last executing test programs: 7m31.241973449s ago: executing program 3 (id=4): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) eventfd(0x3c) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000000c0)=""/92) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xc8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0xb1dc326431916e94) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x4, 0x5, &(0x7f0000000180)=0xfffffffffffff053}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES8], 0xb0}}, 0x40) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x85, &(0x7f0000000380)={r7, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5308d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642bc700b5c87e18d4b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde7a6640000"}, &(0x7f0000000040)=0x90) 7m30.035200194s ago: executing program 3 (id=6): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x101, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1ff, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0x9, 0xffffffffffff8001, 0xb4e7, 0x3, {0x8003, 0x8}, {0x4000000000006, 0x5}, {0x0, 0x9}, {0x200000008, 0xa00}, 0x8000, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f00000000c0)=""/81, 0x51}], 0x2}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = userfaultfd(0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r5, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) prctl$PR_SET_NAME(0x4, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x2) 7m29.660355386s ago: executing program 3 (id=7): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@dellinkprop={0x38, 0x6d, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, 0x400, 0x2}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x600008d0}, 0x0) 7m27.39487811s ago: executing program 3 (id=8): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0x11, 0x2, 0x1) r2 = open(&(0x7f0000000100)='./file1/file0\x00', 0x0, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x3, 0xd000, 0x1000, &(0x7f0000624000/0x1000)=nil}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13780}, &(0x7f00000003c0), &(0x7f0000000300)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r5}], 0x1, 0x0, 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0xb67, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x1, 0x0, 0x0, 0x0, 0x1a449, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x3c, 0xd0, 0x2, 0x1, 0xfd1]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', &(0x7f0000000300), 0x40001, &(0x7f0000000500)=ANY=[@ANYBLOB="6d61783d30313030303030307030303030303030303030303030302c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d3031373737373737373737373737373737373737090000006dff783d30303030303030303030303030303030303030303030342c6d61783d3030c53030303030303030303030303030303030303030302c6d61783d30303030303030303030303030303030303030303030302c73746174733d676c6f62616c2c666f776e6572", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYBLOB=',dont_measure,audit,mask=MAY_EXEC,\x00']) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x3022430, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32=r0]) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000100)={0xe}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20001, 0x0, 0x31}, 0x18) 7m23.011761786s ago: executing program 3 (id=11): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x4000}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000800000014000400200100010000000000000000000000020c0004"], 0x70}}, 0x4008000) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000300)={0x1, 0x980900, 0x6ff7365bd9e46a6f}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) sendmsg$netlink(r4, &(0x7f00000002c0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000000280)=[{0x0, 0x1e4}], 0x1}, 0x40000) rmdir(&(0x7f0000000000)='.\x00') ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) 7m18.098012293s ago: executing program 3 (id=17): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)) splice(r2, 0x0, r1, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ptrace(0x4208, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r0, 0x0, 0x7ffffffd) 7m2.343505771s ago: executing program 32 (id=17): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000200)) splice(r2, 0x0, r1, 0x0, 0xae6, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ptrace(0x4208, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x3a) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r6, r0, 0x0, 0x7ffffffd) 6m36.627564549s ago: executing program 1 (id=60): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0x100040, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_open_dev$sg(&(0x7f0000001600), 0x3, 0x10f00) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6m33.889714837s ago: executing program 1 (id=62): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000380)={r6, 0x3}, 0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x1000, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x3}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000097e3075ad39065cd72319ca29942e7fbecc18690de53b500639afa8e9e4138760902effa0ff4e653bd043116c5"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m31.277787322s ago: executing program 1 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r4}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) 6m27.263484689s ago: executing program 1 (id=70): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 6m23.192999455s ago: executing program 1 (id=75): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, 0x0, 0x51) r1 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001e0001012bbd7000fbdbdf25fe80000000000000000000000000000e000004d50a002b00e000000200000000000000000000000013b40000ff340000240009008607000000000000010000000000000000feffffffffffff090000000000000060dd1b06523273ececc71d6860f91067500c4582b28da7b7baf93203bb1cbe27f5105b53653aa9df6f0b262c403308e32ee0606590431e0cc8ee088746b36dc3b6ca79ace3c31493899edc18d072fae8991ef1f6806ebf6d468088e947aa2416713eef4f8e963f2dc28da5cbb053e30c5f1ee831f4fabbdd"], 0x64}}, 0x20008000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000b148b0a28bd7001fbdbdfa5080001000000"], 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='erofs\x00', 0x200000, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000001c0)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 6m21.646794315s ago: executing program 1 (id=76): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'encrypted\x00'}, 0x20, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000002880)={0x14, 0x29, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000"], 