 271.028102][ T6050] usb 5-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 271.032309][ T6050] usb 5-1: config 0 interface 210 has no altsetting 0 [ 271.035531][ T6050] usb 5-1: config 0 interface 172 has no altsetting 0 [ 271.071127][ T6050] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 271.114857][ T6050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.118249][ T6050] usb 5-1: Product: ᐌ [ 271.120099][ T6050] usb 5-1: Manufacturer: ᠁ [ 271.121979][ T6050] usb 5-1: SerialNumber: ц [ 271.176117][ T6050] usb 5-1: config 0 descriptor?? [ 271.183292][ T8599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 271.511916][ T8620] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 271.583837][ T8619] : renamed from lo [ 271.692297][ T8615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.792894][ T6050] powermate 5-1:0.32: probe with driver powermate failed with error -5 [ 271.808821][ T6050] powermate 5-1:0.210: probe with driver powermate failed with error -5 [ 271.816380][ T6050] powermate 5-1:0.128: probe with driver powermate failed with error -5 [ 271.827750][ T6050] powermate 5-1:0.172: probe with driver powermate failed with error -5 [ 271.835712][ T6050] usb 5-1: USB disconnect, device number 3 [ 273.129520][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 273.133353][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 273.405154][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 273.448769][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 273.466286][ T8632] ceph: No mds server is up or the cluster is laggy [ 273.782684][ T8644] netlink: 'syz.3.492': attribute type 15 has an invalid length. [ 273.782711][ T8644] netlink: 666 bytes leftover after parsing attributes in process `syz.3.492'. [ 273.894828][ T6050] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 273.966899][ T8652] netlink: 'syz.3.503': attribute type 15 has an invalid length. [ 273.970220][ T8652] netlink: 666 bytes leftover after parsing attributes in process `syz.3.503'. [ 274.044833][ T6050] usb 6-1: Using ep0 maxpacket: 16 [ 274.048381][ T6050] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 274.052912][ T6050] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.059760][ T6050] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.063752][ T6050] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.069066][ T6050] usb 6-1: config 7 interface 0 has no altsetting 0 [ 274.071804][ T6050] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 274.075532][ T6050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.519014][ T6050] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:7.0/0003:0458:5010.0002/input/input14 [ 274.619851][ T6050] kye 0003:0458:5010.0002: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 275.244667][ T8666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 275.247484][ T8666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 275.270086][ T8666] vhci_hcd vhci_hcd.0: Device attached [ 275.408028][ T8671] comedi comedi0: Minor 47 could not be opened [ 275.545001][ T5815] usb 40-1: SetAddress Request (51) to port 0 [ 275.547859][ T5815] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 277.321921][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 277.401807][ T8675] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 277.404579][ T8675] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.413219][ T8669] vhci_hcd: connection reset by peer [ 277.422041][ T1242] vhci_hcd vhci_hcd.1: stop threads [ 277.424283][ T1242] vhci_hcd vhci_hcd.1: release socket [ 277.428171][ T7157] usb 6-1: USB disconnect, device number 5 [ 277.434291][ T1242] vhci_hcd vhci_hcd.1: disconnect device [ 277.441632][ T8675] vhci_hcd vhci_hcd.0: Device attached [ 277.704822][ T5986] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 277.754858][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 277.766375][ T10] usb 8-1: config 0 has an invalid interface number: 32 but max is 3 [ 277.775176][ T10] usb 8-1: config 0 has an invalid interface number: 210 but max is 3 [ 277.779300][ T10] usb 8-1: config 0 has an invalid interface number: 128 but max is 3 [ 277.783636][ T10] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 277.787078][ T10] usb 8-1: config 0 has an invalid interface number: 172 but max is 3 [ 277.804936][ T10] usb 8-1: config 0 has no interface number 0 [ 277.806887][ T10] usb 8-1: config 0 has no interface number 1 [ 277.808839][ T10] usb 8-1: config 0 has no interface number 2 [ 277.810736][ T10] usb 8-1: config 0 has no interface number 3 [ 277.812724][ T10] usb 8-1: config 0 interface 32 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 277.816161][ T10] usb 8-1: config 0 interface 32 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 277.824846][ T10] usb 8-1: config 0 interface 210 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 277.834939][ T10] usb 8-1: config 0 interface 210 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 277.838388][ T10] usb 8-1: config 0 interface 210 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 277.841726][ T10] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 277.855311][ T10] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 277.875009][ T10] usb 8-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 277.887192][ T10] usb 8-1: config 0 interface 128 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 277.891809][ T10] usb 8-1: config 0 interface 128 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 277.896628][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 277.901086][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 277.901110][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x8, skipping [ 277.901131][ T10] usb 8-1: config 0 interface 172 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 277.901153][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 277.901171][ T10] usb 8-1: config 0 interface 172 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 277.901188][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 277.901206][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 277.901224][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 277.901242][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 277.901260][ T10] usb 8-1: config 0 interface 172 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 277.901278][ T10] usb 8-1: config 0 interface 210 has no altsetting 0 [ 277.901294][ T10] usb 8-1: config 0 interface 172 has no altsetting 0 [ 277.909053][ T10] usb 8-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=a6.d6 [ 277.909079][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.909096][ T10] usb 8-1: Product: ᐌ [ 277.909109][ T10] usb 8-1: Manufacturer: ᠁ [ 277.909121][ T10] usb 8-1: SerialNumber: ц [ 277.915440][ T10] usb 8-1: config 0 descriptor?? [ 277.916062][ T8665] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 278.091783][ T10] powermate 8-1:0.32: probe with driver powermate failed with error -5 [ 278.095634][ T10] powermate 8-1:0.210: probe with driver powermate failed with error -5 [ 278.098731][ T10] powermate 8-1:0.128: probe with driver powermate failed with error -5 [ 278.111896][ T10] powermate 8-1:0.172: probe with driver powermate failed with error -5 [ 278.117075][ T10] usb 8-1: USB disconnect, device number 6 [ 278.951313][ T8676] vhci_hcd: connection reset by peer [ 278.953504][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 278.955601][ T1141] vhci_hcd vhci_hcd.2: release socket [ 278.957605][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 279.619870][ T8698] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 279.622705][ T8698] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 279.863130][ T6689] libceph: connect (1)[c::]:6789 error -101 [ 279.865995][ T6689] libceph: mon0 (1)[c::]:6789 connect error [ 280.125212][ T6689] libceph: connect (1)[c::]:6789 error -101 [ 280.127929][ T6689] libceph: mon0 (1)[c::]:6789 connect error [ 280.257831][ T8694] ceph: No mds server is up or the cluster is laggy [ 280.615354][ T5815] usb 40-1: device descriptor read/8, error -110 [ 280.626975][ T8713] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 280.629180][ T8713] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 280.632434][ T8713] vhci_hcd vhci_hcd.0: Device attached [ 280.638703][ T8710] input: syz1 as /devices/virtual/input/input15 [ 280.703124][ T8713] bridge_slave_0: left allmulticast mode [ 280.705475][ T8713] bridge_slave_0: left promiscuous mode [ 280.708472][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.875875][ T8713] bridge_slave_1: left allmulticast mode [ 280.878816][ T8713] bridge_slave_1: left promiscuous mode [ 280.883013][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.914909][ T6050] usb 44-1: SetAddress Request (47) to port 0 [ 280.917475][ T6050] usb 44-1: new SuperSpeed USB device number 47 using vhci_hcd [ 280.945815][ T8713] bond0: (slave bond_slave_0): Releasing backup interface [ 281.022257][ T5815] usb usb40-port1: attempt power cycle [ 281.168938][ T8713] bond0: (slave bond_slave_1): Releasing backup interface [ 281.188560][ T8714] vhci_hcd: connection reset by peer [ 281.198622][ T46] vhci_hcd vhci_hcd.3: stop threads [ 281.201278][ T46] vhci_hcd vhci_hcd.3: release socket [ 281.205508][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 281.214054][ T8713] team0: Port device