last executing test programs: 4.328624837s ago: executing program 1 (id=2125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 4.272687127s ago: executing program 2 (id=2126): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000d00)={r2, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000dc0)=0x84) 4.272176537s ago: executing program 1 (id=2127): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000af0201006600000000000000560000000000000095000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000980)={@void, @void, @eth={@empty, @random="1f00", @val, {@ipv6={0x86dd, @tcp={0x5, 0x6, "363ce7", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x28}}}}}}}}, 0x52) 4.174330347s ago: executing program 2 (id=2129): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{}]}]}, {0x0, [0x2e]}}, &(0x7f0000000080)=""/233, 0x33, 0xe9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0xc8c4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) socket(0x15, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4d}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 3.759325655s ago: executing program 3 (id=2130): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00$'], 0x44}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.482570074s ago: executing program 3 (id=2131): syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x51, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a6267468dae3319f08d9b5c0709d246a5db56f511cad86"}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='mm_shrink_slab_start\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000800)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff2}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 3.198355713s ago: executing program 2 (id=2132): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0xffff, 0x4) 3.196307483s ago: executing program 2 (id=2133): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4000}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 2.36001647s ago: executing program 4 (id=2134): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) 2.054225788s ago: executing program 0 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x5c}}, 0x0) 1.997564268s ago: executing program 0 (id=2137): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r2, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r2, 0x9, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) 1.274752285s ago: executing program 0 (id=2138): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.266538085s ago: executing program 4 (id=2139): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x3, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}]}, 0x38}, 0x1, 0x7}, 0x0) 1.253061545s ago: executing program 0 (id=2140): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r6 = dup(r5) sendfile(r5, r6, 0x0, 0x80006) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x25dfdbfc, {0x5}}, 0x14}}, 0x0) read$FUSE(r2, &(0x7f0000001440)={0x2020}, 0x2020) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) 1.216139135s ago: executing program 2 (id=2141): epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000080)) epoll_create1(0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r6, @ANYBLOB="ec2ecfcc30d8c8c0ec406ec3c1d7431c9bd44cda91d581f3e37a605a2bdb158f5ea342c2896af58475df22dd0eabdfebcc278ce26e0a23c57533436f772dc8aa89c77e445372c1a9fb79f450f70aa0eb781da123623a29dfaf4f5a35c314eaa4aad12bc80f507e54abf28f9dc5ccabbbb81b5ab0"], 0x20}}, 0x0) 1.138481025s ago: executing program 3 (id=2142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.138082645s ago: executing program 4 (id=2143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x4000000) 1.013204355s ago: executing program 3 (id=2144): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="040000", 0xffffffb3}, {&(0x7f0000001300)="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", 0xd01}, {&(0x7f0000000200)="7fb6bfd68d", 0x5}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002040)=@delchain={0x5a8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x5}}, [@filter_kind_options=@f_route={{0xa}, {0x578, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x150, 0x6, [@m_simple={0x14c, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4, 0x5, 0x0, 0x3}}]}, {0x105, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x41c, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd79}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x81, 0xb, 0x4, 0x4, 0x5, 0xd, 0x2, 0x7, 0x8, 0xfffff607, 0x98f0, 0x8, 0x10000, 0x3, 0xa860, 0x4, 0x3, 0x272, 0xe00000, 0xe5cf, 0x1, 0x6, 0xfffffffe, 0x8000, 0x1c, 0x4, 0x8, 0xc, 0x10, 0xe, 0xfffffff0, 0x4, 0xfffffff1, 0xba, 0x5, 0x8000, 0xb, 0x7, 0x7, 0x7ff, 0x1, 0x1, 0x100, 0xc9, 0xfffffff9, 0x6, 0x81, 0x6ee, 0x10, 0x95b4, 0x9, 0x8, 0x9, 0x7ff, 0x10001, 0xd1be, 0x3, 0x1000, 0x4, 0x0, 0x9, 0x5, 0x5, 0x3, 0x1, 0x7, 0x6, 0x5, 0xb, 0x1, 0x8001, 0x8226, 0x0, 0x6, 0x6, 0x6, 0x8, 0x7d1, 0x9, 0x800, 0x7, 0xc, 0xfffffff9, 0x6, 0x200, 0x5, 0xffffffd5, 0xc43, 0x1000, 0x101, 0x6, 0x9509, 0x200, 0x200, 0x4000, 0x0, 0x0, 0x6, 0xfffff3b6, 0x3, 0x40, 0x10000, 0x3, 0x40, 0x5, 0x6, 0x8, 0x1, 0x1ff, 0x8, 0x2, 0x5, 0x2, 0x6, 0x10001, 0x1, 0x7fff, 0x9, 0x8, 0x4b, 0x4, 0xfffffff9, 0xff, 0xc7, 0x5, 0x2, 0xcd, 0x0, 0x8, 0xff, 0x4d7a, 0x8, 0x392b, 0x3, 0x9, 0x0, 0x10000, 0x1, 0x6, 0x0, 0x2, 0x400, 0x5, 0x2, 0xff, 0x593d, 0x610, 0x1, 0x8, 0x7, 0x5, 0x10, 0x4, 0x1ff, 0x6, 0x6194, 0x9, 0xe, 0x100, 0x0, 0x7fffffff, 0x9, 0x8, 0x1, 0x0, 0x9, 0x37, 0x10001, 0x1, 0x2, 0x401, 0x4, 0xb1, 0x2, 0xa518, 0xdd1e, 0xb, 0x5, 0x3, 0x0, 0x1800, 0x0, 0x6, 0x4, 0x0, 0x5, 0xe86b, 0x7000000, 0x6, 0x0, 0x80000001, 0x3, 0x3, 0x5, 0x6c34, 0x0, 0x0, 0x80, 0x4, 0x5, 0xea7, 0x7, 0x6, 0x8, 0x5, 0xb, 0x9, 0xf594, 0x7f, 0x800, 0x9, 0x3, 0x0, 0x42c2, 0x4, 0xbb7b, 0x0, 0x5, 0x10000, 0xf3af, 0x7fffffff, 0x2, 0xfffffffb, 0x2, 0x40d4cd03, 0x7, 0xa, 0xffffffb6, 0xb, 0x1, 0x800, 0x24, 0x3, 0x7bd, 0xff, 0x1b3, 0x6, 0x7, 0x80000001, 0x200, 0x8, 0x5, 0x0, 0x2, 0x1000, 0x6, 0x3, 0x6, 0x54480451, 0x8001, 0x9, 0x2, 0x1, 0xffffffff, 0x81]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000001}]}]}}]}, 0x5a8}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x138, 0x0, &(0x7f0000001cc0)="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", 0x0, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x24000084) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000174d8e94dd0d589c964626d920ef2832a3320a7caa46cb5ce0846ce34d3213087b99815e4f10f149135608446e5c34184efc246c8064c6610f78c3ad8d19f92893ffdd11bac79953fe7063440fbc803e9275b462ed30d3f77ddb1d928996417d0807c80244c9167bafe911", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0xf7, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e00", 0x22}], 0x1}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r10) splice(r10, &(0x7f0000000080)=0x9, r10, 0x0, 0x8a, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, 0x0, &(0x7f00000001c0)) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r9, 0x89e0, &(0x7f0000000700)={0x1, 0x1}) 970.525124ms ago: executing program 1 (id=2145): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 906.766304ms ago: executing program 4 (id=2146): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0x2, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 906.441984ms ago: executing program 1 (id=2147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x5c}}, 0x0) 898.270594ms ago: executing program 4 (id=2148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x190, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x160, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7fffffffffffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff63}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3a}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xfffffffd}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xf}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x190}, 0x1, 0x8100000018000000}, 0x0) 857.315294ms ago: executing program 4 (id=2149): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 820.227304ms ago: executing program 0 (id=2150): syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82680027, r1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r2, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'sit0\x00'}) ioctl(r2, 0x9, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) 815.790723ms ago: executing program 1 (id=2151): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4000}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) 594.810713ms ago: executing program 3 (id=2152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000002180), 0x4) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) 456.120042ms ago: executing program 1 (id=2153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 92.032591ms ago: executing program 0 (id=2154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xbb}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000055003d0902000000fccbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000040ff"], 0x84}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r7, &(0x7f0000004380)="3c451509ce25d1a081718016c3a60baf102a5b2337c460813b6dc58da3d8943888be30b85b559b4c072929e5a19ee8b6bf583416d0b264b14911c30ec1923dab904b6f5da1ce06ce87f7ca40423ca485a20b355d5b206e7f34260b99f5c7bdce29e6a0bad3fc6565805e3605c39e5aa6ed76a97400332a8b1deb7b0a902808cbcacc90e1c515f4bada560f5a3ba8c73108aa72e05882b585ac1c43c00d86a648d8678f3f58a0be175c1410939be7055384f2ac977e08a2fdecf75d005489150a8e75b7390334159cc3209cd3bfdc24ccaed9004ceb7ed220d5f88d295c4c800f13bd08ba180c7bb69c858b1df64a0b97ede18c2404b6cc6186a1a7e8785b1836079434aab358df4b331c87c087dcacc88a43a5a8b1559f28516bc5260ffcdcc134d252df17bbb4d8d44ea14d82b5f01bd32c7f170d70d821c98dd2811f498df7af3747c020252cb51c326bdb76f3445d2ba225ea6425b28fdc24be5ad05dc55a1eabd4a695a302a9f4df62a0190169b8d5ef5dd8439b8b408ed763946eda9526e6ca8caecf2e78ca0a42a7be315a99940c6c873e88fdd3941efe71953c9fe57e4018d7ef74aa6077ce65aade10995e0b5b03723425d369f9bb1e7b566b6e4baedcca123fb5c543f183ffcf60738da8267504e69a61386854b8b11ce477c54406fa9cd3c57fdcb5db5bd5c8ef92ec0b4bd68272f9fdf4e06266ad94ff466d47297811c5a3cf5138dd84fc37a27bd3b1687e7a8a7bb6b809d01ee19073a41df3b2e088a5e44181a523787d74d6d329eb1bbb0ff880bc702dffa3d3a6133ce52a790b166b7f5001aa3225bf2291f494b0223adbeac0a6b05b4b0b9eeff1b0422581a241abf41036c533005c3b8201db0cd5857acf0c6af5253d16ba6c0579ad3af27706a8b82edee79369b7bd05325790557f1be05c6033e0c2dccd5068506f052ae07bc9280c8fcb5b8be93eb4d2e125888a7675330fe229959dd9ff9fa5cd6787f2fcbe46308b39ea57f2233ff5c5143925853f1372e05161ddfe0a5f887c5872f205e6abaf56f242aac70b578c3ef74cb06d7d2b47356161f79e96d5763834e4b265c2cb9abc0b3d77774130e74bc0cb1b25a843ab714e25d5e1fc8c2b91dd3fde36b48dafcc54ccf0bbb55050c9e9a28ce1d4916213a17a1c05a6d1235338ffd8c3c9108d3826c9842ef09c5d477d185b973a6f351d6230d3cda89bec0dcbb7b76e869e1886fb8f68925f76ce5d0bb0c448e95d4aaf5f179fc6834b7edd9d41a8d759e6c71fcdfa8cb807eebb69c80e1ff71db5290600b1213c39dc4ec04f3f8cc7db01828ce9fdf448a9c75c95cc31cc05662e4ebe1fa77f4a440f11973b43345f1c0ad6128b1e74ff7a18a10f863d774fd401e1bccbc7c2ba8692198becfb03b1330e41ebaa5ba384bc3cba221064df7a436fa883ea11411c5d48f772bd3765875cf1d5a8ac30c7a17ca66fd44490e82599e79e04b5c75bf2cdac9e33fa9d962e645e09ef62d125a4416f19d3b75244c4d016c618200c7d0c9f2c1594d0e33f5fa6536d17effd50e4f539bd2f9e0e814bbdc7056d9b8c77192e360aa570f629203a09c16efae62c0b70246e9d75493142ea3d5621561a70f8060494c20fec386a2c2adef0d3d794149d56746af95850a0571656f41e71ce33cb43d4e5e2d4258a766eb6d339267043cd2e71fee3891b778782b2ded8f49ce4395a0a81166f7377fa766414f22004bbcc45eb1e6dc1be036b8700fc50a2d8e105f3c5dc01fd431f0803e0c850357f7fc0b9e9aae06b17e40e934222ad8729f3ed0dabc04cf0e0a9a34fff74de76fb80d02f291cfb48aedaba6cd4ff3e4909c6412173d75c368ca66bca73d8ee0cba7e31c372b36c1f22d541d73e5a5040d03003c9eb7246aa582b6f806cb95bcbd489642c6b0ce18051bd8bee89cf78e69be6ba6b72f21451744316578311aa1203b8491682cb708c1bd264e67b1093d0c729989cb54cdd5380e6d09a09abed47d6254856ce7d659ccd0cfb8e3e806befdd3be5c0aaad69d11c1ab1e44f7cbda39fbfd0298a51fd3d6b60faac8b18030df319dfb93c3cb69bf8a1169f09ad6d4087fb5a08b71531dbb75cd54526c32b92e687064a23885f159818ea32a6cef7dc5adfd0c05d8eea21f561d4310ae0797171b95c0e7939e96d33f2e690202b1fa1cfd2bb4aa278f118f647d7f10e1e1b5ec0408fe1c765602fa7cae5917e601db34983dee231f914d38661a84c873f9fb0c740114b4e5eae70d156e483c2e9b5f3c58d6cbeebfcd625249c9b180357cb9de732d25b9f29444608adaf619735ff3f88178c2940b682fc760d2bb55c38d90504d165e8497c6807ba80306dd5dde1b9740998b16f6d9e221750fc96b22ab76b5375525eeb9e61a4fb736068a52d7dbbd3d275a3f049bbea1dd9e1b652ea0934bdcdf6dacefb47265ea66abb1a86ff3018633d4e57b186e7dde2de6cc15fc8de398d00eecac7016945e387b335f99ac0a684de7ab51ce1afb6f02e4027c53fc5102522a4a63f620fab6bd08b044306eab53fe7ce0d5dc304e4ba75986ff81fbb85092dc5cbb8e86490f1be3b05003e1f198d857aff34261f321252e58ece02f5954e77a4be33f757f28e648915d7741f3087f9fbf52ecac555dfe926a66f71dfe7b29a187e38ecb7cec8ec9a8ce2cdc61db861fc789a71f221c3198360d67f0906c93900019ded0fa3e1d89e8d4a4593843694d79bb69c8adcfb576fc8251db2e978d38423b617f74d87d1684f0ef58cf5b7a2be6acd1eb2628762e9381e1318a18e3ee795049a302e333165c7fcfc0ced07e478a63f8763f8c28de5cbae56c759b000f39a350506cead7de718afa69e0382e4ce6c2f64cf764072c533a0e877fc8c4588271eedfdca67d57dbde469df84e04fadf5a37dce70a5185ba40850fa0494f9230ac4f8bba6fa5a7e45dc39a7b7e011e5dafd949fc16536e4fe319225a71fd8a8035e4abf371c45f8b485ab5cd5650fd433a954ecb9c7c06e698f48e6d88c967334df9bfdb83b700a51c61141b2a2fd3c907050e2ffa5bafab9a7408e06ad992961d9c919bd065598e47d89c88ce5ac6bf9157074704c2e5fdd2dfa0cd49682e3364a276de1c17f1a597e19e23f5536bf80fadb3c93e99fd5c01aabddbec81342e8af13276011e8f91f385e9c302eb77e9e1800103d59e88d9da10201de53ef2df50e4641e3292f62c3ad67cbd0f262706039571d57ca433011cf1bfa1456e1d06cced46043d7a917f3b05bbc4a712f35d1e3080ad7ac1e2868c71926ad7abb1da83dcadb75da6033e2a338685e41e250d591abd59e85671bdd0eba7335b8cfdbacdc67d98348186cdd99f139a9859a8dc5e50e00af655d6cbef34bbc82f70ab51396b9ff588952c4b1707afd25c05aa4d0f8e480b82dd3df037182974adf67c9f579d4e1d4bde1bffbf7c7591b8c28995e88f8fc2c0fece367e6731f1703896b9ef16d6302d5d54436524c2b94ce91781100107c4ccbe7258aca5d0195d96eb5f76db2aa047f832bb78de1c99520c48cdc5aa134ea7a9548cf9e4164656a2eb81b8b28a4f216f876d8e2348737722a8ae49299233d3b99f788e15f5144a47686267830a5a42833933e075c10b2b7154b9d8b8137e7a5c0e23507c9fd4a8858c5396c13373e0811e62564d3062e91f3615d2fa0c39d03bf2be1396a91195e357d85db987a821b6d7fcb84acbef619863c0b11acde1af50e4c0cc610eec5ee0ec2abb2e2d96885e31b5127d2cf9cd1a40059916529a570e4f6cd026a7e921ee46568c9b48b7b12ac19bb3c1839785bc442c68a1896460aa2e0f18d1d6e79f3352bf7a94730187108a0691342488427d7bc15f2dd262bc2433fd47e3824b72a41c657adfec8b7bcd539eb9c0b0fa39316fe254850b250be7a3dd3f81ce8762f492666a6735f3b3f1279c65967ce4912d528ce8cff98f12175d5a3d2ef081dba5561d50bff7ae4bd55f275a2c39ea77a63f78102b5c48e44fef3aeeae51ad9c5f9fdfbb0b3e148cf9fdf1a93a3fa2c0207f7de3a7d51902796af872765b1591dbee96fa47184edcd6582d849043b837cce96b6ddf8ef45c64b7f4fe67fc015d7eaf30be071efb5c40c02fc68835b5ff523e0a6b4bdba8687ad4be26a4e7f4a57ef4d3d246cda0305a3c799056ac9c0746fbaf7149e5210e32e892776b04ef24837711f2e639bdf5f768079e3c6c7f41480fa1006aaf79576dec694b4cfc5408fdceb52cef235af7d87f5b04e7c5de512cf12be3c2eb6f68b9cd8aa6d3456ee0b5c0c78fa29246f317e75359b5238759fc8a8ae5ea29f6f28237a5f39787fd2d37d74193cf0026dc666ab27effd83d6af326761e5874c45cbe2e0bdd3a35978152f5b6433acb9441270b58190b37a3b9e52d6579de59d5bde186f7e5cf809645abb238206de7067889d6e92bcaf9d2484a8a37b09c7afbf86c5ee63389b48dffa02f40fe7829d1878598a86acf731782a23877f8c17589575a64209c666cde3b8bb5d4cbaebfcc2976dd2b0b5707c103eb84c7cdee70adec331850104968427f5f1f4958f8e216e7d63f90ed435a66878854382cb0c7d91eeac83468ad18cb502d72cadf3e0127d79912fee67836b96e58f367db7f797a5947454f71acc0e7cca7838dc72c7aac8a2a45815c3a7acb2b34d23969090702e11116f035209cb2caacbc051f68ebb1078c88c8da282fda6aa909366f7621cc5b1063a2a5f14b5ae18758a1560ae3f091b04ce7cc9e246ed8f1354a3b5e5fc78bf4f43ad9e782aa985c4b87ccafc21dd6e57dec9e52a411b3a8389b0829fcf91dd5e404181c5cd577ae57dae7a83ac6c15793b9027d742c343f183f7c4ab11e1166c08746cc6d0f771281e38326d5f283555c1d6acc092cfeaaf9a97ca0c7c235947f5fa1567ca9acf2728f0ed62d4d843450ace053f1a00f58ca8d28d7fd3e7bafcb2e08d954a7d526c9023f3bbc1419ef0a8ebc9e53082d9e27ee06bad669a2ac573993de6cec38532cd5aea92fb9d495c0d5a62e38d83eb846f4c7ac5d78df72ccccec51199f5e9256c51fa2c70cfa5928b53ca19fde0aca4dbc6fbed2431ef3e5d405d67c38c8396e361592c12994da7b688a7bdfac87e2b33c64316a4cba5f3af3cb020d152499b8c4fccd9552ef63484de00d6edca722d73171f6a6c4900e9b7184264fd1599ae9dc6a0850d96f88986303f059c7c89e1476336c7c9774ff5360e33814f57f39e56b7a37df02351ccee9828e6016e49477fbb1ed0c93e40a4d41dceb624ec8a0d32a0753a7405c0c7d9b2aab38c4e4372a231b89c215b9d32a942694e1f1402ea9b8f542a974c4145835ed7bf0d75a1d9ec1c3a4c5037e8e0f96f5197c9e93e362f38cb6770fe08fd75290abaf70c7cd2afab42f570becfce5d12f0e60b8275e019ffdb9b3455f1f03ba1046b79127a2ca7385e78bd5e7b28d8152457cf00b8d951cfa70e6a9ec31e2dc4c3c9fea81cb9139b59f1d2a70da29ed155b539c441b607a68deedf476ffd0873e45dd2849f6c321cdf3c08673f6637d6e8cc029895327e69a6da7be4128c765a9b3f0aa7a52c159429bd4bbe9c32b4e644f5b4b5f114f7a71175d0e47c1d7100f07a6ede6b48410b9da0f6af73957a8c115390863302c44ab83fad38951f6eb94810d15e7014beb43f45cc516401085b77770a0634c1211db5640936d4d8c3d019ab12620586e25f3a660caeb949baef25a8b67f9dbf121e8a9a74868da9b7a62fe467b498d8cdf945488ac945fdf88b91d554c733a5c39c0d16cdb404d99d63510ae6010f1db2a67eaf83ef51a3d1c9364ee9cb7f0a509bf31fba5c4e2414a2fb55d9a9e236b9bc7d0da8956336b86aab928c84dbe913fd2d548f1b031bfc01b5e2392448b103826b657cd6743cccce847e52bca90cbe2c494f0caef9caba01f0e6acaf3c70f97a56ca0c6a236fccd4c25ecc8d3d888e6ec13b56986553bb5ba43ebd32e025da3bbeb64076d72c5a2220c1ccb77af7970ee5f3ceece3f7747a63ff1d03b4a619e3b52489ad214d38b01d45256b0d0ddb5f3a4cdbc4daea31476013f394e87c2457e47edc582c0be7f652690