0x28}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x2, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/243, 0xf3}], 0x1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000300)=""/77, 0x4d}, {0x0}], 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) 6m5.793730496s ago: executing program 33 (id=76): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'encrypted\x00'}, 0x20, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000002880)={0x14, 0x29, 0x1, 0x70bd25, 0x25dfdbff, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000002100210100000000000000000a0000"], 0x28}}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x2, 0xfffffffffffffffe]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/243, 0xf3}], 0x1, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000300)=""/77, 0x4d}, {0x0}], 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) 12.739322691s ago: executing program 4 (id=758): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x0, 0x4}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0xe]}}, &(0x7f0000000340)=""/142, 0x3b, 0x8e, 0x1}, 0x28) 12.461306945s ago: executing program 4 (id=760): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000091b0df10ca160215a6f8010203010902120001000000000904"], 0x0) 11.958592711s ago: executing program 2 (id=763): process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="c3838ec12df4306509268056f95b49711daf5b47adb185246bf0b7ce05ec47c34297dcb793bd9f14f36374346c14fb", 0x2f}], 0x1, 0x65, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb100000000102000905"], 0x0) 7.707658592s ago: executing program 0 (id=765): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00"], 0x0, 0x26}, 0x28) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 7.590886176s ago: executing program 2 (id=766): r0 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$getflags(r0, 0x408) 7.579223785s ago: executing program 4 (id=767): syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x4e21, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 6.542304501s ago: executing program 0 (id=768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 6.467907885s ago: executing program 2 (id=769): syz_clone3(&(0x7f00000004c0)={0xbe00b200, 0x0, 0x0, 0x0, {}, &(0x7f00000003c0)=""/161, 0xffffffffffffff88, 0x0, 0x0}, 0x58) 6.343619504s ago: executing program 0 (id=770): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) 6.293302137s ago: executing program 2 (id=771): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x400004, 0x34324152, 0x1, @stepwise={0x3, 0xfd, 0x81, 0x3, 0x40, 0x5}}) 6.284024009s ago: executing program 4 (id=772): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x430, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xa0, 0x1c8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 6.154802462s ago: executing program 0 (id=773): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 5.392596407s ago: executing program 2 (id=774): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4000) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffee7, 0x91, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.304127068s ago: executing program 0 (id=775): process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="c3838ec12df4306509268056f95b49711daf5b47adb185246bf0b7ce05ec47c34297dcb793bd9f14f36374346c14fb", 0x2f}], 0x1, 0x65, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090561eb100000000102000905"], 0x0) 1.071131722s ago: executing program 0 (id=776): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r0, &(0x7f0000000240)=[{&(0x7f0000002240)=""/4090, 0xfcf6}, {&(0x7f0000000200)=""/11}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000023061031811000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 1.070336745s ago: executing program 4 (id=777): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x70, 0x4) sigaltstack(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x4004080, 0x0, 0x0) 844.681933ms ago: executing program 4 (id=778): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x300000ff, 0x0, 0x1}, 0x48) 0s ago: executing program 2 (id=779): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) kernel console output (not intermixed with test programs): verrun [ 177.324890][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.349745][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.467388][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.167095][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.005066][ T1180] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.843166][ T6311] ubi31: attaching mtd0 [ 179.988398][ T6311] ubi31: scanning is finished [ 181.944320][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c976000: rx timeout, send abort [ 182.368303][ T6316] capability: warning: `syz.4.82' uses deprecated v2 capabilities in a way that may be insecure [ 183.212508][ T6311] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 183.212528][ T6311] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 183.212540][ T6311] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 183.212561][ T6311] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 183.212573][ T6311] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 183.212585][ T6311] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.212596][ T6311] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2803880568 [ 183.212618][ T6311] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.213977][ T6318] ubi31: background thread "ubi_bgt31d" started, PID 6318 [ 183.772563][ T1180] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.786233][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 188.087358][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 188.087392][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 190.400556][ T38] audit: type=1326 audit(1759416677.288:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.400615][ T38] audit: type=1326 audit(1759416677.288:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.443327][ T38] audit: type=1326 audit(1759416677.348:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.445209][ T38] audit: type=1326 audit(1759416677.348:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.452179][ T38] audit: type=1326 audit(1759416677.