team_slave_0 removed [ 281.222795][ T8713] team0: Port device team_slave_1 removed [ 281.227103][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.229632][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.237668][ T8713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.240182][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.248009][ T8713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.646267][ T5815] usb usb40-port1: unable to enumerate USB device [ 283.235007][ T5986] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 285.752439][ T5945] Bluetooth: unknown link type 128 [ 286.223069][ T6050] usb 44-1: device descriptor read/8, error -110 [ 286.388197][ T5945] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 286.775929][ T6050] usb usb44-port1: attempt power cycle [ 286.786975][ T8753] tipc: Started in network mode [ 286.788750][ T8753] tipc: Node identity 84e, cluster identity 4711 [ 286.790797][ T8753] tipc: Node number set to 2126 [ 286.794489][ T8753] dlm: no local IP address has been set [ 286.797597][ T8753] dlm: cannot start dlm midcomms -107 [ 287.301799][ T8768] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 287.303913][ T8768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 287.334933][ T8768] vhci_hcd vhci_hcd.0: Device attached [ 287.341702][ T8770] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 287.343806][ T8770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 287.345586][ T6050] usb usb44-port1: unable to enumerate USB device [ 287.379648][ T8770] vhci_hcd vhci_hcd.0: Device attached [ 287.547584][ T8770] netlink: 'syz.0.520': attribute type 2 has an invalid length. [ 287.586135][ T5986] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 287.644925][ T5815] usb 38-1: SetAddress Request (50) to port 0 [ 287.647476][ T5815] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 287.824902][ T5945] Bluetooth: hci3: command 0x0406 tx timeout [ 288.787472][ T8772] vhci_hcd: connection reset by peer [ 288.795207][ T1141] vhci_hcd vhci_hcd.0: stop threads [ 288.797622][ T1141] vhci_hcd vhci_hcd.0: release socket [ 288.800044][ T1141] vhci_hcd vhci_hcd.0: disconnect device [ 288.874852][ T8771] vhci_hcd: connection reset by peer [ 288.876957][ T6286] vhci_hcd vhci_hcd.1: stop threads [ 288.878972][ T6286] vhci_hcd vhci_hcd.1: release socket [ 288.880803][ T6286] vhci_hcd vhci_hcd.1: disconnect device [ 292.626989][ T8802] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 292.790764][ T5815] usb 38-1: device descriptor read/8, error -110 [ 292.854983][ T5986] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 293.195304][ T5815] usb usb38-port1: attempt power cycle [ 293.441677][ T8809] : renamed from bond_slave_0 [ 294.074585][ T5815] usb usb38-port1: unable to enumerate USB device [ 294.930323][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 295.081725][ T8825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.529'. [ 295.706540][ T8828] ubi31: attaching mtd0 [ 296.046951][ T8828] ubi31: scanning is finished [ 296.057808][ T8828] ubi31: empty MTD device detected [ 296.274849][ T6050] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 296.420480][ T8838] overlay: ./file0 is not a directory [ 296.455285][ T8828] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 296.461914][ T8828] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 296.464540][ T8828] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 296.469654][ T6050] usb 5-1: Using ep0 maxpacket: 16 [ 296.482874][ T8828] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 296.498685][ T6050] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 296.502373][ T6050] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.504473][ T8828] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 296.512624][ T8828] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 296.514806][ T6050] usb 5-1: Product: syz [ 296.518579][ T6050] usb 5-1: Manufacturer: syz [ 296.522614][ T8828] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1966876241 [ 296.526019][ T8828] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 296.527272][ T6050] usb 5-1: SerialNumber: syz [ 296.531797][ T8839] ubi31: background thread "ubi_bgt31d" started, PID 8839 [ 296.606234][ T6050] usb 5-1: config 0 descriptor?? [ 296.608765][ T8842] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 296.610893][ T8842] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.639049][ T8842] vhci_hcd vhci_hcd.0: Device attached [ 297.034473][ T6050] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 297.044081][ T6050] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.130712][ T6050] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 