206005c3e86dd2b895e7ba7e1e2d6271700c71d7a30ef53d8b42a61c6865c54d1f2c1ca794333b94d4b911fafa23e1d23983ad6d67b392f716be7ad1c06b2701fe9ecaaac07d115fcc434d502a98844c38aa56b278ae84457a23c48946639c43f18df116f8524ed0bb092d960c324a39e09578a9555f29e135eea612dede7c065ae0561b0df1ea0ba6dc6afddd03afe90cde951451ca407ae88d7d2e0df58bfe765888e40a088c169cf895034909dc007e9475023e76094e3643a04241011dd02ffe8e8cc68299dfeb073e09f3e7ff3466c24ac13774bee5a0e531bce5d466697b2353310bfbe30089c3a98a8d3f028eccb9822a2041c850b78f68ed1763d15c8e5a8df2335cdb56359769e0bd771c0486d4e4268db26d3dafcf4f633f23667ae4b028b6832709c8c6ed3991b0f962eb34106807fb989ff0ab14d9a7b2719482358595cf38cdf42654544aa7e36b2c4d22470ce09e76ddec4b50deec528513fc3614ab78ab1255ccae54bf4eec34aa078d7f1ad0ab4cdafb751ae8b64f198796ad2ae1a27a26cbf53173887c47ff8cec274cbb7082e8ea18f0c109878141f24ca10d839ed383c5e63fcadeb75db343268c99b424bbdae3156cd0641bbdf222a45e2d35b4e513cefb0e6803705daf34a024ab0ec6a38cda57372ed40af24bcd2aff079e2d85dc7579c54d90e1dbe44f315d4232fad678acb9a2b0c066c6a32bdb62a532691633f721d71cbb1e975b4fb47a90b821ae2ec0e2b3a85d0c02c993e78c265e6504dcff5c0bef4697097f2536a63f11c6f1d57fa4aadbc0c493854bc99c04fe1dfb90565c4e49b7ee2dc3b0ddd0cd47eb3d80abc9b92512ba1d0a0b5cad381ae54e612f73c3f5cefd19b50693f8a7ec5e77905fd11f547127a4b171b923aa26af13e6d1afb48715e2da20fbc12a5a8859560d1de2b3ac4558e76f017b8ae1f78bfda448b65c3e213410158e2ae6f7bffc4d57d9400a0454152afa0734b48db0bc770abbae1e9a66704e082c1339c6c68b140f04f4e9a47ae25ed9a59f807ac60cb89d888123a22cb11e9234da09841bffe7c6475e07327b9ed757e2b589e6264cf3628f49b237c4097092b39a6fd7a770ef1f822d75875f0c2fb52b7fa3092d7eb437feabf9f1b250f401fe0ab9d6f785d9b3c2a0314dac2c6b7fd89069f9602dc2e4d5f96844664df3961408832e3f1e5fb3f11ddbb736cf41ff103f285ebf8b4818e6d1511305c031391e8231915e98a7abaedf3303590e20703ffb44216e7f85815916ce58e62211179cb5d99ba21237a3e77cb48e3ec8546eb32146c019b1175a337246fe5438b403bc33c297c285f2cb8084073b2a73c93401b44f92706b0e93247794c9434059c4f194b3cf6e6bf941f630b90740a599d59ed93e2b6930a1d00436786210c2e1dbc5ccdc4bfb48f5a2a679423d29bdf300ded5d78d12ff73bdbc7728e5f9c9522a8e6f5f4e0ae217d677fc1a265371fba33711b7a58c8c84ae1a80957907bcab5455502aa1cfd10b8e9f25dade0cb49cc12cfd0257f47d524f3d87fdc22f7810bab135d2ace446966f9e88ba28bb2cf11f7186adb587455256e5c82a96c5de2a91a38adfe0805daa090b9a89be2f0899d510aab88ff653759707aace89aa627d45b6d62a65f85044f52603f28f1d79b76ce138bac7b99db29df025c67c7c5c8c054c93ee9eab5741c313fc9759a86142bf60596bdd7d00f7224f4489d6283438cfc80a6c3be0f7fb6e7433cc05f0e7f1db8e253eda7e7242dae1aac7deea1ad68596c933b674cf4dcfc2b7e2bdbaf821e34750bed3c7f8ed3e5902b7637139c3713bc5dd977950474cfdb67b7d0b14b3595f32fd100a71ecd37496867096a17a27b670d88e20909b89a2f425106b569650e3e5dae0be886e841fb2c7f78f1b46c19b26712e47ec43a9ad34ca6960f6cff3604b1c08e9e7b915a940b07e222bcfb4b9e16e55266664d4845b5f8992f583460146940d6f349598a4f59c4c0f130a97dfca81a015c017384738e86aa605e255d620df8a83bb452aee8e4858dd111fcb656456e9d61951a3bbdbdd0d4bbe4bac4464e2ae29e37028a4750f9d29e99a5141a1eaba6624bc96017257e2e458b468cb1c3bcaab66795475328ca228120f9e8157c0e0ecb6263a57a638f6973e8999a6ed895d779c29813209a636f67f0bde1719e87159cab47dc2604dd1e73a7dd5357b584df287f36bc4828fcebd54e9b4ee13025b7c03c3d3043d9dd72620771900e49c41bed2709fc01b6645d34d226c2dc021d639b42b150d51fff1a5721c25a772b3942dbb99f010c62ab422b3115e62cf9926faf1ce2101c36713e02dcf06c66186fae1bb147f6519d467464e59d8a62bf863de6ac324ce8fc398f0abd43784e212762d781f44b0350b07d2b6c0a38bb8cdc3d11a2ad3a3a8b6f385ce2081521329ee3f3870377bd662a2db665fef271455730bc3fc7bc33e232ea5c3bebb0c0a31e11debcbc430c00bf255619e7b3ee572242ae06b9f5877c19a2bdf7ee0c74c2f8a8eaf4416502e22a5432333c62d958c24a4b95f4d7dd9635ea8393e7c3772e7658250fd03b24c467616100a35ef91a74945fdf667af809870a6af3077ea2ced70ddcedea58ddc0c77f1fca61dd2449b01110c923357a2d9113e052079bcdc93f9cf26e28417b4c5613b78f347eb751a3cf4650897b69c3325c8d60c70915fdf93a8d7d542c798340db56a557577aeffa79b7d34b7739a2a4fbdec9f3dbe711cb6ec3cfed2e7967742a4477d7f6e06105a627111bc898a9e6bfea2ba20ee97c1a7ab8a3fd4246416d92f5572ea62b0685054941cf492cb6005985ebc5135cb11b4b7916ca1615f8a2231b05b8e758daa47b12514030d292aa20837b774ac0e7ff5df600b5a2da0d09eab4baae4452e35f5a3d0430fe22d2b6e638ecf783b1043a61814e203b27d668d38329a701e223d5d8a4ee6fe761a2f2aceda78c5421b5c42afbf427baa2c32b092a64dc1cfab0dda26f3f9365bb6c2a3b68b965d0b5b92029d3a8dc44d0de9cf9049d34783a54dfdc48394a4f45596bcaba95e28c343c31cb4e7d0cd1a465af08ab29afa8393bb4ba76cbae970656f5a2e3c73666a03e0ae7a0c1d04d2d9d00d8ce048bd0de047566b1741fc34d7882cc4c06d14e2119a3e160c713272a43ec11f1ff11ce087cebca979bb31979b780706fe5c495bf9ab5a0b7903721e6732a643e237528d2e2ef02f7ac62b2134f88ade15e7e0709803d7bfc079d4380820fd68c8eb433d69d2411ffa43bef2d4a4665cdbccfcf77f1c653e1417bed654d006d4b37df69c80834f6a0480a531d5ac1c40e6fd967a40035b39460327ce821c849c5d55a7bac43f77330b5eaae36bc66e900197050def359c797b0a59547e5c15c6ea41b3f2878046cbfc780b9da05c81f8ceb61aba7b0ad04eb18756f13acbacccb5df3dca6a8d090abb5f805db2c7019fbb2a75177104891a761238b58ced6156d45a55aaf504f1bb0c4f64a7abfb1e02bd6a0589a1da067d5dab69b10a48c395c808589a0c4e8ea32e9427ceb5da07a72b80827cb01b67947ebc82d9cb993d616c73c3e84b9136d74020870c48a6e082d32ff5d3a9d51b2d1e5dadc19887acc24b8555e680f27648d18d035ed6742fa012f9d9daff118ddb4fce681309bdc3bbdfc63fad6fcf60f94b18aa8a465a68558114a3b1be453ad0d6a5f204cc07edccac7563242497c4804d490050e92424cc43d1f1b62aca1ee74e558c4bc40a71aa4ae5ec3343e4d96ccc7afc868fdcbf9486628cd4362d986badf02a79042d94c4833ed43cf7c8851f35b00d7120558a87357b215916bd3cb85d2709bc906359b7dd7cfa20255b3b7d13bc6dff882093eced2155b13d07a23c48d08c72916b8b57e5f4edaad79fae9a02029fbf47b6e46cf3f0cbac5d19037683fbbe6e29a654ba32261426380bc2c44f683ce84925b769e4c2ddc7d8fa1b42e4450350ec4633d0db903dd62af040327f1a828549b54c6d3f60776780bf1872ba040fb78d97934fa13fea5199bbbaf7868166038b00c4c20829122958b9dada0ccd2711bcfcae5a9ce3a1c1e0ae74b5a6f1c726fd46e5f3b48ce60b37fc4794fa21811871e69cfda7870f6b987bda192afd5850e02a675d7737ed5b4fa922ed847b51515686b173028d0f1d5775979cec53320025107e7bb219b9144042f1db226d7e8f8da4f1e7dced25f5989df04817080a6572ff035b4ee28ae955c1c4a6876d00dc5b9df77e3ea113dd3173d39ea4447e3ccf23544a1df0af68b5b7ee501168f3ca8af4739a4c21bb36395623bed6045961252b461fe4a73d953ab12638d6881dc9c5aa7c8bc44a6dd2dcdaa5278258fcaf4bfa58e13ad119dfb0316d9dddd8cb9cce1d5b147597fa73a61f523716e1d2b581953ebed033bcaa7d014039b4095b219cc8722135dc015dca8f811b0a83c96fc8ad7f817a82c74ba70bdb830344b36fbe9a1931890a73770dae4529120d70578ca186bff771620e7d164719e79310521eb3d64713a6e54d2ab0a26e062f0597abcedc4287b64ebd6292566e42ee57fe1802ed1af1254dedac04c34f1422be67b3a26145b9dea350bfa7753ead9353ce7ff4a94e412b15cede3f2e812183e380b90b328de0cb755a0ac9df719edebd725a53e7d788e23da7213ac724101eda1420157bb9157d7ac1e3761e80d5dfb0e9d48ed3239cded762e0663e39f5447795fa698769bd19fb9ada7f06ee081ecb8e0ad7523ed6288bf17f5ecb7f907d980343b27a4f054134579cb995d622c55ffc6be64f60e4e459e4b63fc59f91f0f19447542256e41393ea47e5c275600de4b5b5fc7e5b11a858e24bf73e5a9d95da0d24fb075891f061f42616210f2d21b50dff1fe127efd1c30bba380dddab4d96ab52d375ee6025d03e06f58abf2b2d30c2845a19793629882f6bd747fd601a1545450e06a1a7e73075d9f3a9cd70a53b304e40a008dcc94a3bcc89b0a03bf5f443f8d75210862e866567f12ca30c72d54a177a8e350aefd8dccf9266cbd4c0eee292d8dfa9f142068dea2315f9818e9e67c911fd58a64b63136fe3ce3598e04533e8d7da221617c83d24b51cc5a70620c333e1d7b60ad0f72d1ebe1dbb22764b9aa15f21703f858131a95dbedce8943822f7c74cc670b0777dbdc0686bea8c368517a206341822898495dc78ac17bfbac73ec3eff69141e660b4ed0d54de5cad30a00eeda93c3b881923b9851c335922981a701f7ce09c741813885d37f0ffe746932ddec15b9c8c301d0a71c1e6f66f3363c4f4bbba71839acd98009542f49cf96003db93fbfd752f2b475a4b422379c3ef5e3f8fac1b5e3e142f1cbbcaf10cb7e1d4f0978a3ec7b74213a3a8434c5812f7cf1e75b76b6ba1161a6f22d2021a8108f3bd05fb49ad3b7f2600b9aa2ccf06f58fe3d0cf4f2fb292bd722a1c4fe6421a3a67b737499c12bae5127bd8ecbeb5388", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x10000, {0x1, 0x3, 0x2, 0xc21, 0x4, 0xf, {0x4, 0x0, 0x3, 0x7, 0x1, 0x7, 0xf62a, 0xaa, 0x3, 0x2000, 0x5, 0x0, 0x0, 0x4, 0xa6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) dup(0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000080)=0x80000003) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 33.720811ms ago: executing program 2 (id=2155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 0s ago: executing program 3 (id=2156): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) kernel console output (not intermixed with test programs): _buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 225.926633][ T5793] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 225.977354][ T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.472975][ T6114] Invalid ELF header magic: != ELF [ 226.490010][ T6114] bridge0: port 3(erspan0) entered blocking state [ 226.496676][ T6114] bridge0: port 3(erspan0) entered disabled state [ 226.504202][ T6114] device erspan0 entered promiscuous mode [ 226.510283][ T6114] bridge0: port 3(erspan0) entered blocking state [ 226.516741][ T6114] bridge0: port 3(erspan0) entered forwarding state [ 226.971753][ T23] usb 5-1: config 51 has too many interfaces: 248, using maximum allowed: 32 [ 226.980723][ T23] usb 5-1: config 51 has an invalid descriptor of length 0, skipping remainder of the config [ 226.995596][ T23] usb 5-1: config 51 has 0 interfaces, different from the descriptor's value: 248 [ 227.142759][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 227.205440][ T23] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 227.260098][ T23] usb 5-1: Manufacturer: syz [ 227.573413][ T23] usb 5-1: USB disconnect, device number 15 [ 227.642073][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 229.332103][ T6164] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 229.360684][ T6155] kvm: pic: level sensitive irq not supported [ 229.360754][ T6155] kvm: pic: non byte read [ 229.374025][ T6155] kvm: pic: level sensitive irq not supported [ 229.374154][ T6155] kvm: pic: non byte read [ 229.385488][ T6155] kvm: pic: level sensitive irq not supported [ 229.385547][ T6155] kvm: pic: non byte read [ 229.397518][ T6155] kvm: pic: level sensitive irq not supported [ 229.397578][ T6155] kvm: pic: non byte read [ 230.635243][ T6188] ======================================================= [ 230.635243][ T6188] WARNING: The mand mount option has been deprecated and [ 230.635243][ T6188] and is ignored by this kernel. Remove the mand [ 230.635243][ T6188] option from the mount to silence this warning. [ 230.635243][ T6188] ======================================================= [ 230.757247][ T6188] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 231.302090][ T6199] binder_alloc: 6196: binder_alloc_buf, no vma [ 231.427719][ T6202] mkiss: ax0: crc mode is auto. [ 231.667475][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 231.679512][ T6208] device veth0_to_batadv entered promiscuous mode [ 231.692462][ T6208] device veth0_to_batadv left promiscuous mode [ 234.722285][ T4241] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 236.294297][ T4241] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.302462][ T4241] usb 1-1: config 0 has no interface number 0 [ 236.545515][ T4241] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 236.558423][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.585547][ T4241] usb 1-1: Product: syz [ 236.596752][ T4241] usb 1-1: Manufacturer: syz [ 236.611356][ T4241] usb 1-1: SerialNumber: syz [ 236.634729][ T4241] usb 1-1: config 0 descriptor?? [ 236.935205][ T4241] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 237.271293][ T4241] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 237.295904][ T4241] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 241.273689][ T6319] kvm [6318]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x5f26 [ 241.348542][ T6319] kvm [6318]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xef35, nop [ 241.372081][ T6319] kvm [6318]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x7cba [ 241.400160][ T6319] kvm [6318]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x9e7b [ 243.911260][ T5483] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 244.110913][ T6359] binder: 6351:6359 ioctl 4018620d 0 returned -22 [ 244.475322][ T5483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.486095][ T5483] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 244.496742][ T5483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.506969][ T5483] usb 5-1: config 0 descriptor?? [ 245.132964][ T5483] hid-generic 0003:05AC:029F.0005: unbalanced delimiter at end of report description [ 245.164731][ T5483] hid-generic: probe of 0003:05AC:029F.0005 failed with error -22 [ 245.640698][ T6232] usb 5-1: USB disconnect, device number 16 [ 246.985078][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.674'. [ 246.997852][ T6396] device veth0_to_batadv entered promiscuous mode [ 247.006020][ T6396] device veth0_to_batadv left promiscuous mode [ 247.132427][ T6403] mkiss: ax0: crc mode is auto. [ 247.139467][ T6398] binder: 6378:6398 unknown command 1074553619 [ 247.158942][ T6398] binder: 6378:6398 ioctl c0306201 20000580 returned -22 [ 248.879390][ T6427] Malformed UNC in devname [ 248.879390][ T6427] [ 248.886378][ T6427] CIFS: VFS: Malformed UNC in devname [ 252.757307][ T1108] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 252.875022][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 252.886679][ T6471] device veth0_to_batadv entered promiscuous mode [ 252.894749][ T6471] device veth0_to_batadv left promiscuous mode [ 252.951896][ T6469] mkiss: ax0: crc mode is auto. [ 253.217524][ T1108] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 253.227304][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.256402][ T1108] usb 4-1: config 0 descriptor?? [ 253.335997][ T1108] usb 4-1: selecting invalid altsetting 3 [ 253.342569][ T1108] comedi comedi0: could not set alternate setting 3 in high speed [ 253.350664][ T1108] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 253.371797][ T1108] usbduxsigma: probe of 4-1:0.0 failed with error -22 [ 254.870811][ T5483] usb 4-1: USB disconnect, device number 11 [ 256.596498][ T6517] mkiss: ax0: crc mode is auto. [ 256.642536][ T6513] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.705113][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.719'. [ 257.230880][ T1108] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 258.162175][ T1108] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.405734][ T1108] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 258.797742][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.822242][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.842786][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'. [ 258.869719][ T6557] device veth0_to_batadv entered promiscuous mode [ 258.897522][ T1108] usb 5-1: Product: syz [ 258.901873][ T1108] usb 5-1: Manufacturer: syz [ 258.907955][ T1108] usb 5-1: SerialNumber: syz [ 258.919784][ T6557] device veth0_to_batadv left promiscuous mode [ 259.974907][ T1108] cdc_ncm 5-1:1.0: bind() failure [ 260.055794][ T1108] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 260.063511][ T1108] cdc_ncm 5-1:1.1: bind() failure [ 260.092136][ T1108] usb 5-1: USB disconnect, device number 17 [ 261.871311][ T6584] mkiss: ax0: crc mode is auto. [ 265.140164][ T6618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.745'. [ 265.152159][ T6618] device veth0_to_batadv entered promiscuous mode [ 265.160091][ T6618] device veth0_to_batadv left promiscuous mode [ 266.239971][ T4214] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 266.771624][ T4214] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 266.785020][ T4214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.816413][ T4214] usb 5-1: config 0 descriptor?? [ 266.912877][ T4214] usb 5-1: selecting invalid altsetting 3 [ 266.987850][ T4214] comedi comedi0: could not set alternate setting 3 in high speed [ 267.039029][ T4214] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 267.145640][ T4214] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 267.930752][ T6646] overlayfs: failed to resolve './file1': -2 [ 268.372034][ T6653] Malformed UNC in devname [ 268.372034][ T6653] [ 268.378854][ T6653] CIFS: VFS: Malformed UNC in devname [ 269.050716][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.064347][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.293581][ T1111] usb 5-1: USB disconnect, device number 18 [ 269.423968][ T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 271.480721][ T6671] syz.1.762 uses obsolete (PF_INET,SOCK_PACKET) [ 271.533003][ T1108] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.657150][ T6684] binder: BINDER_SET_CONTEXT_MGR already set [ 272.684526][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 272.690862][ T6684] binder: 6683:6684 ioctl 4018620d 200001c0 returned -16 [ 272.780842][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 272.826976][ T21] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 272.845951][ T21] usb 4-1: config 0 has no interface number 0 [ 272.871472][ T21] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 272.883898][ T21] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 272.930770][ T1108] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 272.941154][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.951070][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.966756][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.979333][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.993900][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'. [ 273.006051][ T6693] device veth0_to_batadv entered promiscuous mode [ 273.016129][ T21] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 