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.452240][ T38] audit: type=1326 audit(1759416677.358:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.452293][ T38] audit: type=1326 audit(1759416677.358:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.453374][ T38] audit: type=1326 audit(1759416677.358:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.454179][ T38] audit: type=1326 audit(1759416677.358:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 190.455109][ T38] audit: type=1326 audit(1759416677.358:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 192.828609][ T1180] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.507950][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 193.952435][ T6379] CIFS mount error: No usable UNC path provided in device string! [ 193.952435][ T6379] [ 193.952602][ T6379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 194.172774][ T6379] syz.2.95 (6379) used greatest stack depth: 17840 bytes left [ 194.368015][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.368118][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.368314][ T6135] bridge_slave_0: entered allmulticast mode [ 194.370874][ T6135] bridge_slave_0: entered promiscuous mode [ 194.438288][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.438438][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.438685][ T6135] bridge_slave_1: entered allmulticast mode [ 194.441576][ T6135] bridge_slave_1: entered promiscuous mode [ 195.942823][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.996553][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.000139][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.002564][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.003407][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.116291][ T59] Bluetooth: hci0: command tx timeout [ 198.237321][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.254415][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.264565][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.265879][ T5130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.288959][ T5130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.025188][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.025265][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.406276][ T59] Bluetooth: hci0: command tx timeout [ 201.406345][ T59] Bluetooth: hci6: command tx timeout [ 204.143522][ T59] Bluetooth: hci0: command tx timeout [ 204.143559][ T59] Bluetooth: hci6: command tx timeout [ 205.985045][ T6440] CIFS mount error: No usable UNC path provided in device string! [ 205.985045][ T6440] [ 205.985068][ T6440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.221057][ T5130] Bluetooth: hci6: command tx timeout [ 206.221092][ T5130] Bluetooth: hci0: command tx timeout [ 207.791304][ T59] Bluetooth: hci3: command tx timeout [ 208.276251][ T5130] Bluetooth: hci6: command tx timeout [ 209.568092][ T6459] ubi: mtd0 is already attached to ubi31 [ 212.089381][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 212.355869][ T6387] chnl_net:caif_netlink_parms(): no params data found [ 214.012201][ T6479] ubi: mtd0 is already attached to ubi31 [ 214.409032][ T1180] bridge_slave_1: left allmulticast mode [ 214.409119][ T1180] bridge_slave_1: left promiscuous mode [ 214.410421][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.992456][ T1180] bridge_slave_0: left allmulticast mode [ 214.992481][ T1180] bridge_slave_0: left promiscuous mode [ 214.994667][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.304789][ T6489] loop6: detected capacity change from 0 to 7 [ 215.862641][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.862778][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.912085][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.912126][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.919103][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.919145][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.926659][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.926704][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.931622][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.931664][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.936600][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.936640][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.938567][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.938602][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.938731][ T6489] ldm_validate_partition_table(): Disk read failed. [ 215.942543][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.942582][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.946207][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.946243][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.949539][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 215.949580][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 215.956229][ T6489] Dev loop6: unable to read RDB block 0 [ 215.967856][ T6489] loop6: unable to read partition table [ 215.968126][ T6489] loop6: partition table beyond EOD, truncated [ 215.968196][ T6489] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 218.219412][ T5816] Bluetooth: hci4: command 0x0405 tx timeout [ 218.219452][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 218.219477][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 219.087630][ T6511] ubi: mtd0 is already attached to ubi31 [ 220.535298][ T6518] CIFS mount error: No usable UNC path provided in device string! [ 220.535298][ T6518] [ 220.535561][ T6518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 222.854016][ T6530] ubi: mtd0 is already attached to ubi31 [ 225.234179][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.558637][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.579048][ T1180] bond0 (unregistering): Released all slaves [ 226.554616][ T6526] tipc: Started in network mode [ 226.554651][ T6526] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 226.557685][ T6526] tipc: Enabled bearer , priority 10 [ 226.560721][ T6527] lo speed is unknown, defaulting to 1000 [ 226.561757][ T6527] lo speed is unknown, defaulting to 1000 [ 226.565348][ T6527] lo speed is unknown, defaulting to 1000 [ 226.571365][ T6527] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 226.579945][ T6527] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 226.740044][ T6527] lo speed is unknown, defaulting to 1000 [ 226.743947][ T6527] lo speed is unknown, defaulting to 1000 [ 226.755981][ T6527] lo speed is unknown, defaulting to 1000 [ 226.759251][ T6527] lo speed is unknown, defaulting to 1000 [ 226.905000][ T6527] lo speed is unknown, defaulting to 1000 [ 226.915747][ T6527] lo speed is unknown, defaulting to 1000 [ 226.918915][ T6527] lo speed is unknown, defaulting to 1000 [ 226.921985][ T6527] lo speed is unknown, defaulting to 