297.133445][ T6050] usb 5-1: media controller created [ 297.198317][ T6050] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.222100][ T5815] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 297.262577][ T6050] zl10353_read_register: readreg error (reg=127, ret==0) [ 297.268077][ T6050] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 297.272384][ T6050] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 297.749201][ T8843] vhci_hcd: connection reset by peer [ 297.751459][ T1242] vhci_hcd vhci_hcd.3: stop threads [ 297.753246][ T1242] vhci_hcd vhci_hcd.3: release socket [ 297.755612][ T1242] vhci_hcd vhci_hcd.3: disconnect device [ 298.245890][ T8853] ------------[ cut here ]------------ [ 298.247779][ T8853] usb 5-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 298.250560][ T8853] WARNING: drivers/usb/core/urb.c:412 at usb_submit_urb+0x153e/0x1970, CPU#1: syz.2.535/8853 [ 298.253640][ T8853] Modules linked in: [ 298.255498][ T8853] CPU: 1 UID: 0 PID: 8853 Comm: syz.2.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.259754][ T8853] Tainted: [L]=SOFTLOCKUP [ 298.261471][ T8853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.265751][ T8853] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 298.267734][ T8853] Code: 30 48 89 7c 24 38 e8 66 3e aa fa 48 8b 7c 24 38 e8 8c 81 d0 fe 48 89 c6 48 8d 3d d2 c8 80 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 33 3e aa fa 48 8b [ 298.273705][ T8853] RSP: 0018:ffffc90002d8f638 EFLAGS: 00010287 [ 298.275701][ T8853] RAX: ffffffff8c5458c0 RBX: ffff88806a1f7700 RCX: 0000000080000480 [ 298.278206][ T8853] RDX: ffff88806f5b4de0 RSI: ffffffff8c5458c0 RDI: ffffffff9094e880 [ 298.280708][ T8853] RBP: ffff888025666058 R08: 00000000000000c0 R09: 0000000000000000 [ 298.283193][ T8853] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028909d00 [ 298.285679][ T8853] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000480 [ 298.288174][ T8853] FS: 0000000000000000(0000) GS:ffff8880977f9000(0063) knlGS:00000000f5424b40 [ 298.291048][ T8853] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 298.293107][ T8853] CR2: 00000000f7340528 CR3: 0000000012cb6000 CR4: 0000000000352ef0 [ 298.295691][ T8853] Call Trace: [ 298.296790][ T8853] [ 298.297731][ T8853] ? __init_swait_queue_head+0xca/0x150 [ 298.299528][ T8853] usb_start_wait_urb+0x104/0x4e0 [ 298.301169][ T8853] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 298.302989][ T8853] ? __asan_memset+0x23/0x50 [ 298.304533][ T8853] usb_control_msg+0x326/0x4a0 [ 298.306117][ T8853] ? __pfx_usb_control_msg+0x10/0x10 [ 298.307833][ T8853] dtv5100_i2c_msg+0x1fa/0x360 [ 298.309415][ T8853] dtv5100_i2c_xfer+0x1e0/0x420 [ 298.310998][ T8853] __i2c_transfer+0x6b6/0x2100 [ 298.312549][ T8853] ? __do_fast_syscall_32+0xc7/0x680 [ 298.314344][ T8853] ? __pfx___i2c_transfer+0x10/0x10 [ 298.316200][ T8853] i2c_smbus_xfer_emulated+0x230/0x1210 [ 298.317976][ T8853] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 298.320249][ T8853] ? __free_zapped_classes+0x90/0x130 [ 298.322145][ T8853] __i2c_smbus_xfer+0x836/0xf60 [ 298.323894][ T8853] ? mark_held_locks+0x49/0x80 [ 298.325814][ T8853] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.327619][ T8853] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 298.329622][ T8853] ? rt_mutex_slowtrylock+0xc9/0x100 [ 298.331342][ T8853] i2c_smbus_xfer+0x200/0x3c0 [ 298.332884][ T8853] i2cdev_ioctl_smbus+0x441/0x990 [ 298.334570][ T8853] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 298.336503][ T8853] ? __might_fault+0xe3/0x190 [ 298.338019][ T8853] ? __might_fault+0xe3/0x190 [ 298.339527][ T8853] compat_i2cdev_ioctl+0x434/0x530 [ 298.341417][ T8853] ? hook_file_ioctl_common+0x144/0x410 [ 298.343801][ T8853] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 298.346288][ T8853] ? __fget_files+0x20e/0x3c0 [ 298.348317][ T8853] ? __ia32_compat_sys_openat+0x110/0x210 [ 298.350723][ T8853] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 298.353119][ T8853] __ia32_compat_sys_ioctl+0x242/0x370 [ 298.355471][ T8853] __do_fast_syscall_32+0xe8/0x680 [ 298.357710][ T8853] do_fast_syscall_32+0x32/0x80 [ 298.359811][ T8853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.362440][ T8853] RIP: 0023:0xf7f71579 [ 298.364250][ T8853] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.372509][ T8853] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.376151][ T8853] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000720 [ 298.379565][ T8853] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.382881][ T8853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.386294][ T8853] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 298.389780][ T8853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.393211][ T8853] [ 298.394582][ T8853] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.397797][ T8853] CPU: 1 UID: 0 PID: 8853 Comm: syz.2.