273.030053][ T21] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 273.041317][ T21] usb 4-1: Product: syz [ 273.045771][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.061711][ T21] usb 4-1: SerialNumber: syz [ 273.067392][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.086251][ T21] usb 4-1: config 0 descriptor?? [ 273.110178][ T6693] device veth0_to_batadv left promiscuous mode [ 273.160926][ T21] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 273.177173][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29 [ 273.393827][ T4208] usb 4-1: USB disconnect, device number 12 [ 273.422227][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 273.429425][ T4208] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 273.434042][ T1108] usb 3-1: usb_control_msg returned -71 [ 273.449531][ T1108] usbtmc 3-1:16.0: can't read capabilities [ 273.490781][ T1108] usb 3-1: USB disconnect, device number 16 [ 274.351469][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.772'. [ 275.399987][ T4213] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 276.490436][ T4213] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 276.501419][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.677025][ T4213] usb 5-1: config 0 descriptor?? [ 276.728674][ T4213] usb 5-1: selecting invalid altsetting 3 [ 276.745272][ T4213] comedi comedi0: could not set alternate setting 3 in high speed [ 276.788745][ T4213] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 276.919691][ T4213] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 278.020993][ T6731] binder: BINDER_SET_CONTEXT_MGR already set [ 278.041683][ T6731] binder: 6729:6731 ioctl 4018620d 200001c0 returned -16 [ 278.414168][ T5483] usb 5-1: USB disconnect, device number 19 [ 278.481537][ T4213] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.757004][ T4213] usb 3-1: Using ep0 maxpacket: 16 [ 279.161630][ T4213] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 279.170238][ T4213] usb 3-1: config 0 has no interface number 0 [ 279.176381][ T4213] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 279.190245][ T4213] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 279.580675][ T4213] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 279.601533][ T4213] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 279.609770][ T4213] usb 3-1: Product: syz [ 279.621391][ T4213] usb 3-1: SerialNumber: syz [ 279.640307][ T4213] usb 3-1: config 0 descriptor?? [ 279.725949][ T4213] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 279.771036][ T4213] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input30 [ 279.975494][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 279.997156][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 280.018281][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 280.033643][ T4213] usb 3-1: USB disconnect, device number 17 [ 280.039651][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 280.039672][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 280.070618][ T4213] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 280.405278][ T1111] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 281.441265][ T6768] binder: BINDER_SET_CONTEXT_MGR already set [ 281.459470][ T6768] binder: 6767:6768 ioctl 4018620d 200001c0 returned -16 [ 281.557838][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.575090][ T1111] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 281.761062][ T1111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.770354][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.783710][ T1111] usb 2-1: Product: syz [ 281.787880][ T1111] usb 2-1: Manufacturer: syz [ 281.792468][ T1111] usb 2-1: SerialNumber: syz [ 281.855206][ T6783] Malformed UNC in devname [ 281.855206][ T6783] [ 281.862326][ T6783] CIFS: VFS: Malformed UNC in devname [ 282.477983][ T1111] usb 2-1: can't set config #1, error -71 [ 282.507697][ T1111] usb 2-1: USB disconnect, device number 20 [ 282.885173][ T6232] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 282.906754][ T6232] Bluetooth: hci1: Injecting HCI hardware error event [ 282.930758][ T146] Bluetooth: hci1: hardware error 0x00 [ 283.621066][ T1111] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 283.888603][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 284.978734][ T1111] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 284.987011][ T1111] usb 3-1: config 0 has no interface number 0 [ 284.997814][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 285.009017][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 285.160815][ T1111] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 285.169952][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 285.178173][ T1111] usb 3-1: Product: syz [ 285.182409][ T1111] usb 3-1: SerialNumber: syz [ 285.188956][ T1111] usb 3-1: config 0 descriptor?? [ 285.237050][ T1111] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 285.245693][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input31 [ 285.491861][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.513242][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.534616][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.556008][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.577382][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.598767][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.620145][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.641519][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.662908][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 285.684296][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 286.092904][ T1111] usb 3-1: USB disconnect, device number 18 [ 286.112074][ T1111] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 286.154714][ T4214] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 286.232889][ T6825] Malformed UNC in devname [ 286.232889][ T6825] [ 286.240078][ T6825] CIFS: VFS: Malformed UNC in devname [ 286.411283][ T4214] usb 2-1: Using ep0 maxpacket: 8 [ 286.647481][ T4214] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 286.686495][ T4214] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.734613][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.880385][ T4214] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.894331][ T4214] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.907939][ T4214] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.917790][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.246054][ T4214] usb 2-1: usb_control_msg returned -32 [ 287.265620][ T4214] usbtmc 2-1:16.0: can't read capabilities [ 287.380613][ T4214] usb 2-1: USB disconnect, device number 21 [ 287.587292][ T5793] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.811759][ T5483] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 288.111186][ T5793] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.119263][ T5793] usb 4-1: config 0 has no interface number 0 [ 288.529000][ T5483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.558137][ T5483] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.572667][ T5483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.593149][ T5793] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 288.602509][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.626755][ T5483] usb 3-1: config 0 descriptor?? [ 288.632120][ T5793] usb 4-1: Product: syz [ 288.662610][ T5793] usb 4-1: Manufacturer: syz [ 288.687469][ T5793] usb 4-1: SerialNumber: syz [ 288.708279][ T5483] pwc: Askey VC010 type 2 USB webcam detected. [ 288.788164][ T5793] usb 4-1: config 0 descriptor?? [ 289.084006][ T5793] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 289.158829][ T5483] pwc: recv_control_msg error -32 req 02 val 2b00 [ 289.201620][ T5483] pwc: recv_control_msg error -32 req 02 val 2700 [ 289.255080][ T5483] pwc: recv_control_msg error -32 req 02 val 2c00 [ 289.297853][ T5483] pwc: recv_control_msg error -32 req 04 val 1000 [ 289.340622][ T5483] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.394115][ T5483] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.436864][ T5483] pwc: recv_control_msg error -32 req 02 val 2000 [ 289.490224][ T5483] pwc: recv_control_msg error -32 req 02 val 2100 [ 289.543672][ T5483] pwc: recv_control_msg error -32 req 04 val 1500 [ 289.597185][ T5483] pwc: recv_control_msg error -32 req 02 val 2500 [ 289.714776][ T6232] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 289.885882][ T5483] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.908366][ T5483] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.928583][ T5483] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.960705][ T5483] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.994898][ T5483] pwc: recv_control_msg error -71 req 04 val 1200 [ 290.027172][ T5483] pwc: Registered as video103. [ 290.062468][ T5483] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 290.162963][ T5483] usb 3-1: USB disconnect, device number 19 [ 290.848081][ T6232] usb 2-1: config 0 has an invalid descriptor of length 171, skipping remainder of the config [ 290.858774][ T6232] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBB, skipping [ 290.870215][ T6232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.883137][ T6232] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 290.892255][ T6232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.912391][ T6232] usb 2-1: config 0 descriptor?? [ 291.021690][ T6850] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 291.618892][ T6232] hso 2-1:0.0: Can't find BULK IN endpoint [ 291.631774][ T6866] Malformed UNC in devname [ 291.631774][ T6866] [ 291.638403][ T6866] CIFS: VFS: Malformed UNC in devname [ 291.665067][ T6232] usb 2-1: USB disconnect, device number 22 [ 293.573061][ T6899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.837'. [ 295.305869][ T6921] Malformed UNC in devname [ 295.305869][ T6921] [ 295.312559][ T6921] CIFS: VFS: Malformed UNC in devname [ 296.062752][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 296.309804][ T6923] device veth0_to_batadv entered promiscuous mode [ 296.319568][ T6923] device veth0_to_batadv left promiscuous mode [ 296.463872][ T6931] overlayfs: failed to get inode (-116) [ 296.692727][ T6931] overlayfs: failed to get inode (-116) [ 299.288810][ T6965] Malformed UNC in devname [ 299.288810][ T6965] [ 299.295606][ T6965] CIFS: VFS: Malformed UNC in devname [ 301.410271][ T21] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 301.785122][ T21] usb 3-1: too many configurations: 139, using maximum allowed: 8 [ 301.789757][ T4241] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 301.793515][ T5793] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 301.835724][ T5793] dvb_usb_ec168: probe of 4-1:0.1 failed with error -2 [ 301.852603][ T4241] dvb_usb_ec168: probe of 1-1:0.1 failed with error -110 [ 301.854824][ T5793] usb 4-1: USB disconnect, device number 13 [ 301.894014][ T4241] usb 1-1: USB disconnect, device number 20 [ 301.959289][ T21] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 301.969705][ T21] usb 3-1: can't read configurations, error -61 [ 302.147950][ T21] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 302.286854][ T4241] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.547155][ T7004] binder: 6997:7004 ioctl 4018620d 0 returned -22 [ 302.734600][ T7001] Malformed UNC in devname [ 302.734600][ T7001] [ 302.741395][ T7001] CIFS: VFS: Malformed UNC in devname [ 303.549050][ T4241] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.563428][ T4241] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 303.741495][ T4241] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.805019][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.859449][ T4241] usb 1-1: Product: syz [ 303.888929][ T4241] usb 1-1: Manufacturer: syz [ 303.915532][ T4241] usb 1-1: SerialNumber: syz [ 304.724428][ T4241] cdc_ncm 1-1:1.0: bind() failure [ 304.732223][ T4241] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 304.751149][ T4241] cdc_ncm 1-1:1.1: bind() failure [ 304.772553][ T4241] usb 1-1: USB disconnect, device number 21 [ 305.816143][ T7050] binder: 7039:7050 ioctl 4018620d 0 returned -22 [ 307.055101][ T6232] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 307.375776][ T6232] usb 2-1: Using ep0 maxpacket: 16 [ 307.504000][ T6232] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 307.512193][ T6232] usb 2-1: config 0 has no interface number 0 [ 307.524771][ T6232] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 307.541979][ T6232] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 307.611029][ T7076] Malformed UNC in devname [ 307.611029][ T7076] [ 307.617679][ T7076] CIFS: VFS: Malformed UNC in devname [ 307.675393][ T6232] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 307.705745][ T6232] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 307.751472][ T6232] usb 2-1: Product: syz [ 307.774824][ T6232] usb 2-1: SerialNumber: syz [ 307.821507][ T6232] usb 2-1: config 0 descriptor?? [ 307.910514][ T6232] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 307.946428][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input33 [ 308.225035][ T6232] usb 2-1: USB disconnect, device number 23 [ 308.241467][ C0] cm109_urb_ctl_callback: 20 callbacks suppressed [ 308.241489][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 308.254825][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 308.312117][ T6232] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 308.733383][ T1108] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 308.806436][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 308.886902][ T7086] device veth0_to_batadv entered promiscuous mode [ 309.193542][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.221517][ T1108] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 309.471534][ T1108] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.505221][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.605822][ T7086] device veth0_to_batadv left promiscuous mode [ 309.612039][ T1108] usb 3-1: Product: syz [ 309.616200][ T1108] usb 3-1: Manufacturer: syz [ 309.621455][ T1108] usb 3-1: SerialNumber: syz [ 310.489573][ T7103] binder: 7088:7103 ioctl 4018620d 0 returned -22 [ 310.519573][ T1108] cdc_ncm 3-1:1.0: bind() failure [ 310.561740][ T1108] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 310.568678][ T1108] cdc_ncm 3-1:1.1: bind() failure [ 310.618464][ T1108] usb 3-1: USB disconnect, device number 22 [ 311.273943][ T7120] Malformed UNC in devname [ 311.273943][ T7120] [ 311.280759][ T7120] CIFS: VFS: Malformed UNC in devname [ 313.304185][ T7142] tmpfs: Unknown parameter 'func' [ 313.338169][ T7139] virtio-fs: tag <(null)> not found [ 314.626897][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 314.694247][ T7168] syz.3.922 (7168) used greatest stack depth: 17376 bytes left [ 314.736230][ T7171] binder: 7162:7171 ioctl 4018620d 0 returned -22 [ 315.657341][ T7186] virtio-fs: tag <(null)> not found [ 315.928315][ T4214] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 316.302267][ T4214] usb 3-1: Using ep0 maxpacket: 32 [ 316.430656][ T4214] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 316.441416][ T4214] usb 3-1: config 0 has no interface number 0 [ 316.447512][ T4214] usb 3-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 316.476129][ T4214] usb 3-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 316.505546][ T4214] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 316.515475][ T4214] usb 3-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.569302][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'. [ 316.740789][ T4214] usb 3-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 316.754584][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.772370][ T4214] usb 3-1: Product: syz [ 316.781803][ T4214] usb 3-1: Manufacturer: syz [ 316.792316][ T4214] usb 3-1: SerialNumber: syz [ 316.980024][ T4214] usb 3-1: config 0 descriptor?? [ 317.008179][ T7187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 317.024227][ T7187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 317.052605][ T4214] spcp8x5 3-1:0.110: required endpoints missing [ 317.933542][ T5483] usb 3-1: USB disconnect, device number 23 [ 318.227464][ T7228] virtio-fs: tag <(null)> not found [ 319.250494][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 319.834425][ T7257] binder: 7241:7257 ioctl 4018620d 0 returned -22 [ 320.543172][ T7266] virtio-fs: tag <(null)> not found [ 321.261355][ T7271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 321.345492][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 321.368550][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.388546][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.403222][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.422281][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.431011][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.463875][ T7280] netlink: 36 bytes leftover after parsing attributes in process `syz.3.962'. [ 321.508848][ T7284] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 321.540714][ T4241] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 321.551253][ T7284] device team_slave_0 left promiscuous mode [ 321.572370][ T7284] device team_slave_1 left promiscuous mode [ 321.601568][ T7284] device team_slave_0 entered promiscuous mode [ 321.607901][ T7284] device team_slave_1 entered promiscuous mode [ 321.623223][ T7284] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.646001][ T7284] bond0: (slave team0): Enslaving as an active interface with an up link [ 