1000 [ 227.451083][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 227.521037][ T6558] ubi: mtd0 is already attached to ubi31 [ 228.312462][ T31] tipc: Node number set to 10005162 [ 230.425637][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.553588][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.601083][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.640804][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.789404][ C0] vkms_vblank_simulate: vblank timer overrun [ 231.155474][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 239.010986][ T5927] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 239.196482][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 239.227645][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.227711][ T5927] usb 3-1: config 0 has no interfaces? [ 239.227846][ T5927] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 239.227911][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.479097][ T5927] usb 3-1: config 0 descriptor?? [ 240.218649][ T6586] CIFS mount error: No usable UNC path provided in device string! [ 240.218649][ T6586] [ 240.218672][ T6586] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 240.698856][ T6590] tmpfs: Bad value for 'mpol' [ 241.586224][ T5927] usb 3-1: USB disconnect, device number 2 [ 243.506799][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.506943][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.507199][ T6387] bridge_slave_0: entered allmulticast mode [ 244.535912][ T6387] bridge_slave_0: entered promiscuous mode [ 244.631383][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.631623][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.631874][ T6387] bridge_slave_1: entered allmulticast mode [ 244.648336][ T6387] bridge_slave_1: entered promiscuous mode [ 246.338562][ T6621] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 246.412595][ T6621] cramfs: wrong magic [ 247.842463][ T6630] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 251.739297][ T6637] syz.4.151 (6637) used greatest stack depth: 16728 bytes left [ 252.490194][ T6649] ubi: mtd0 is already attached to ubi31 [ 254.397159][ T38] kauditd_printk_skb: 39 callbacks suppressed [ 254.397180][ T38] audit: type=1326 audit(1759416740.588:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397230][ T38] audit: type=1326 audit(1759416740.588:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397277][ T38] audit: type=1326 audit(1759416740.588:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397324][ T38] audit: type=1326 audit(1759416740.588:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397371][ T38] audit: type=1326 audit(1759416740.588:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397418][ T38] audit: type=1326 audit(1759416740.588:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397466][ T38] audit: type=1326 audit(1759416741.268:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.397514][ T38] audit: type=1326 audit(1759416741.268:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.4.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7459a3eec9 code=0x7ffc0000 [ 254.398825][ T31] IPVS: starting estimator thread 0... [ 255.098001][ T6660] IPVS: using max 7 ests per chain, 16800 per kthread [ 255.515781][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.536380][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.542107][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.566912][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.575481][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.744617][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.749305][ T5130] Bluetooth: hci1: command tx timeout [ 259.389467][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.574679][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.679801][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.913047][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.356585][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.701936][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.756267][ T5130] Bluetooth: hci1: command tx timeout [ 260.921441][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.113602][ T1180] hsr_slave_0: left promiscuous mode [ 261.977248][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.977325][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.017456][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.167158][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.196640][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.198782][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.201361][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.203335][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.272941][ T1180] hsr_slave_1: left promiscuous mode [ 262.395966][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.428652][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.428782][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.519769][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.519802][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.829125][ T1180] veth1_macvtap: left promiscuous mode [ 262.832781][ T1180] veth0_macvtap: left promiscuous mode [ 262.834035][ T1180] veth1_vlan: left promiscuous mode [ 262.837398][ T59] Bluetooth: hci1: command tx timeout [ 262.863179][ T1180] veth0_vlan: left promiscuous mode [ 262.891525][ T6714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.276703][ T59] Bluetooth: hci5: command tx timeout [ 265.109967][ T59] Bluetooth: hci1: command tx timeout [ 266.007957][ T6738] CIFS mount error: No usable UNC path provided in device string! [ 266.007957][ T6738] [ 266.008166][ T6738] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 266.368646][ T59] Bluetooth: hci5: command tx timeout [ 266.951762][ T6744] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 266.951795][ T6744] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 267.921982][ T6744] vhci_hcd vhci_hcd.0: Device attached [ 267.932103][ T6747] vhci_hcd: connection closed [ 267.953451][ T37] vhci_hcd: stop threads [ 267.954319][ T37] vhci_hcd: release socket [ 267.954379][ T37] vhci_hcd: disconnect device [ 268.436319][ T59] Bluetooth: hci5: command tx timeout [ 271.316320][ T59] Bluetooth: hci5: command tx timeout [ 272.139198][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 272.257935][ T6781] tmpfs: Bad value for 'mpol' [ 273.595232][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 273.625965][ T31] usb 5-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 273.626018][ T31] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 273.626666][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.902516][ T31] usb 5-1: string descriptor 0 read error: -71 [ 274.093779][ T31] hub 5-1:32.0: bad descriptor, ignoring hub [ 274.093830][ T31] hub 5-1:32.0: probe with driver hub failed with error -5 [ 275.584068][ T31] usb 5-1: USB disconnect, device number 3 [ 277.932382][ T6808] ubi: mtd0 is already attached to ubi31 [ 278.756603][ T6809] ceph: No mds server is up or the cluster is laggy [ 278.993412][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.213067][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.236413][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.482123][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.435520][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.473950][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.897151][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.815841][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.929102][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.714668][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.842694][ T6843] CIFS mount error: No usable UNC path provided in device string! [ 283.842694][ T6843] [ 283.842717][ T6843] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.856981][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.086889][ T59] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 286.559125][ T6859] overlayfs: failed to resolve './file0': -2 [ 288.296383][ T6869] ubi: mtd0 is already attached to ubi31 [ 290.934348][ T6882] CIFS mount error: No usable UNC path provided in device string! [ 290.934348][ T6882] [ 290.934583][ T6882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 293.935794][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 294.523023][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 294.596214][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 294.598424][ T31] usb 5-1: config 8 has an invalid interface number: 69 but max is 0 [ 294.598452][ T31] usb 5-1: config 8 has no interface number 0 [ 294.598486][ T31] usb 5-1: config 8 interface 69 has no altsetting 0 [ 294.626563][ T31] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice= 6.d6 [ 294.626598][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.626622][ T31] usb 5-1: Product: syz [ 294.626638][ T31] usb 5-1: Manufacturer: syz [ 294.626656][ T31] usb 5-1: SerialNumber: syz [ 296.721115][ T6905] ubi: mtd0 is already attached to ubi31 [ 297.291987][ T31] usb_ehset_test 5-1:8.69: probe with driver usb_ehset_test failed with error -32 [ 297.305859][ T31] usb 5-1: USB disconnect, device number 4 [ 297.479252][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 301.156464][ T988] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 301.325594][ T988] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 301.325626][ T988] usb 5-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 301.325646][ T988] usb 5-1: Product: syz [ 301.325661][ T988] usb 5-1: Manufacturer: syz [ 301.325677][ T988] usb 5-1: SerialNumber: syz [ 301.393106][ T988] usb 5-1: config 0 descriptor?? [ 301.658957][ T988] usb 5-1: selecting invalid altsetting 1 [ 301.659025][ T988] comedi comedi5: could not switch to alternate setting 1 [ 301.659085][ T988] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 301.971542][ T988] usb 5-1: USB disconnect, device number 5 [ 303.073176][ T6956] CIFS mount error: No usable UNC path provided in device string! [ 303.073176][ T6956] [ 303.073199][ T6956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.668938][ T1230] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 304.370672][ T1230] usb 5-1: unable to get BOS descriptor or descriptor too short [ 304.372219][ T1230] usb 5-1: config 1 has an invalid interface number: 88 but max is 1 [ 304.372245][ T1230] usb 5-1: config 1 has no interface number 1 [ 304.372293][ T1230] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 304.372320][ T1230] usb 5-1: config 1 interface 0 has no altsetting 0 [ 304.379425][ T1230] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 304.379457][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.379481][ T1230] usb 5-1: Product: syz [ 304.379496][ T1230] usb 5-1: Manufacturer: syz [ 304.379514][ T1230] usb 5-1: SerialNumber: syz [ 304.762435][ T1230] smsusb:smsusb_probe: board id=8, interface number 0 [ 305.542874][ T1230] smsusb:smsusb_probe: board id=8, interface number 88 [ 305.556955][ T1230] usb 5-1: USB disconnect, device number 6 [ 309.622552][ T7001] CIFS mount error: No usable UNC path provided in device string! [ 309.622552][ T7001] [ 309.622584][ T7001] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 311.002190][ T7018] CIFS mount error: No usable UNC path provided in device string! [ 311.002190][ T7018] [ 311.002206][ T7018] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 312.098298][ T59] Bluetooth: hci3: Malformed Event: 0x02 [ 314.826268][ T7051] ubi: mtd0 is already attached to ubi31 [ 315.780205][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.786944][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.793200][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.826309][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.828101][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.256206][ T6004] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 316.436280][ T6004] usb 5-1: device descriptor read/64, error -71 [ 316.686980][ T6004] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 316.856260][ T6004] usb 5-1: device descriptor read/64, error -71 [ 316.861481][ T59] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 316.936207][ T44] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 316.967599][ T6004] usb usb5-port1: attempt power cycle [ 317.114263][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.114300][ T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 317.114348][ T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 317.114376][ T44] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.121901][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.121938][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.121963][ T44] usb 1-1: Product: syz [ 317.121980][ T44] usb 1-1: Manufacturer: syz [ 317.121997][ T44] usb 1-1: SerialNumber: syz [ 317.152003][ T7066] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 317.170385][ T44] cdc_ncm 1-1:1.0: skipping garbage [ 317.306217][ T6004] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 317.666873][ T44] cdc_ncm 1-1:1.0: bind() failure [ 317.701563][ T6004] usb 5-1: device descriptor read/8, error -71 [ 317.975055][ T44] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 317.975109][ T44] cdc_ncm 1-1:1.1: bind() failure [ 318.011927][ T44] usb 1-1: USB disconnect, device number 3 [ 318.026338][ T59] Bluetooth: hci0: command tx timeout [ 320.046383][ T59] Bluetooth: hci0: command tx timeout [ 320.083458][ T7053] lo speed is unknown, defaulting to 1000 [ 322.126711][ T59] Bluetooth: hci0: command tx timeout [ 322.608273][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.608351][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.063200][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.085000][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.095797][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.104593][ T5130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.105542][ T5130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.256960][ T5904] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 323.446179][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 323.451028][ T5904] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 323.451057][ T5904] usb 5-1: config 4 has no interface number 0 [ 323.451105][ T5904] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 323.451130][ T5904] usb 5-1: config 4 interface 51 has no altsetting 0 [ 323.468270][ T5904] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 323.468306][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.468330][ T5904] usb 5-1: Product: syz [ 323.468345][ T5904] usb 5-1: Manufacturer: syz [ 323.468362][ T5904] usb 5-1: SerialNumber: syz [ 323.494218][ T7118] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 323.500789][ T5904] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 323.778732][ T5994] usb 5-1: USB disconnect, device number 11 [ 324.198904][ T5130] Bluetooth: hci0: command tx timeout [ 325.545999][ T5130] Bluetooth: hci6: command tx timeout [ 325.569577][ T7119] lo speed is unknown, defaulting to 1000 [ 325.884616][ T7053] chnl_net:caif_netlink_parms(): no params data found [ 327.556241][ T5130] Bluetooth: hci6: command tx timeout [ 327.832571][ T38] audit: type=1800 audit(1759416814.728:59): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.271" name="SYSV798dd824" dev="tmpfs" ino=0 res=0 errno=0 [ 328.239478][ T7145] CIFS mount error: No usable UNC path provided in device string! [ 328.239478][ T7145] [ 328.239501][ T7145] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.298793][ T5130] Bluetooth: hci6: command tx timeout [ 331.606527][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.606678][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.606931][ T7053] bridge_slave_0: entered allmulticast mode [ 331.636419][ T7053] bridge_slave_0: entered promiscuous mode [ 331.714726][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.714889][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.715135][ T7053] bridge_slave_1: entered allmulticast mode [ 331.739339][ T7053] bridge_slave_1: entered promiscuous mode [ 332.277219][ T38] audit: type=1800 audit(1759416819.108:60): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.283" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 332.358517][ T5130] Bluetooth: hci6: command tx timeout [ 335.223535][ T7206] CIFS mount error: No usable UNC path provided in device string! [ 335.223535][ T7206] [ 335.223558][ T7206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 335.823642][ T7212] CIFS mount error: No usable UNC path provided in device string! [ 335.823642][ T7212] [ 335.823663][ T7212] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 338.740221][ T7053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.156348][ T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 340.300445][ T7053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.327928][ T10] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 340.327956][ T10] usb 1-1: config 0 has no interface number 0 [ 340.328005][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=bb.dc [ 340.328029][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.333530][ T10] usb 1-1: config 0 descriptor?? [ 341.401988][ T10] ldusb 1-1:0.186: Interrupt in endpoint not found [ 341.456114][ T10] usb 1-1: USB disconnect, device number 4 [ 343.751632][ T7260] siw: device registration error -23 [ 343.997427][ T7261] tipc: Started in network mode [ 343.997459][ T7261] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 343.997827][ T7261] tipc: Enabled bearer , priority 10 [ 344.379565][ T7266] CIFS mount error: No usable UNC path provided in device string! [ 344.379565][ T7266] [ 344.379587][ T7266] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 345.129078][ T1230] tipc: Node number set to 10005162 [ 345.315729][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.168486][ T7053] team0: Port device team_slave_0 added [ 346.169328][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 347.408615][ T7053] team0: Port device team_slave_1 added [ 349.760385][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 350.130638][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 350.151564][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.151592][ T44] usb 1-1: config 0 has no interfaces? [ 350.151624][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 350.151647][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.246693][ T44] usb 1-1: config 0 descriptor?? [ 350.650331][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.784813][ T7303] ubi: mtd0 is already attached to ubi31 [ 351.233038][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.233057][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.233085][ T7053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.506580][ T10] usb 1-1: USB disconnect, device number 5 [ 352.591749][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.685250][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.685264][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.685283][ T7053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.532824][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.828777][ T7320] CIFS mount error: No usable UNC path provided in device string! [ 353.828777][ T7320] [ 353.828800][ T7320] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 354.416366][ T1230] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 354.523282][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.523424][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.523681][ T7119] bridge_slave_0: entered allmulticast