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.402483][ T8853] Tainted: [L]=SOFTLOCKUP [ 298.404329][ T8853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.408877][ T8853] Call Trace: [ 298.410336][ T8853] [ 298.411653][ T8853] dump_stack_lvl+0x3d/0x1f0 [ 298.413407][ T8853] vpanic+0x640/0x6f0 [ 298.414826][ T8853] ? usb_submit_urb+0x153e/0x1970 [ 298.416538][ T8853] panic+0xca/0xd0 [ 298.417774][ T8853] ? __pfx_panic+0x10/0x10 [ 298.419217][ T8853] check_panic_on_warn+0xab/0xb0 [ 298.420834][ T8853] __warn+0x108/0x3c0 [ 298.422131][ T8853] __report_bug+0x2a0/0x520 [ 298.423712][ T8853] ? usb_submit_urb+0x153e/0x1970 [ 298.425570][ T8853] ? __pfx___report_bug+0x10/0x10 [ 298.427562][ T8853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 298.429982][ T8853] report_bug_entry+0xe1/0x290 [ 298.431962][ T8853] ? usb_submit_urb+0x1549/0x1970 [ 298.434066][ T8853] handle_bug+0x18a/0x260 [ 298.435932][ T8853] exc_invalid_op+0x17/0x50 [ 298.437881][ T8853] asm_exc_invalid_op+0x1a/0x20 [ 298.439907][ T8853] RIP: 0010:usb_submit_urb+0x1549/0x1970 [ 298.441796][ T8853] Code: 30 48 89 7c 24 38 e8 66 3e aa fa 48 8b 7c 24 38 e8 8c 81 d0 fe 48 89 c6 48 8d 3d d2 c8 80 09 48 8b 54 24 30 45 89 e8 44 89 f9 <67> 48 0f b9 3a e9 fd ed ff ff 48 89 7c 24 30 e8 33 3e aa fa 48 8b [ 298.448820][ T8853] RSP: 0018:ffffc90002d8f638 EFLAGS: 00010287 [ 298.450897][ T8853] RAX: ffffffff8c5458c0 RBX: ffff88806a1f7700 RCX: 0000000080000480 [ 298.453468][ T8853] RDX: ffff88806f5b4de0 RSI: ffffffff8c5458c0 RDI: ffffffff9094e880 [ 298.456265][ T8853] RBP: ffff888025666058 R08: 00000000000000c0 R09: 0000000000000000 [ 298.458819][ T8853] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888028909d00 [ 298.461335][ T8853] R13: 00000000000000c0 R14: 0000000000000001 R15: 0000000080000480 [ 298.463865][ T8853] ? usb_submit_urb+0x1534/0x1970 [ 298.465499][ T8853] ? __init_swait_queue_head+0xca/0x150 [ 298.467303][ T8853] usb_start_wait_urb+0x104/0x4e0 [ 298.468982][ T8853] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 298.470750][ T8853] ? __asan_memset+0x23/0x50 [ 298.472267][ T8853] usb_control_msg+0x326/0x4a0 [ 298.473812][ T8853] ? __pfx_usb_control_msg+0x10/0x10 [ 298.475586][ T8853] dtv5100_i2c_msg+0x1fa/0x360 [ 298.477142][ T8853] dtv5100_i2c_xfer+0x1e0/0x420 [ 298.478717][ T8853] __i2c_transfer+0x6b6/0x2100 [ 298.480269][ T8853] ? __do_fast_syscall_32+0xc7/0x680 [ 298.481955][ T8853] ? __pfx___i2c_transfer+0x10/0x10 [ 298.483604][ T8853] i2c_smbus_xfer_emulated+0x230/0x1210 [ 298.485356][ T8853] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 298.487267][ T8853] ? __free_zapped_classes+0x90/0x130 [ 298.488998][ T8853] __i2c_smbus_xfer+0x836/0xf60 [ 298.490565][ T8853] ? mark_held_locks+0x49/0x80 [ 298.492163][ T8853] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.493844][ T8853] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 298.495589][ T8853] ? rt_mutex_slowtrylock+0xc9/0x100 [ 298.497288][ T8853] i2c_smbus_xfer+0x200/0x3c0 [ 298.498812][ T8853] i2cdev_ioctl_smbus+0x441/0x990 [ 298.500443][ T8853] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 298.502227][ T8853] ? __might_fault+0xe3/0x190 [ 298.503778][ T8853] ? __might_fault+0xe3/0x190 [ 298.505381][ T8853] compat_i2cdev_ioctl+0x434/0x530 [ 298.507079][ T8853] ? hook_file_ioctl_common+0x144/0x410 [ 298.508882][ T8853] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 298.510689][ T8853] ? __fget_files+0x20e/0x3c0 [ 298.512288][ T8853] ? __ia32_compat_sys_openat+0x110/0x210 [ 298.514101][ T8853] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 298.516023][ T8853] __ia32_compat_sys_ioctl+0x242/0x370 [ 298.517888][ T8853] __do_fast_syscall_32+0xe8/0x680 [ 298.519530][ T8853] do_fast_syscall_32+0x32/0x80 [ 298.521110][ T8853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.523136][ T8853] RIP: 0023:0xf7f71579 [ 298.524510][ T8853] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.530891][ T8853] RSP: 002b:00000000f542455c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.533590][ T8853] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000000720 [ 298.536768][ T8853] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.539271][ T8853] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.541788][ T8853] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 298.544347][ T8853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.546997][ T8853] [ 298.548710][ T8853] Kernel Offset: disabled [ 298.550096][ T8853] Rebooting in 86400 seconds..