321.797325][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 321.926346][ T4241] usb 1-1: config 0 has an invalid interface number: 110 but max is 0 [ 322.010712][ T4241] usb 1-1: config 0 has no interface number 0 [ 322.064531][ T4241] usb 1-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 322.098432][ T4241] usb 1-1: config 0 interface 110 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 322.117896][ T4241] usb 1-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 322.127811][ T4241] usb 1-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.405437][ T7304] virtio-fs: tag <(null)> not found [ 322.670998][ T4241] usb 1-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 323.380800][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.404259][ T4241] usb 1-1: Product: syz [ 323.410614][ T4241] usb 1-1: Manufacturer: syz [ 323.438560][ T4241] usb 1-1: SerialNumber: syz [ 323.471226][ T4241] usb 1-1: config 0 descriptor?? [ 323.497294][ T7268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 323.504322][ T7268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 323.553925][ T4241] spcp8x5 1-1:0.110: required endpoints missing [ 324.181772][ T21] usb 1-1: USB disconnect, device number 22 [ 324.341395][ T1111] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 324.623239][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 324.748406][ T1111] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 324.789239][ T1111] usb 5-1: config 0 has no interface number 0 [ 324.974137][ T1111] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 325.028881][ T1111] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 325.125551][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 325.168995][ T7331] bond0: (slave team0): Releasing backup interface [ 325.175602][ T1111] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.175629][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.175649][ T1111] usb 5-1: Product: syz [ 325.175664][ T1111] usb 5-1: SerialNumber: syz [ 325.280515][ T7331] device team_slave_0 left promiscuous mode [ 325.293532][ T7331] device team_slave_1 left promiscuous mode [ 325.355260][ T1111] usb 5-1: config 0 descriptor?? [ 325.372444][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.384658][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.397995][ T7331] device bridge_slave_0 left promiscuous mode [ 325.406135][ T1111] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 325.413348][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.106705][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input34 [ 326.226319][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.242161][ T1111] usb 5-1: USB disconnect, device number 20 [ 326.248276][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 326.248299][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 326.252784][ T7331] device bridge_slave_1 left promiscuous mode [ 326.256357][ T1111] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 326.292339][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.463004][ T7331] bond0: (slave bond_slave_0): Releasing backup interface [ 326.517059][ T7331] bond0: (slave bond_slave_1): Releasing backup interface [ 326.554281][ T7331] team0: Port device team_slave_0 removed [ 326.577586][ T7331] team0: Port device team_slave_1 removed [ 326.932358][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.274553][ T7331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.289462][ T7331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.300877][ T7331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.488288][ T7355] netlink: 'syz.3.992': attribute type 21 has an invalid length. [ 327.497204][ T7351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.516380][ T7355] netlink: 128 bytes leftover after parsing attributes in process `syz.3.992'. [ 327.527013][ T7355] netlink: 'syz.3.992': attribute type 5 has an invalid length. [ 327.535754][ T7355] netlink: 'syz.3.992': attribute type 6 has an invalid length. [ 327.536626][ T7356] netlink: 120 bytes leftover after parsing attributes in process `syz.0.991'. [ 327.559676][ T7355] netlink: 3 bytes leftover after parsing attributes in process `syz.3.992'. [ 327.592697][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 327.876786][ T7313] Set syz1 is full, maxelem 65536 reached [ 327.987274][ T1111] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 328.504343][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 328.553776][ T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.628662][ T1111] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 328.639410][ T1111] usb 3-1: config 0 has no interface number 0 [ 328.653288][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 328.668406][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 328.916476][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 328.929848][ T1111] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.939558][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.947733][ T1111] usb 3-1: Product: syz [ 328.959906][ T1111] usb 3-1: SerialNumber: syz [ 328.971620][ T1111] usb 3-1: config 0 descriptor?? [ 329.015688][ T1111] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 329.033087][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input35 [ 329.050405][ T23] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 329.064633][ T23] usb 2-1: config 0 has no interface number 0 [ 329.074167][ T23] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 329.114812][ T23] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 329.277489][ T5483] usb 3-1: USB disconnect, device number 24 [ 329.280655][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 329.290609][ T5483] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 329.301765][ T23] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 329.311305][ T23] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 329.319625][ T23] usb 2-1: Product: syz [ 329.323959][ T23] usb 2-1: SerialNumber: syz [ 329.386785][ T23] usb 2-1: config 0 descriptor?? [ 329.484199][ T23] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 329.523944][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input36 [ 329.689472][ T1108] usb 2-1: USB disconnect, device number 24 [ 329.708222][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 329.738810][ T1108] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 330.078178][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1019'. [ 330.727941][ T7442] Malformed UNC in devname [ 330.727941][ T7442] [ 330.734687][ T7442] CIFS: VFS: Malformed UNC in devname [ 331.729140][ T7456] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 331.910775][ T1111] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 332.167259][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 332.295565][ T1111] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 332.303799][ T1111] usb 4-1: config 0 has no interface number 0 [ 332.310326][ T1111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 332.322051][ T1111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 332.455832][ T1111] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 332.470522][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 332.487791][ T1111] usb 4-1: Product: syz [ 332.498506][ T1111] usb 4-1: SerialNumber: syz [ 332.515268][ T1111] usb 4-1: config 0 descriptor?? [ 332.530754][ T4241] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 332.577326][ T1111] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 332.595699][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input37 [ 332.787352][ T4241] usb 3-1: Using ep0 maxpacket: 16 [ 332.812391][ T1111] usb 4-1: USB disconnect, device number 14 [ 332.819189][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 332.826138][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 332.860632][ T1111] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 332.915886][ T4241] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 332.930909][ T4241] usb 3-1: config 0 has no interface number 0 [ 332.956725][ T4241] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 332.987020][ T4241] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 333.140150][ T4241] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 333.149200][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 333.164451][ T4241] usb 3-1: Product: syz [ 333.168785][ T4241] usb 3-1: SerialNumber: syz [ 333.207376][ T4241] usb 3-1: config 0 descriptor?? [ 333.248535][ T4241] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 333.256302][ T4241] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input38 [ 333.383729][ T7487] Malformed UNC in devname [ 333.383729][ T7487] [ 333.390455][ T7487] CIFS: VFS: Malformed UNC in devname [ 333.583702][ T4241] usb 3-1: USB disconnect, device number 25 [ 333.589799][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 333.589825][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 333.902223][ T4241] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 334.199668][ T7494] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.641525][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.648922][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.115931][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 335.514421][ T7530] Malformed UNC in devname [ 335.514421][ T7530] [ 335.521074][ T7530] CIFS: VFS: Malformed UNC in devname [ 336.379842][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 336.421011][ T7545] device bridge0 entered promiscuous mode [ 336.449684][ T7545] device macvtap1 entered promiscuous mode [ 336.480501][ T7547] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1061'. [ 336.490692][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 336.507387][ T7548] device bridge0 left promiscuous mode [ 336.523591][ T7547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1061'. [ 336.529887][ T1108] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 336.860378][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 336.947859][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 336.971854][ T7567] device veth0_to_batadv entered promiscuous mode [ 336.999077][ T7567] device veth0_to_batadv left promiscuous mode [ 337.020880][ T1108] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 337.138465][ T1108] usb 3-1: config 0 has no interface number 0 [ 337.201809][ T1108] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 337.311331][ T1108] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 337.682529][ T1108] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 337.695166][ T7573] Malformed UNC in devname [ 337.695166][ T7573] [ 337.701932][ T7573] CIFS: VFS: Malformed UNC in devname [ 337.711739][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 337.720839][ T1108] usb 3-1: Product: syz [ 337.725118][ T1108] usb 3-1: SerialNumber: syz [ 337.739143][ T1108] usb 3-1: config 0 descriptor?? [ 337.905126][ T1108] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 338.085557][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input39 [ 338.207297][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.228670][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.260715][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.268152][ T1108] usb 3-1: USB disconnect, device number 26 [ 338.292773][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 338.299815][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 338.354432][ T1108] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 338.417007][ T7576] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 338.428652][ T7576] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.443557][ T7576] bond0: (slave team0): Enslaving as an active interface with an up link [ 338.856764][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 339.297783][ T7576] infiniband syz1: set down [ 339.302721][ T7576] infiniband syz1: added team_slave_0 [ 339.403489][ T7576] infiniband syz1: Couldn't open port 1 [ 339.476727][ T7619] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1080'. [ 339.505749][ T7619] device veth0_to_batadv entered promiscuous mode [ 339.620633][ T7619] device veth0_to_batadv left promiscuous mode [ 340.089305][ T7576] RDS/IB: syz1: added [ 340.093817][ T7576] smc: adding ib device syz1 with port count 1 [ 340.174433][ T7576] smc: ib device syz1 port 1 has pnetid [ 340.529831][ T7627] Malformed UNC in devname [ 340.529831][ T7627] [ 340.537000][ T7627] CIFS: VFS: Malformed UNC in devname [ 341.852987][ T23] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 342.153745][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 342.313257][ T23] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 342.483050][ T7639] IPv6: Can't replace route, no match found [ 342.508136][ T23] usb 1-1: config 0 has no interface number 0 [ 342.522381][ T23] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 342.536626][ T23] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 342.633226][ T6232] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 342.666758][ T7643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.674007][ T7643] IPv6: NLM_F_CREATE should be set when creating new route [ 342.681243][ T7643] IPv6: NLM_F_CREATE should be set when creating new route [ 342.689886][ T23] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 342.708166][ T23] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 342.727118][ T23] usb 1-1: Product: syz [ 342.731431][ T23] usb 1-1: SerialNumber: syz [ 342.746731][ T23] usb 1-1: config 0 descriptor?? [ 342.816623][ T23] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 342.824558][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input40 [ 343.038002][ T1108] usb 1-1: USB disconnect, device number 23 [ 343.043960][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 343.043984][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 343.104396][ T1108] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 344.333039][ T6232] usb 2-1: device descriptor read/all, error -71 [ 345.766661][ T1111] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 346.214532][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 347.361619][ T7726] netlink: 'syz.1.1119': attribute type 25 has an invalid length. [ 347.395306][ T7726] netlink: 'syz.1.1119': attribute type 7 has an invalid length. [ 347.415011][ T1111] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 347.458501][ T1111] usb 3-1: config 0 has no interface number 0 [ 347.464750][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 347.562235][ T1111] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 347.700747][ T1111] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 347.732600][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 347.779393][ T1111] usb 3-1: Product: syz [ 347.791847][ T1111] usb 3-1: SerialNumber: syz [ 347.828018][ T1111] usb 3-1: config 0 descriptor?? [ 347.870413][ T7744] netlink: 'syz.0.1124': attribute type 3 has an invalid length. [ 347.898490][ T1111] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 347.934109][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input41 [ 348.128142][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.149593][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.170949][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.192323][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.213682][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.235044][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.256488][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.277806][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.299210][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.308562][ T7755] binder: 7733:7755 ioctl 4018620d 0 returned -22 [ 348.320566][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 348.355463][ T1111] usb 3-1: USB disconnect, device number 27 [ 348.363333][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 348.378189][ T1111] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 350.792881][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 350.967902][ T7797] Malformed UNC in devname [ 350.967902][ T7797] [ 350.974707][ T7797] CIFS: VFS: Malformed UNC in devname [ 352.049403][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 352.074890][ T7808] 8021q: VLANs not supported on hsr0 [ 352.447263][ T23] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 353.163848][ T23] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 353.284222][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.300832][ T7825] tipc: Failed to remove unknown binding: 66,1,1/0:2555830138/2555830140 [ 353.354277][ T23] usb 3-1: config 0 descriptor?? [ 353.413725][ T23] usb 3-1: selecting invalid altsetting 3 [ 353.435685][ T23] comedi comedi0: could not set alternate setting 3 in high speed [ 353.512043][ T23] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 353.533774][ T23] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 354.082734][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.089855][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.244248][ T7844] Malformed UNC in devname [ 354.244248][ T7844] [ 354.250878][ T7844] CIFS: VFS: Malformed UNC in devname [ 354.933073][ T7846] binder: 7845:7846 ioctl 4018620d 0 returned -22 [ 355.002726][ T4241] usb 3-1: USB disconnect, device number 28 [ 355.057671][ T7825] tipc: Failed to remove unknown binding: 66,1,1/0:2555830138/2555830140 [ 355.108786][ T7825] tipc: Failed to remove unknown binding: 66,1,1/0:2555830138/2555830140 [ 357.124972][ T7886] Malformed UNC in devname [ 357.124972][ T7886] [ 357.131661][ T7886] CIFS: VFS: Malformed UNC in devname [ 357.290154][ T1108] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 357.568074][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 357.707240][ T1108] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 357.735691][ T1108] usb 4-1: config 0 has no interface number 0 [ 357.818891][ T1108] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 357.845266][ T1108] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 357.961080][ T7894] hsr0: mtu greater than device maximum [ 358.000679][ T1108] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 358.027621][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 358.055034][ T1108] usb 4-1: Product: syz [ 358.074252][ T1108] usb 4-1: SerialNumber: syz [ 358.091303][ T1108] usb 4-1: config 0 descriptor?? [ 358.160616][ T1108] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 358.231614][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input42 [ 358.395985][ T1108] usb 4-1: USB disconnect, device number 15 [ 358.423188][ C1] cm109_urb_ctl_callback: 2 callbacks suppressed [ 358.423207][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 358.436465][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 358.453012][ T1108] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 360.618869][ T7930] device rose2 entered promiscuous mode [ 360.666638][ T7938] Malformed UNC in devname [ 360.666638][ T7938] [ 360.673267][ T7938] CIFS: VFS: Malformed UNC in devname [ 362.907150][ T7973] netlink: 22 bytes leftover after parsing attributes in process `syz.2.1197'. [ 362.921935][ T7974] ieee802154 phy0 wpan0: encryption failed: -90 [ 363.273836][ T7986] netlink: 'syz.1.1202': attribute type 12 has an invalid length. [ 363.375690][ T7995] Malformed UNC in devname [ 363.375690][ T7995] [ 363.382333][ T7995] CIFS: VFS: Malformed UNC in devname [ 363.591920][ T4241] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 364.634556][ T4241] usb 3-1: Using ep0 maxpacket: 16 [ 364.674093][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 364.694074][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 364.763265][ T4241] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 364.784318][ T4241] usb 3-1: config 0 has no interface number 0 [ 364.857114][ T4241] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 364.946454][ T4241] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 365.098735][ T4241] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 365.126293][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 365.150583][ T4241] usb 3-1: Product: syz [ 365.165177][ T4241] usb 3-1: SerialNumber: syz [ 365.218878][ T4241] usb 3-1: config 0 descriptor?? [ 365.277782][ T4241] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 365.285630][ T4241] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input43 [ 366.032072][ T8031] binder: BINDER_SET_CONTEXT_MGR already set [ 366.053767][ T8031] binder: 8029:8031 ioctl 4018620d 200001c0 returned -16 [ 366.152514][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 366.161618][ T4241] usb 3-1: USB disconnect, device number 29 [ 366.173892][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 366.180991][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 366.297462][ T8039] Malformed UNC in devname [ 366.297462][ T8039] [ 366.304275][ T8039] CIFS: VFS: Malformed UNC in devname [ 366.329271][ T4241] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 366.566011][ T8043] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.607573][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 367.840909][ T8073] netlink: 'syz.2.1231': attribute type 21 has an invalid length. [ 367.869160][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1231'. [ 368.141048][ T5793] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 368.627284][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 369.514923][ T5793] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 369.546137][ T5793] usb 1-1: config 0 has no interface number 0 [ 369.589392][ T5793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 369.612854][ T5793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 369.787589][ T5793] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 369.799331][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 369.807853][ T5793] usb 1-1: Product: syz [ 369.812932][ T5793] usb 1-1: SerialNumber: syz [ 369.821232][ T5793] usb 1-1: config 0 descriptor?? [ 369.875019][ T5793] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 369.884243][ T5793] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input44 [ 369.932024][ T8152] tipc: Failed to remove unknown binding: 66,1,1/0:1335476079/1335476081 [ 369.994448][ T8154] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20003 [ 370.092867][ T5793] usb 1-1: USB disconnect, device number 24 [ 370.118714][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 370.125875][ T5793] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 370.179366][ T8152] tipc: Failed to remove unknown binding: 66,1,1/0:1335476079/1335476081 [ 370.248899][ T8152] tipc: Failed to remove unknown binding: 66,1,1/0:1335476079/1335476081 [ 371.600141][ T8172] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 371.616033][ T8172] netlink: 'syz.4.1250': attribute type 2 has an invalid length. [ 371.624327][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1250'. [ 371.643935][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1250'. [ 372.214094][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 372.393287][ T8203] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 372.484918][ T8213] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 372.502834][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 372.557848][ T8212] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1269'. [ 372.644815][ T8203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.667102][ T407] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 372.679825][ T8212] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 372.724600][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 372.797439][ T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 372.814288][ T23] usb 3-1: config 0 has no interface number 0 [ 372.823747][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 372.834652][ T151] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 372.844825][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 373.210055][ T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 373.262143][ T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 373.387924][ T23] usb 3-1: Product: syz [ 373.448811][ T23] usb 3-1: SerialNumber: syz [ 373.643585][ T23] usb 3-1: config 0 descriptor?? [ 373.671437][ T8247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 373.862125][ T23] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 373.870010][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input45 [ 374.095617][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 374.104914][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1286'. [ 374.115935][ T23] usb 3-1: USB disconnect, device number 30 [ 374.121894][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 374.121920][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 374.160750][ T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 374.859410][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 375.245480][ T8280] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1290'. [ 375.417212][ T8290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 375.638891][ T8299] Malformed UNC in devname [ 375.638891][ T8299] [ 375.645573][ T8299] CIFS: VFS: Malformed UNC in devname [ 376.554659][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 376.853989][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 377.025063][ T23] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 377.033315][ T23] usb 3-1: config 0 has no interface number 0 [ 377.044304][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 377.057483][ T23] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 377.206719][ T23] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 377.228239][ T23] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 377.236321][ T23] usb 3-1: Product: syz [ 377.325197][ T23] usb 3-1: SerialNumber: syz [ 377.393180][ T23] usb 3-1: config 0 descriptor?? [ 377.593319][ T23] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 377.710202][ T23] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input46 [ 378.438372][ T23] usb 3-1: USB disconnect, device number 31 [ 378.457404][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 378.464361][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 378.524098][ T23] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 381.118410][ T8362] Malformed UNC in devname [ 381.118410][ T8362] [ 381.125176][ T8362] CIFS: VFS: Malformed UNC in devname [ 381.368580][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 381.393880][ T8365] device veth0_to_batadv entered promiscuous mode [ 381.660111][ T8365] device veth0_to_batadv left promiscuous mode [ 383.150592][ T1111] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.221312][ T8378] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1324'. [ 383.254452][ T1108] Bluetooth: hci3: command 0x0405 tx timeout [ 383.308775][ T8377] netlink: 'syz.4.1324': attribute type 3 has an invalid length. [ 384.134953][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 384.262719][ T1111] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 384.262757][ T1111] usb 2-1: config 0 has no interface number 0 [ 384.316940][ T1111] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 384.400089][ T1111] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 384.627212][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1329'. [ 384.668905][ T1111] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 384.677976][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 384.713499][ T1111] usb 2-1: Product: syz [ 384.717668][ T1111] usb 2-1: SerialNumber: syz [ 384.747900][ T1111] usb 2-1: config 0 descriptor?? [ 384.801757][ T1111] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 384.827954][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input47 [ 385.027225][ T23] usb 2-1: USB disconnect, device number 27 [ 385.042804][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 385.050605][ T23] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 386.076258][ T8414] Malformed UNC in devname [ 386.076258][ T8414] [ 386.083055][ T8414] CIFS: VFS: Malformed UNC in devname [ 386.800715][ T8420] binder: 8406:8420 ioctl 4018620d 0 returned -22 [ 387.214881][ T8428] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1340'. [ 387.232555][ T8428] netlink: 'syz.2.1340': attribute type 3 has an invalid length. [ 387.400596][ T8410] netlink: 'syz.3.1336': attribute type 1 has an invalid length. [ 387.408597][ T8410] netlink: 'syz.3.1336': attribute type 2 has an invalid length. [ 387.464404][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1336'. [ 387.572437][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'. [ 388.031376][ T8445] binder: BINDER_SET_CONTEXT_MGR already set [ 388.068442][ T8445] binder: 8444:8445 ioctl 4018620d 200001c0 returned -16 [ 388.306499][ T1111] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 389.180861][ T8454] Malformed UNC in devname [ 389.180861][ T8454] [ 389.187475][ T8454] CIFS: VFS: Malformed UNC in devname [ 389.561448][ T8464] binder: 8455:8464 ioctl 4018620d 0 returned -22 [ 389.672109][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 389.800441][ T1111] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 389.819777][ T1111] usb 1-1: config 0 has no interface number 0 [ 389.871465][ T1111] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 389.968010][ T1111] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 390.121613][ T1111] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 390.131092][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 390.199583][ T1111] usb 1-1: Product: syz [ 390.203764][ T1111] usb 1-1: SerialNumber: syz [ 390.316478][ T1111] usb 1-1: config 0 descriptor?? [ 390.423094][ T1111] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 390.443446][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input48 [ 390.655378][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.676777][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.698147][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.719544][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.736038][ T1111] usb 1-1: USB disconnect, device number 25 [ 390.742049][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 390.742071][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 390.791214][ T1111] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 390.899036][ T8487] binder: 8485:8487 ioctl c0306201 0 returned -14 [ 391.365082][ T8496] Malformed UNC in devname [ 391.365082][ T8496] [ 391.371842][ T8496] CIFS: VFS: Malformed UNC in devname [ 391.419858][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'. [ 391.441108][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1364'. [ 391.470659][ T8498] device macvlan1 entered promiscuous mode [ 391.489584][ T8498] device syz_tun entered promiscuous mode [ 391.562917][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready [ 391.712383][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1365'. [ 391.735715][ T8505] device veth0_to_batadv entered promiscuous mode [ 391.758801][ T8505] device veth0_to_batadv left promiscuous mode [ 393.288456][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 393.664753][ T8535] binder: 8530:8535 ioctl 4018620d 0 returned -22 [ 393.941120][ T8542] binder: 8541:8542 ioctl c0306201 0 returned -14 [ 395.008795][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'. [ 395.032912][ T8554] device veth0_to_batadv entered promiscuous mode [ 395.049058][ T8554] device veth0_to_batadv left promiscuous mode [ 395.970078][ T8562] Malformed UNC in devname [ 395.970078][ T8562] [ 395.976812][ T8562] CIFS: VFS: Malformed UNC in devname [ 396.172745][ T8566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1386'. [ 396.952406][ T21] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 397.251595][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 397.380380][ T21] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 397.417140][ T21] usb 1-1: config 0 has no interface number 0 [ 397.519173][ T21] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 397.540159][ T21] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 397.570239][ T8586] ebt_limit: overflow, try lower: 570423552/2483027968 [ 397.862283][ T21] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 397.871790][ T21] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 397.879945][ T21] usb 1-1: Product: syz [ 397.884584][ T21] usb 1-1: SerialNumber: syz [ 397.891088][ T21] usb 1-1: config 0 descriptor?? [ 397.991258][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1393'. [ 398.015601][ T8606] device veth0_to_batadv entered promiscuous mode [ 398.045814][ T8606] device veth0_to_batadv left promiscuous mode [ 398.566182][ T21] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 398.607547][ T21] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input49 [ 398.719620][ T21] usb 1-1: USB disconnect, device number 26 [ 398.748179][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 398.756410][ T21] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 398.778595][ T8614] netlink: 47 bytes leftover after parsing attributes in process `syz.4.1399'. [ 399.251835][ T8626] binder: 8620:8626 ioctl 4018620d 0 returned -22 [ 400.310378][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.433754][ T8648] ebt_limit: overflow, try lower: 570423552/2483027968 [ 400.701678][ T8558] Set syz1 is full, maxelem 65536 reached [ 401.014641][ T8642] bridge0: port 3(team0) entered disabled state [ 401.021146][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.028333][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.427360][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.472783][ T8642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.866082][ T8642] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.875142][ T8642] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.884405][ T8642] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.893457][ T8642] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.090380][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.112605][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 402.121822][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.146759][ T8646] bridge0: port 3(team0) entered blocking state [ 402.153203][ T8646] bridge0: port 3(team0) entered forwarding state [ 402.160405][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.170608][ T8646] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 402.190748][ T8132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.218567][ T8132] bridge0: port 3(team0) entered disabled state [ 403.677097][ T8692] ebt_limit: overflow, try lower: 570423552/2483027968 [ 404.122681][ T8716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1431'. [ 404.461477][ T8725] binder: 8724:8725 ioctl 4018620d 0 returned -22 [ 405.860515][ T8755] binder: 8754:8755 ioctl 4018620d 0 returned -22 [ 406.230209][ T8762] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1448'. [ 407.389085][ T8780] Malformed UNC in devname [ 407.389085][ T8780] [ 407.395751][ T8780] CIFS: VFS: Malformed UNC in devname [ 407.600066][ T6232] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 407.832619][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1460'. [ 407.856636][ T6232] usb 3-1: Using ep0 maxpacket: 16 [ 407.869643][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 407.985135][ T6232] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 407.993142][ T6232] usb 3-1: config 0 has no interface number 0 [ 408.022887][ T6232] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 408.079784][ T6232] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 408.189000][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 408.189013][ T26] audit: type=1107 audit(1734964914.261:83): pid=8803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0~w' [ 408.241661][ T6232] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 408.258994][ T6232] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 408.298067][ T6232] usb 3-1: Product: syz [ 408.317140][ T6232] usb 3-1: SerialNumber: syz [ 408.340226][ T6232] usb 3-1: config 0 descriptor?? [ 408.382384][ T6232] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 408.403678][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input50 [ 408.984785][ T5483] usb 3-1: USB disconnect, device number 32 [ 408.989794][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 408.998098][ T5483] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 409.652194][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1469'. [ 410.080450][ T6232] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 410.476042][ T6232] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 410.517545][ T6232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.544410][ T8832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1463'. [ 410.544650][ T6232] usb 1-1: config 0 descriptor?? [ 410.560389][ T8831] ebt_limit: overflow, try lower: 570423552/2483027968 [ 410.620365][ T8832] device veth0_to_batadv entered promiscuous mode [ 410.634767][ T6232] usb 1-1: selecting invalid altsetting 3 [ 410.643635][ T6232] comedi comedi0: could not set alternate setting 3 in high speed [ 410.663825][ T6232] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 410.664890][ T8832] device veth0_to_batadv left promiscuous mode [ 410.693991][ T6232] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 410.695435][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1474'. [ 410.823074][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 411.039252][ T8846] Malformed UNC in devname [ 411.039252][ T8846] [ 411.046134][ T8846] CIFS: VFS: Malformed UNC in devname [ 411.448752][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 412.761413][ T4241] usb 1-1: USB disconnect, device number 27 [ 412.859801][ T1108] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 413.463464][ T1108] usb 3-1: Using ep0 maxpacket: 16 [ 413.622269][ T1108] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 413.648750][ T1108] usb 3-1: config 0 has no interface number 0 [ 413.656773][ T1108] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 413.668279][ T1108] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 413.731418][ T8880] xt_CT: No such helper "snmp" [ 413.794916][ T8886] netlink: 79 bytes leftover after parsing attributes in process `syz.3.1500'. [ 413.811524][ T1108] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 413.843977][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 413.852063][ T1108] usb 3-1: Product: syz [ 414.035752][ T1108] usb 3-1: SerialNumber: syz [ 414.049856][ T1108] usb 3-1: config 0 descriptor?? [ 415.191198][ T1108] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 415.210970][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input51 [ 415.648764][ T1108] usb 3-1: USB disconnect, device number 33 [ 415.679701][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 415.697620][ T1108] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 415.777493][ T8916] netlink: 'syz.4.1498': attribute type 10 has an invalid length. [ 415.878530][ T8922] Malformed UNC in devname [ 415.878530][ T8922] [ 415.885466][ T8922] CIFS: VFS: Malformed UNC in devname [ 415.929370][ T8916] device veth0_vlan left promiscuous mode [ 415.985296][ T8916] device veth0_vlan entered promiscuous mode [ 416.063561][ T8916] team0: Device veth0_vlan failed to register rx_handler [ 416.341679][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 416.355755][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 416.420626][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 416.661840][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 416.833228][ T1108] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 417.125536][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 417.275376][ T1108] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 417.299014][ T1108] usb 5-1: config 0 has no interface number 0 [ 417.373627][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 417.434767][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 417.867612][ T1108] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 417.895072][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 417.927348][ T1108] usb 5-1: Product: syz [ 417.931530][ T1108] usb 5-1: SerialNumber: syz [ 417.965981][ T1108] usb 5-1: config 0 descriptor?? [ 418.025151][ T1108] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 418.033176][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input52 [ 418.242800][ T1108] usb 5-1: USB disconnect, device number 21 [ 418.248779][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 418.248803][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 418.323248][ T1108] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 418.457707][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1510'. [ 418.469919][ T8960] device veth0_to_batadv entered promiscuous mode [ 418.653652][ T8960] device veth0_to_batadv left promiscuous mode [ 418.938210][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 419.006909][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 419.030838][ T8964] device dummy0 entered promiscuous mode [ 419.093044][ T8964] device dummy0 left promiscuous mode [ 419.395428][ T8974] tipc: Failed to remove unknown binding: 66,1,1/0:2350092382/2350092384 [ 419.530845][ T8974] tipc: Failed to remove unknown binding: 66,1,1/0:2350092382/2350092384 [ 419.556911][ T8974] tipc: Failed to remove unknown binding: 66,1,1/0:2350092382/2350092384 [ 419.787945][ T8981] device vlan2 entered promiscuous mode [ 420.458882][ T8986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.995497][ T1108] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 421.294737][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 421.359619][ T9000] Malformed UNC in devname [ 421.359619][ T9000] [ 421.366272][ T9000] CIFS: VFS: Malformed UNC in devname [ 421.461176][ T1108] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 421.482224][ T1108] usb 5-1: config 0 has no interface number 0 [ 421.488674][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 421.508507][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 421.568872][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1531'. [ 421.581744][ T9002] device veth0_to_batadv entered promiscuous mode [ 421.589943][ T9002] device veth0_to_batadv left promiscuous mode [ 421.669081][ T1108] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 421.678153][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 421.706788][ T1108] usb 5-1: Product: syz [ 421.710966][ T1108] usb 5-1: SerialNumber: syz [ 421.735636][ T1108] usb 5-1: config 0 descriptor?? [ 421.778613][ T1108] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 421.793388][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input53 [ 421.996376][ T1108] usb 5-1: USB disconnect, device number 22 [ 422.010949][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 422.018569][ T1108] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 422.044938][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 424.727551][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 424.738584][ T9044] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 424.746815][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1548'. [ 424.815521][ T9043] device batadv0 entered promiscuous mode [ 424.833962][ T9043] device team0 entered promiscuous mode [ 424.840764][ T9043] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 424.854997][ T9043] Cannot create hsr debugfs directory [ 424.878506][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 425.057937][ T6232] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 425.084476][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1553'. [ 425.325166][ T6232] usb 4-1: Using ep0 maxpacket: 16 [ 425.464515][ T6232] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 425.472590][ T6232] usb 4-1: config 0 has no interface number 0 [ 425.513506][ T6232] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 425.557159][ T6232] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 425.721383][ T6232] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 425.747962][ T6232] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 425.800652][ T6232] usb 4-1: Product: syz [ 425.829381][ T6232] usb 4-1: SerialNumber: syz [ 425.932873][ T6232] usb 4-1: config 0 descriptor?? [ 426.043054][ T6232] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 426.057931][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input54 [ 426.186935][ T9075] Malformed UNC in devname [ 426.186935][ T9075] [ 426.193709][ T9075] CIFS: VFS: Malformed UNC in devname [ 426.714830][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 426.735204][ T6232] usb 4-1: USB disconnect, device number 16 [ 426.741218][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 426.741242][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 426.773823][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 426.806021][ T6232] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 427.065561][ T9088] netlink: 'syz.0.1561': attribute type 7 has an invalid length. [ 427.484590][ T1108] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 427.805409][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 427.966044][ T1108] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 427.993911][ T1108] usb 5-1: config 0 has no interface number 0 [ 428.096557][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 428.253265][ T1108] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 428.453161][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'. [ 428.503485][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1573'. [ 428.575917][ T1108] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 428.585718][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 428.593866][ T1108] usb 5-1: Product: syz [ 428.598479][ T1108] usb 5-1: SerialNumber: syz [ 428.602933][ T9109] device dummy0 entered promiscuous mode [ 428.604786][ T1108] usb 5-1: config 0 descriptor?? [ 428.622632][ T9109] device dummy0 left promiscuous mode [ 428.978138][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1576'. [ 429.002758][ T1111] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 429.314200][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 429.337136][ T1108] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 429.345202][ T1108] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input55 [ 429.357609][ T1108] usb 5-1: USB disconnect, device number 23 [ 429.366087][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 429.386407][ T1108] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 429.409231][ T1111] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 429.434607][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.480265][ T1111] usb 1-1: config 0 descriptor?? [ 429.667492][ T1111] usb 1-1: selecting invalid altsetting 3 [ 429.673238][ T1111] comedi comedi0: could not set alternate setting 3 in high speed [ 429.697493][ T1111] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 429.707449][ T1111] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 429.721743][ T9132] binder: 9130:9132 ioctl 4018620d 0 returned -22 [ 429.816483][ T6232] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 430.082358][ T6232] usb 3-1: Using ep0 maxpacket: 16 [ 430.210770][ T6232] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 430.220729][ T6232] usb 3-1: config 0 has no interface number 0 [ 430.231400][ T6232] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 430.258253][ T6232] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 430.485241][ T6232] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 430.494468][ T6232] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 430.512866][ T6232] usb 3-1: Product: syz [ 430.517147][ T6232] usb 3-1: SerialNumber: syz [ 430.560174][ T6232] usb 3-1: config 0 descriptor?? [ 430.629579][ T6232] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 430.637564][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input56 [ 430.736099][ T9142] binder: 9141:9142 ioctl 4018620d 0 returned -22 [ 430.847845][ T6232] usb 3-1: USB disconnect, device number 34 [ 430.862806][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 430.877654][ T6232] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 431.891899][ T6232] usb 1-1: USB disconnect, device number 28 [ 431.926244][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 432.021930][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 432.449435][ T9182] binder: 9181:9182 ioctl 4018620d 0 returned -22 [ 432.851479][ T6232] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 433.065235][ T1111] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 433.247001][ T6232] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 433.256266][ T6232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.301039][ T6232] usb 1-1: config 0 descriptor?? [ 433.332479][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 433.346214][ T6232] usb 1-1: selecting invalid altsetting 3 [ 433.351947][ T6232] comedi comedi0: could not set alternate setting 3 in high speed [ 433.360783][ T6232] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 433.371411][ T6232] usbduxsigma: probe of 1-1:0.0 failed with error -22 [ 433.484166][ T1111] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 433.494941][ T1111] usb 4-1: config 0 has no interface number 0 [ 433.501076][ T1111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 433.522026][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1604'. [ 433.531143][ T1111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 433.674765][ T1111] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 433.707442][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 433.766191][ T1111] usb 4-1: Product: syz [ 433.790932][ T1111] usb 4-1: SerialNumber: syz [ 433.867300][ T1111] usb 4-1: config 0 descriptor?? [ 433.971510][ T1111] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 434.029829][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input57 [ 434.152438][ T9202] xt_nfacct: accounting object `sy' does not exists [ 434.188483][ T5793] usb 4-1: USB disconnect, device number 17 [ 434.198232][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 434.205285][ T5793] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 434.370508][ T9212] dccp_v6_rcv: dropped packet with invalid checksum [ 435.372963][ T9167] Set syz1 is full, maxelem 65536 reached [ 435.501254][ T9249] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 435.595484][ T6232] usb 1-1: USB disconnect, device number 29 [ 435.786521][ T9260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.940975][ T4158] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 435.960563][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 436.070324][ T9266] device bridge0 entered promiscuous mode [ 436.112679][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 436.144885][ T9266] device bridge_slave_1 left promiscuous mode [ 436.151916][ T9266] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.186897][ T9266] device bridge_slave_0 left promiscuous mode [ 436.193205][ T9266] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.261786][ T4158] usb 4-1: Using ep0 maxpacket: 16 [ 436.306525][ T9266] device bridge0 left promiscuous mode [ 436.422022][ T4158] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 436.430044][ T4158] usb 4-1: config 0 has no interface number 0 [ 436.452963][ T4158] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 436.477658][ T4158] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 436.678662][ T4158] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 436.694692][ T4158] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 436.704318][ T4158] usb 4-1: Product: syz [ 436.708614][ T4158] usb 4-1: SerialNumber: syz [ 436.741775][ T4158] usb 4-1: config 0 descriptor?? [ 436.797792][ T4158] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 436.809334][ T4158] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input58 [ 437.109040][ T5793] usb 4-1: USB disconnect, device number 18 [ 437.127485][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 437.134440][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 437.153385][ T5793] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 437.384764][ T4158] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 437.844105][ T4158] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 437.853340][ T4158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.915098][ T4158] usb 3-1: config 0 descriptor?? [ 438.029699][ T4158] usb 3-1: selecting invalid altsetting 3 [ 438.036902][ T4158] comedi comedi0: could not set alternate setting 3 in high speed [ 438.044767][ T4158] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 438.098987][ T4158] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 438.395304][ T9342] bond0: option use_carrier: invalid value (4) [ 438.795437][ T4158] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 439.083850][ T4158] usb 4-1: Using ep0 maxpacket: 16 [ 439.223013][ T4158] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 439.231022][ T4158] usb 4-1: config 0 has no interface number 0 [ 439.254891][ T4158] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 439.271988][ T4158] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 439.428406][ T4158] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 439.446060][ T4158] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 439.479534][ T6232] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 439.479550][ T4158] usb 4-1: Product: syz [ 439.479567][ T4158] usb 4-1: SerialNumber: syz [ 439.513368][ T4158] usb 4-1: config 0 descriptor?? [ 439.577661][ T4158] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 439.585413][ T4158] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input59 [ 439.875108][ T6232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.915490][ T6232] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 439.928392][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 439.946885][ T1111] usb 4-1: USB disconnect, device number 19 [ 439.960458][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 439.970115][ T1111] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 440.063960][ T4214] usb 3-1: USB disconnect, device number 35 [ 440.185231][ T6232] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 440.201377][ T6232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.209828][ T6232] usb 2-1: Product: syz [ 440.214062][ T6232] usb 2-1: Manufacturer: syz [ 440.218920][ T6232] usb 2-1: SerialNumber: syz [ 441.922916][ T6232] cdc_ncm 2-1:1.0: bind() failure [ 441.940481][ T6232] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 441.947333][ T6232] cdc_ncm 2-1:1.1: bind() failure [ 441.989207][ T6232] usb 2-1: USB disconnect, device number 28 [ 442.825621][ T4208] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 442.851115][ T9440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.956960][ T9444] tipc: Failed to remove unknown binding: 66,1,1/0:3599148902/3599148904 [ 442.966919][ T9444] tipc: Failed to remove unknown binding: 66,1,1/0:3599148902/3599148904 [ 442.975427][ T9444] tipc: Failed to remove unknown binding: 66,1,1/0:3599148902/3599148904 [ 443.210429][ T4208] usb 4-1: Using ep0 maxpacket: 16 [ 443.304984][ T9459] binder: 9447:9459 ioctl 4018620d 0 returned -22 [ 443.335023][ T1111] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 443.467398][ T4208] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 443.495517][ T4208] usb 4-1: config 0 has no interface number 0 [ 443.538884][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 443.606136][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 444.084499][ T4208] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 444.111848][ T4208] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 444.172711][ T1111] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 444.180819][ T1111] usb 2-1: config 0 has no interface number 0 [ 444.204964][ T1111] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 444.238336][ T9471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.258229][ T4208] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 444.267282][ T4208] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 444.283938][ T1111] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 444.296476][ T4208] usb 4-1: Product: syz [ 444.300654][ T4208] usb 4-1: SerialNumber: syz [ 444.345246][ T4208] usb 4-1: config 0 descriptor?? [ 444.409386][ T4208] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 444.417261][ T4208] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input60 [ 444.427778][ T1111] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 444.444109][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 444.454681][ T1111] usb 2-1: Product: syz [ 444.461375][ T23] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 444.474598][ T1111] usb 2-1: SerialNumber: syz [ 444.493070][ T1111] usb 2-1: config 0 descriptor?? [ 444.552481][ T1111] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 444.572269][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input61 [ 444.629493][ T1111] usb 4-1: USB disconnect, device number 20 [ 444.642949][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 444.649899][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 444.685131][ T1111] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 444.764549][ T4208] usb 2-1: USB disconnect, device number 29 [ 444.781940][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 444.789170][ T4208] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 444.910432][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.927115][ T23] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 445.141695][ T9479] tipc: Failed to remove unknown binding: 66,1,1/0:2217751728/2217751730 [ 445.150491][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.161113][ T9479] tipc: Failed to remove unknown binding: 66,1,1/0:2217751728/2217751730 [ 445.175229][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.190043][ T9479] tipc: Failed to remove unknown binding: 66,1,1/0:2217751728/2217751730 [ 445.200291][ T23] usb 3-1: Product: syz [ 445.204521][ T23] usb 3-1: Manufacturer: syz [ 445.211392][ T23] usb 3-1: SerialNumber: syz [ 446.471756][ T9493] binder: 9489:9493 ioctl 4018620d 0 returned -22 [ 447.326463][ T23] cdc_ncm 3-1:1.0: bind() failure [ 447.337364][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 447.357623][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 447.373174][ T23] cdc_ncm 3-1:1.1: bind() failure [ 447.389844][ T23] usb 3-1: USB disconnect, device number 36 [ 447.939465][ T9518] tipc: Failed to remove unknown binding: 66,1,1/0:442447118/442447120 [ 447.948924][ T9518] tipc: Failed to remove unknown binding: 66,1,1/0:442447118/442447120 [ 447.957299][ T6232] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 447.958250][ T9518] tipc: Failed to remove unknown binding: 66,1,1/0:442447118/442447120 [ 448.169926][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1720'. [ 448.182692][ T9522] device veth0_to_batadv entered promiscuous mode [ 448.190961][ T9522] device veth0_to_batadv left promiscuous mode [ 448.288708][ T6232] usb 5-1: Using ep0 maxpacket: 16 [ 448.461025][ T9535] binder: 9528:9535 ioctl 4018620d 0 returned -22 [ 449.155594][ T6232] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 449.163604][ T6232] usb 5-1: config 0 has no interface number 0 [ 449.239991][ T6232] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 449.279133][ T9546] Set syz1 is full, maxelem 65536 reached [ 449.297791][ T6232] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 449.374429][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1730'. [ 449.388289][ T9553] tipc: Failed to remove unknown binding: 66,1,1/0:618991944/618991946 [ 449.398047][ T9553] tipc: Failed to remove unknown binding: 66,1,1/0:618991944/618991946 [ 449.411151][ T9553] tipc: Failed to remove unknown binding: 66,1,1/0:618991944/618991946 [ 449.454017][ T6232] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 449.471954][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 449.483458][ T6232] usb 5-1: Product: syz [ 449.493483][ T6232] usb 5-1: SerialNumber: syz [ 449.506354][ T6232] usb 5-1: config 0 descriptor?? [ 449.563455][ T6232] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 449.575544][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input62 [ 449.603454][ T1111] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 449.784934][ T6232] usb 5-1: USB disconnect, device number 24 [ 449.790922][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 449.790945][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 449.832904][ T6232] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 450.004760][ T1111] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.025415][ T1111] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 450.217667][ T1111] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.250241][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.262381][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'. [ 450.269472][ T1111] usb 4-1: Product: syz [ 450.274552][ T9564] device veth0_to_batadv entered promiscuous mode [ 450.285247][ T1111] usb 4-1: Manufacturer: syz [ 450.294217][ T1111] usb 4-1: SerialNumber: syz [ 450.327190][ T9564] device veth0_to_batadv left promiscuous mode [ 450.359294][ T9571] team0: No ports can be present during mode change [ 450.386679][ T9573] syz.4.1739 sent an empty control message without MSG_MORE. [ 450.400715][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1739'. [ 450.519355][ T9581] tipc: Failed to remove unknown binding: 66,1,1/0:3448050188/3448050190 [ 450.532594][ T9581] tipc: Failed to remove unknown binding: 66,1,1/0:3448050188/3448050190 [ 450.678592][ T9581] tipc: Failed to remove unknown binding: 66,1,1/0:3448050188/3448050190 [ 450.804526][ T9593] binder: 9583:9593 ioctl 4018620d 0 returned -22 [ 451.688260][ T1111] cdc_ncm 4-1:1.0: bind() failure [ 451.698020][ T1111] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 451.706138][ T1111] cdc_ncm 4-1:1.1: bind() failure [ 451.723601][ T1111] usb 4-1: USB disconnect, device number 21 [ 451.825343][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 452.001577][ T5793] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 452.297532][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 452.443131][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1753'. [ 452.455182][ T9629] device veth0_to_batadv entered promiscuous mode [ 452.469856][ T9629] device veth0_to_batadv left promiscuous mode [ 452.657160][ T9631] binder: 9626:9631 ioctl 4018620d 0 returned -22 [ 453.420162][ T5793] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 453.434229][ T5793] usb 1-1: config 0 has no interface number 0 [ 453.444838][ T5793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 453.457113][ T5793] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 453.613572][ T5793] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 453.622957][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 453.634233][ T5793] usb 1-1: Product: syz [ 453.658121][ T5793] usb 1-1: SerialNumber: syz [ 453.681699][ T5793] usb 1-1: config 0 descriptor?? [ 453.744076][ T5793] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 453.760533][ T5793] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input63 [ 453.847598][ T1108] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 453.996666][ T5793] usb 1-1: USB disconnect, device number 30 [ 454.002632][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 454.002659][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 454.183175][ T5793] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 455.020491][ T9663] binder: 9658:9663 ioctl 4018620d 0 returned -22 [ 455.077491][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.136535][ T1108] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 455.451354][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.452316][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 455.460411][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.460435][ T1108] usb 4-1: Product: syz [ 455.460452][ T1108] usb 4-1: Manufacturer: syz [ 455.460467][ T1108] usb 4-1: SerialNumber: syz [ 455.476877][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1778'. [ 456.189402][ T1108] cdc_ncm 4-1:1.0: bind() failure [ 456.214207][ T1108] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 456.232326][ T1108] cdc_ncm 4-1:1.1: bind() failure [ 456.256591][ T1108] usb 4-1: USB disconnect, device number 22 [ 456.616601][ T5793] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 458.070902][ T5793] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 458.085679][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.114313][ T9712] team0: No ports can be present during mode change [ 458.128959][ T5793] usb 2-1: config 0 descriptor?? [ 458.298487][ T5793] usb 2-1: selecting invalid altsetting 3 [ 458.333647][ T5793] comedi comedi0: could not set alternate setting 3 in high speed [ 458.401972][ T5793] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 458.420533][ T5793] usbduxsigma: probe of 2-1:0.0 failed with error -22 [ 458.605121][ T5483] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 458.728599][ T9720] binder: 9718:9720 ioctl c0306201 0 returned -14 [ 458.848093][ T9666] Set syz1 is full, maxelem 65536 reached [ 458.878000][ T5483] usb 1-1: Using ep0 maxpacket: 16 [ 459.017471][ T5483] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 459.052326][ T5483] usb 1-1: config 0 has no interface number 0 [ 459.071263][ T5483] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 459.102978][ T5483] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 459.289420][ T5483] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 459.311100][ T5483] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 459.319294][ T5483] usb 1-1: Product: syz [ 459.355249][ T5483] usb 1-1: SerialNumber: syz [ 459.403888][ T5483] usb 1-1: config 0 descriptor?? [ 459.474475][ T5483] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 459.492214][ T5483] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input64 [ 459.679482][ T5483] usb 1-1: USB disconnect, device number 31 [ 459.685495][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 459.685521][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 459.753979][ T5483] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 460.261785][ T9745] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1804'. [ 460.308941][ T9743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1803'. [ 460.320910][ T9743] device veth0_to_batadv entered promiscuous mode [ 460.328603][ T9743] device veth0_to_batadv left promiscuous mode [ 460.844528][ T5483] usb 2-1: USB disconnect, device number 30 [ 461.046138][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'. [ 461.062187][ T9759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1808'. [ 461.142479][ T9764] binder: 9757:9764 ioctl c0306201 0 returned -14 [ 462.015677][ T4210] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 462.157177][ T9791] binder: 9789:9791 ioctl 4018620d 0 returned -22 [ 462.389447][ T4210] usb 5-1: Using ep0 maxpacket: 16 [ 462.517762][ T4210] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.534211][ T4210] usb 5-1: config 0 has no interface number 0 [ 462.546319][ T4210] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 462.580428][ T4210] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 462.753551][ T4210] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.778120][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.823913][ T4210] usb 5-1: Product: syz [ 462.848100][ T4210] usb 5-1: SerialNumber: syz [ 462.893952][ T4210] usb 5-1: config 0 descriptor?? [ 462.958156][ T4210] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 462.987324][ T4210] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input65 [ 463.191161][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.212597][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.228649][ T6232] usb 5-1: USB disconnect, device number 25 [ 463.234810][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 463.234834][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 463.279324][ T6232] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 464.316408][ T9826] binder: 9824:9826 ioctl 4018620d 0 returned -22 [ 464.746464][ T4279] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 465.138073][ T4279] usb 2-1: Using ep0 maxpacket: 16 [ 465.286676][ T4279] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 465.297608][ T4279] usb 2-1: config 0 has no interface number 0 [ 465.303711][ T4279] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 465.352217][ T4279] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 465.389161][ T9857] Malformed UNC in devname [ 465.389161][ T9857] [ 465.395915][ T9857] CIFS: VFS: Malformed UNC in devname [ 465.543235][ T4279] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 465.581427][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 465.632195][ T4279] usb 2-1: Product: syz [ 465.660782][ T4279] usb 2-1: SerialNumber: syz [ 465.708700][ T4279] usb 2-1: config 0 descriptor?? [ 465.790824][ T4279] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 465.798666][ T4279] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input66 [ 466.004459][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.010408][ T5483] usb 2-1: USB disconnect, device number 31 [ 466.024174][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 466.039066][ T5483] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 466.651008][ T9869] Set syz1 is full, maxelem 65536 reached [ 466.664789][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1851'. [ 466.765599][ T9876] binder: 9874:9876 ioctl c0306201 0 returned -14 [ 466.804731][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'. [ 466.813707][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1854'. [ 467.251631][ T9892] binder: 9884:9892 ioctl 4018620d 0 returned -22 [ 468.117617][ T9906] binder: 9905:9906 ioctl c0306201 0 returned -14 [ 468.444992][ T5483] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 468.745547][ T5483] usb 1-1: Using ep0 maxpacket: 16 [ 468.812063][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1873'. [ 468.824307][ T9924] device veth0_to_batadv entered promiscuous mode [ 468.836571][ T9924] device veth0_to_batadv left promiscuous mode [ 469.173511][ T9900] Set syz1 is full, maxelem 65536 reached [ 469.215850][ T5483] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 469.221642][ T6232] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 469.224001][ T5483] usb 1-1: config 0 has no interface number 0 [ 469.237676][ T5483] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 469.248995][ T5483] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 469.413296][ T5483] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 469.422529][ T5483] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 469.430729][ T5483] usb 1-1: Product: syz [ 469.434998][ T5483] usb 1-1: SerialNumber: syz [ 469.452901][ T5483] usb 1-1: config 0 descriptor?? [ 469.618652][ T5483] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 469.627362][ T5483] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input67 [ 469.669945][ T6232] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 469.685584][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.709069][ T6232] usb 5-1: config 0 descriptor?? [ 469.787410][ T9939] binder: 9931:9939 ioctl 4018620d 0 returned -22 [ 470.007771][ T5483] usb 1-1: USB disconnect, device number 32 [ 470.033184][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 470.042410][ T5483] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 470.155249][ T9944] binder: 9943:9944 ioctl c0306201 0 returned -14 [ 470.295023][ T6232] usb 5-1: selecting invalid altsetting 3 [ 470.312445][ T6232] comedi comedi0: could not set alternate setting 3 in high speed [ 470.320300][ T6232] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 470.360326][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 470.379039][ T6232] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 471.236903][ T9974] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 471.257981][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1888'. [ 471.322333][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1887'. [ 471.334963][ T9975] device veth0_to_batadv entered promiscuous mode [ 471.373604][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 471.421080][ T9975] device veth0_to_batadv left promiscuous mode [ 471.703983][ T23] usb 5-1: USB disconnect, device number 26 [ 471.839697][ T9985] binder: BINDER_SET_CONTEXT_MGR already set [ 471.866522][ T9985] binder: 9984:9985 ioctl 4018620d 200001c0 returned -16 [ 472.317957][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 472.356170][T10008] bridge0: port 3(erspan0) entered disabled state [ 472.423905][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.432951][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.478126][T10011] bridge0: port 3(erspan0) entered blocking state [ 472.484632][T10011] bridge0: port 3(erspan0) entered forwarding state [ 472.500982][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.509423][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.551745][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.576023][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.603621][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.624577][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.646883][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.654110][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.662947][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.670071][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.564387][T10066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.618679][T10066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.640441][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1924'. [ 474.687926][T10066] bond0 (unregistering): Released all slaves [ 476.029299][T10118] tipc: Started in network mode [ 476.047517][T10118] tipc: Node identity ac1414aa, cluster identity 4711 [ 476.261343][T10118] tipc: Enabled bearer , priority 10 [ 476.286668][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1938'. [ 476.299192][T10120] device veth0_to_batadv entered promiscuous mode [ 476.310670][T10120] device veth0_to_batadv left promiscuous mode [ 477.453459][ T6232] tipc: Node number set to 2886997162 [ 477.534027][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.577566][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.704464][T10142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.712415][T10142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.746812][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.753912][T10142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.049666][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.056781][T10142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.981631][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 479.138355][T10196] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 479.261224][T10198] tipc: Started in network mode [ 479.266425][T10198] tipc: Node identity aaa22a6fe387, cluster identity 4711 [ 479.275317][T10198] tipc: Enabled bearer , priority 0 [ 479.357487][T10198] device syzkaller0 entered promiscuous mode [ 479.388677][T10197] tipc: Resetting bearer [ 479.472367][T10197] tipc: Disabling bearer [ 479.757255][T10208] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 480.163316][T10230] device batadv1 entered promiscuous mode [ 480.174925][T10230] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 480.303963][T10241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1984'. [ 480.940379][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 481.524798][T10263] Set syz1 is full, maxelem 65536 reached [ 482.355247][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'. [ 483.672940][T10366] Malformed UNC in devname [ 483.672940][T10366] [ 483.679825][T10366] CIFS: VFS: Malformed UNC in devname [ 484.083710][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 485.014908][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2058'. [ 485.761817][T10426] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 485.836541][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.981027][T10446] Malformed UNC in devname [ 485.981027][T10446] [ 485.987771][T10446] CIFS: VFS: Malformed UNC in devname [ 487.441175][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2074'. [ 488.082648][T10509] binder: 10503:10509 ioctl 4018620d 0 returned -22 [ 488.954776][T10524] IPv6: Can't replace route, no match found [ 489.055013][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 489.500848][ T1111] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 489.768213][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 489.896478][ T1111] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 489.904721][ T1111] usb 5-1: config 0 has no interface number 0 [ 489.911020][ T1111] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 489.924242][ T1111] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 490.113601][ T1111] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 490.122896][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 490.131083][ T1111] usb 5-1: Product: syz [ 490.135355][ T1111] usb 5-1: SerialNumber: syz [ 490.271096][ T1111] usb 5-1: config 0 descriptor?? [ 490.401636][ T1111] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 490.451430][ T1111] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input68 [ 490.623268][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.641027][ T1111] usb 5-1: USB disconnect, device number 27 [ 490.647105][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 490.647129][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 490.699155][ T1111] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 490.823189][T10564] dccp_invalid_packet: P.Data Offset(10) too large [ 491.932461][T10593] netlink: 'syz.4.2119': attribute type 10 has an invalid length. [ 491.970027][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2119'. [ 492.009235][T10593] device veth0_vlan left promiscuous mode [ 492.062742][T10593] device veth0_vlan entered promiscuous mode [ 492.176613][T10593] bridge0: port 3(veth0_vlan) entered blocking state [ 492.206678][T10593] bridge0: port 3(veth0_vlan) entered disabled state [ 492.252339][T10593] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 492.457421][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.524577][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.997560][ T407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 493.019222][ T4214] Bluetooth: hci3: command 0x0405 tx timeout [ 493.598275][ T6232] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 493.862633][ T6232] usb 5-1: Using ep0 maxpacket: 16 [ 493.991080][ T6232] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 493.999093][ T6232] usb 5-1: config 0 has no interface number 0 [ 494.017099][ T6232] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 494.031519][ T6232] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 494.177251][ T6232] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 494.190935][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 494.199563][ T6232] usb 5-1: Product: syz [ 494.203730][ T6232] usb 5-1: SerialNumber: syz [ 494.223750][ T6232] usb 5-1: config 0 descriptor?? [ 494.270257][ T6232] cm109 5-1:0.8: invalid payload size 1024, expected 4 [ 494.277923][ T6232] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input69 [ 494.485156][T10611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.498840][ T4279] usb 5-1: USB disconnect, device number 28 [ 494.503960][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 494.511825][ T4279] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 494.565444][T10611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.963535][T10611] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.972826][T10611] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.981902][T10611] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.990916][T10611] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.121002][T10624] device hsr0 entered promiscuous mode [ 495.324565][T10625] device hsr0 left promiscuous mode [ 495.339868][T10626] device hsr_slave_0 left promiscuous mode [ 495.346418][T10626] device hsr_slave_1 left promiscuous mode [ 497.442783][T10697] Set syz1 is full, maxelem 65536 reached [ 497.455127][ T144] ------------[ cut here ]------------ [ 497.461090][ T144] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 497.471684][ T144] WARNING: CPU: 0 PID: 144 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 497.481635][ T144] Modules linked in: [ 497.485553][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.175-syzkaller #0 [ 497.493858][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.504005][ T144] Workqueue: phy8 ieee80211_scan_work [ 497.509453][ T144] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 497.515716][ T144] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 c0 91 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 3d 98 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 497.535378][ T144] RSP: 0018:ffffc9000176f408 EFLAGS: 00010246 [ 497.541480][ T144] RAX: a3050260e137bd00 RBX: 000000000000000c RCX: ffff88801c2cbb80 [ 497.549455][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 497.557476][ T144] RBP: ffff888054c3d528 R08: ffffffff8166aa6c R09: fffff520002eddc1 [ 497.565477][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 497.573510][ T144] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 497.581485][ T144] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 497.590465][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.597095][ T144] CR2: 0000555561d4a588 CR3: 000000004f6f6000 CR4: 00000000003506f0 [ 497.605114][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.613144][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 497.621183][ T144] Call Trace: [ 497.624465][ T144] [ 497.627438][ T144] ? __warn+0x15b/0x300 [ 497.631608][ T144] ? __rate_control_send_low+0x653/0x890 [ 497.637309][ T144] ? report_bug+0x1b7/0x2e0 [ 497.641886][ T144] ? handle_bug+0x3d/0x70 [ 497.646225][ T144] ? exc_invalid_op+0x16/0x40 [ 497.650958][ T144] ? asm_exc_invalid_op+0x16/0x20 [ 497.656008][ T144] ? __wake_up_klogd+0xcc/0x100 [ 497.660922][ T144] ? __rate_control_send_low+0x653/0x890 [ 497.666583][ T144] ? __rate_control_send_low+0x653/0x890 [ 497.672284][ T144] rate_control_send_low+0x1a8/0x770 [ 497.677590][ T144] rate_control_get_rate+0x20a/0x5d0 [ 497.682958][ T144] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 497.688628][ T144] ? ieee80211_ie_len_he_cap+0x620/0x620 [ 497.694328][ T144] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 497.700356][ T144] invoke_tx_handlers_late+0xb2/0x17f0 [ 497.705889][ T144] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 497.711752][ T144] ieee80211_tx+0x2df/0x460 [ 497.713693][T10703] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 497.716268][ T144] ? ieee80211_skb_resize+0x640/0x640 [ 497.733269][ T144] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 497.738747][ T144] ? ieee80211_xmit+0x355/0x470 [ 497.743647][ T144] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 497.749465][ T144] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 497.755703][ T144] ieee80211_scan_work+0x62b/0x1d00 [ 497.760952][ T144] ? print_irqtrace_events+0x210/0x210 [ 497.766467][ T144] ? ieee80211_can_scan+0x200/0x200 [ 497.771674][ T144] ? do_raw_spin_unlock+0x137/0x8b0 [ 497.776927][ T144] process_one_work+0x8a1/0x10c0 [ 497.781895][ T144] ? worker_detach_from_pool+0x260/0x260 [ 497.787577][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 497.793149][ T144] ? kthread_data+0x4e/0xc0 [ 497.797747][ T144] ? wq_worker_running+0x97/0x170 [ 497.802797][ T144] worker_thread+0xaca/0x1280 [ 497.807544][ T144] kthread+0x3f6/0x4f0 [ 497.811616][ T144] ? rcu_lock_release+0x20/0x20 [ 497.816473][ T144] ? kthread_blkcg+0xd0/0xd0 [ 497.821119][ T144] ret_from_fork+0x1f/0x30 [ 497.825575][ T144] [ 497.828615][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.835906][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted 5.15.175-syzkaller #0 [ 497.844144][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 497.854202][ T144] Workqueue: phy8 ieee80211_scan_work [ 497.859593][ T144] Call Trace: [ 497.862872][ T144] [ 497.865852][ T144] dump_stack_lvl+0x1e3/0x2d0 [ 497.870542][ T144] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 497.876181][ T144] ? panic+0x860/0x860 [ 497.880265][ T144] ? __rate_control_send_low+0x560/0x890 [ 497.885911][ T144] ? __rate_control_send_low+0x560/0x890 [ 497.891552][ T144] panic+0x318/0x860 [ 497.895458][ T144] ? __warn+0x16a/0x300 [ 497.899620][ T144] ? fb_is_primary_device+0xd0/0xd0 [ 497.904840][ T144] ? ret_from_fork+0x1f/0x30 [ 497.909440][ T144] ? __rate_control_send_low+0x653/0x890 [ 497.915087][ T144] __warn+0x2b2/0x300 [ 497.919081][ T144] ? __rate_control_send_low+0x653/0x890 [ 497.924764][ T144] report_bug+0x1b7/0x2e0 [ 497.929108][ T144] handle_bug+0x3d/0x70 [ 497.933271][ T144] exc_invalid_op+0x16/0x40 [ 497.937780][ T144] asm_exc_invalid_op+0x16/0x20 [ 497.942638][ T144] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 497.948888][ T144] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 c0 91 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 3d 98 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 497.968557][ T144] RSP: 0018:ffffc9000176f408 EFLAGS: 00010246 [ 497.974634][ T144] RAX: a3050260e137bd00 RBX: 000000000000000c RCX: ffff88801c2cbb80 [ 497.982611][ T144] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 497.990584][ T144] RBP: ffff888054c3d528 R08: ffffffff8166aa6c R09: fffff520002eddc1 [ 497.998559][ T144] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 498.006536][ T144] R13: 000000000000000c R14: 0000000000000000 R15: 00000000ffffffff [ 498.014519][ T144] ? __wake_up_klogd+0xcc/0x100 [ 498.019387][ T144] ? __rate_control_send_low+0x653/0x890 [ 498.025036][ T144] rate_control_send_low+0x1a8/0x770 [ 498.030336][ T144] rate_control_get_rate+0x20a/0x5d0 [ 498.035627][ T144] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 498.041246][ T144] ? ieee80211_ie_len_he_cap+0x620/0x620 [ 498.046887][ T144] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 498.052930][ T144] invoke_tx_handlers_late+0xb2/0x17f0 [ 498.058383][ T144] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 498.064223][ T144] ieee80211_tx+0x2df/0x460 [ 498.068722][ T144] ? ieee80211_skb_resize+0x640/0x640 [ 498.074099][ T144] ? ieee80211_set_qos_hdr+0x1ca/0x520 [ 498.079550][ T144] ? ieee80211_xmit+0x355/0x470 [ 498.084390][ T144] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 498.090185][ T144] ieee80211_scan_state_send_probe+0x557/0x8f0 [ 498.096353][ T144] ieee80211_scan_work+0x62b/0x1d00 [ 498.101576][ T144] ? print_irqtrace_events+0x210/0x210 [ 498.107035][ T144] ? ieee80211_can_scan+0x200/0x200 [ 498.112218][ T144] ? do_raw_spin_unlock+0x137/0x8b0 [ 498.117411][ T144] process_one_work+0x8a1/0x10c0 [ 498.122359][ T144] ? worker_detach_from_pool+0x260/0x260 [ 498.127989][ T144] ? _raw_spin_lock_irqsave+0x120/0x120 [ 498.133534][ T144] ? kthread_data+0x4e/0xc0 [ 498.138022][ T144] ? wq_worker_running+0x97/0x170 [ 498.143055][ T144] worker_thread+0xaca/0x1280 [ 498.147733][ T144] kthread+0x3f6/0x4f0 [ 498.151790][ T144] ? rcu_lock_release+0x20/0x20 [ 498.156641][ T144] ? kthread_blkcg+0xd0/0xd0 [ 498.161216][ T144] ret_from_fork+0x1f/0x30 [ 498.165637][ T144] [ 498.169018][ T144] Kernel Offset: disabled [ 498.173590][ T144] Rebooting in 86400 seconds..