mode [ 354.539110][ T7119] bridge_slave_0: entered promiscuous mode [ 354.576157][ T1230] usb 5-1: Using ep0 maxpacket: 32 [ 354.606954][ T1230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.606981][ T1230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 354.607044][ T1230] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.658014][ T1230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.658046][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.658067][ T1230] usb 5-1: Product: syz [ 354.658081][ T1230] usb 5-1: Manufacturer: syz [ 354.658096][ T1230] usb 5-1: SerialNumber: syz [ 354.706170][ T1230] cdc_ncm 5-1:1.0: skipping garbage [ 354.706193][ T1230] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 354.706235][ T1230] cdc_ncm 5-1:1.0: bind() failure [ 354.793452][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.793645][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.793930][ T7119] bridge_slave_1: entered allmulticast mode [ 354.813130][ T7119] bridge_slave_1: entered promiscuous mode [ 354.879838][ T7053] hsr_slave_0: entered promiscuous mode [ 354.881025][ T7053] hsr_slave_1: entered promiscuous mode [ 354.923899][ T1230] usb 5-1: USB disconnect, device number 12 [ 357.416167][ T44] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 357.508598][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.574031][ T44] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 357.574063][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.574084][ T44] usb 1-1: Product: syz [ 357.574098][ T44] usb 1-1: Manufacturer: syz [ 357.574114][ T44] usb 1-1: SerialNumber: syz [ 357.628139][ T44] usb 1-1: config 0 descriptor?? [ 357.646392][ T1230] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 357.708035][ T44] usb 1-1: selecting invalid altsetting 3 [ 357.708060][ T44] comedi comedi5: could not set alternate setting 3 in high speed [ 357.708075][ T44] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 357.780716][ T44] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 357.798908][ T1230] usb 3-1: config 3 has an invalid interface number: 216 but max is 0 [ 357.798937][ T1230] usb 3-1: config 3 has no interface number 0 [ 357.798990][ T1230] usb 3-1: config 3 interface 216 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 357.799017][ T1230] usb 3-1: config 3 interface 216 has no altsetting 0 [ 357.836199][ T1230] usb 3-1: New USB device found, idVendor=2c24, idProduct=ab13, bcdDevice=ac.4a [ 357.836231][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.836252][ T1230] usb 3-1: Product: syz [ 357.836266][ T1230] usb 3-1: Manufacturer: syz [ 357.836281][ T1230] usb 3-1: SerialNumber: syz [ 357.877614][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.878520][ T44] usb 1-1: USB disconnect, device number 6 [ 358.637966][ T7345] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 358.921998][ T1230] usb 3-1: bad CDC descriptors [ 358.976682][ T1230] usb 3-1: USB disconnect, device number 3 [ 360.496204][ T6004] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 360.667409][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 360.669565][ T6004] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 360.669585][ T6004] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 360.669605][ T6004] usb 1-1: config 0 has no interface number 0 [ 360.669638][ T6004] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 360.669655][ T6004] usb 1-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 360.669673][ T6004] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 360.669691][ T6004] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 360.669709][ T6004] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.671931][ T6004] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 360.671952][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.671965][ T6004] usb 1-1: Product: syz [ 360.671975][ T6004] usb 1-1: Manufacturer: syz [ 360.671985][ T6004] usb 1-1: SerialNumber: syz [ 360.681783][ T6004] usb 1-1: config 0 descriptor?? [ 360.685043][ T7371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.690070][ T7371] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.505352][ T7119] team0: Port device team_slave_0 added [ 361.516960][ T6004] usb 1-1: probing VID:PID(0424:012C) [ 361.521314][ T6004] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 361.521339][ T6004] usb 1-1: vub300 testing UNKNOWN EndPoint(1) 8F [ 361.521358][ T6004] usb 1-1: vub300 ignoring EndPoint(1) 8F [ 361.521378][ T6004] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 361.521460][ T6004] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 361.551432][ T6004] usb 1-1: USB disconnect, device number 7 [ 361.721256][ T7119] team0: Port device team_slave_1 added [ 362.176297][ T5994] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 362.209447][ T13] bridge_slave_1: left allmulticast mode [ 362.209476][ T13] bridge_slave_1: left promiscuous mode [ 362.209747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.306250][ T13] bridge_slave_0: left allmulticast mode [ 362.306279][ T13] bridge_slave_0: left promiscuous mode [ 362.306550][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.336140][ T5994] usb 1-1: Using ep0 maxpacket: 8 [ 362.338622][ T5994] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 362.338649][ T5994] usb 1-1: config 0 has no interface number 0 [ 362.338724][ T5994] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 362.338748][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.386950][ T5994] usb 1-1: config 0 descriptor?? [ 362.473572][ T13] bridge_slave_1: left allmulticast mode [ 362.473604][ T13] bridge_slave_1: left promiscuous mode [ 362.473858][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.530523][ T5994] viperboard 1-1:0.143: version 0.00 found at bus 001 address 008 [ 362.609690][ T5994] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 362.609738][ T5994] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 362.664427][ T13] bridge_slave_0: left allmulticast mode [ 362.664458][ T13] bridge_slave_0: left promiscuous mode [ 362.679424][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.681875][ T5994] usb 1-1: USB disconnect, device number 8 [ 362.823153][ T13] bridge_slave_1: left allmulticast mode [ 362.823182][ T13] bridge_slave_1: left promiscuous mode [ 362.823418][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.122386][ T13] bridge_slave_0: left allmulticast mode [ 363.122416][ T13] bridge_slave_0: left promiscuous mode [ 363.122681][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.151700][ T7411] CIFS mount error: No usable UNC path provided in device string! [ 363.151700][ T7411] [ 363.151726][ T7411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 366.093769][ T13] bond0 (unregistering): Released all slaves [ 367.688173][ T7444] CIFS mount error: No usable UNC path provided in device string! [ 367.688173][ T7444] [ 367.688198][ T7444] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 367.744543][ T13] bond0 (unregistering): Released all slaves [ 368.809195][ T7455] hfsplus: unable to find HFS+ superblock [ 370.409999][ T13] bond0 (unregistering): Released all slaves [ 370.994283][ T7476] CIFS mount error: No usable UNC path provided in device string! [ 370.994283][ T7476] [ 370.994306][ T7476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 371.080938][ T7474] CIFS mount error: No usable UNC path provided in device string! [ 371.080938][ T7474] [ 371.080961][ T7474] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 374.497678][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.604238][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.640399][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.798344][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.818192][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.575616][ T5994] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 375.739488][ T5994] usb 1-1: config 201 has an invalid interface number: 249 but max is 0 [ 375.739510][ T5994] usb 1-1: config 201 has no interface number 0 [ 375.739547][ T5994] usb 1-1: config 201 interface 249 has no altsetting 0 [ 375.741834][ T5994] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 375.741854][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.741868][ T5994] usb 1-1: Product: syz [ 375.741878][ T5994] usb 1-1: Manufacturer: syz [ 375.741888][ T5994] usb 1-1: SerialNumber: syz [ 376.078308][ T5994] ath6kl: Failed to submit usb control message: -71 [ 376.078360][ T5994] ath6kl: unable to send the bmi data to the device: -71 [ 376.078375][ T5994] ath6kl: Unable to send get target info: -71 [ 376.101431][ T5994] ath6kl: Failed to init ath6kl core: -71 [ 376.102844][ T5994] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 376.158525][ T5994] usb 1-1: USB disconnect, device number 9 [ 377.769666][ T59] Bluetooth: hci1: command tx timeout [ 378.342413][ T7525] CIFS mount error: No usable UNC path provided in device string! [ 378.342413][ T7525] [ 378.342429][ T7525] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 379.737038][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.796212][ T59] Bluetooth: hci1: command tx timeout [ 379.877407][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.929665][ T13] bond0 (unregistering): Released all slaves [ 380.008463][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.008491][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.008519][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.172904][ T7509] lo speed is unknown, defaulting to 1000 [ 380.577380][ T7557] CIFS mount error: No usable UNC path provided in device string! [ 380.577380][ T7557] [ 380.577402][ T7557] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.638802][ T7509] chnl_net:caif_netlink_parms(): no params data found [ 382.240448][ T59] Bluetooth: hci1: command tx timeout [ 382.648396][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 383.096472][ T7579] CIFS mount error: No usable UNC path provided in device string! [ 383.096472][ T7579] [ 383.096496][ T7579] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 383.102721][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 383.129639][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 383.138863][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 383.140562][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.959828][ T7590] CIFS mount error: No usable UNC path provided in device string! [ 383.959828][ T7590] [ 383.959852][ T7590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 384.050832][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.050909][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.284854][ T59] Bluetooth: hci1: command tx timeout [ 385.236306][ T59] Bluetooth: hci5: command tx timeout [ 385.600342][ T7612] CIFS mount error: No usable UNC path provided in device string! [ 385.600342][ T7612] [ 385.600358][ T7612] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.736479][ T1230] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 385.902352][ T1230] usb 1-1: config 2 has an invalid interface number: 219 but max is 0 [ 385.902380][ T1230] usb 1-1: config 2 has no interface number 0 [ 385.902429][ T1230] usb 1-1: config 2 interface 219 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 385.960670][ T1230] usb 1-1: New USB device found, idVendor=19d2, idProduct=1099, bcdDevice=2c.93 [ 385.960700][ T1230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.960720][ T1230] usb 1-1: Product: syz [ 385.960735][ T1230] usb 1-1: Manufacturer: syz [ 385.960749][ T1230] usb 1-1: SerialNumber: syz [ 386.019238][ T7609] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.046950][ T1230] option 1-1:2.219: GSM modem (1-port) converter detected [ 386.166746][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 386.274265][ T10] usb 1-1: USB disconnect, device number 10 [ 386.282723][ T10] option 1-1:2.219: device disconnected [ 386.316267][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 386.373719][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 386.373785][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 386.373809][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.373835][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 386.398709][ T5904] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 386.398744][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.398765][ T5904] usb 3-1: Product: syz [ 386.398781][ T5904] usb 3-1: Manufacturer: syz [ 386.398796][ T5904] usb 3-1: SerialNumber: syz [ 386.412595][ T5904] usb 3-1: config 0 descriptor?? [ 386.414025][ T7620] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 386.668540][ T5904] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 386.700650][ T5904] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 386.779977][ C0] powermate: config urb returned -71 [ 386.780458][ C0] powermate: config urb returned -71 [ 386.780666][ C0] powermate: config urb returned -71 [ 386.781663][ C0] powermate: config urb returned -71 [ 386.953652][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 386.953879][ T5904] usb 3-1: USB disconnect, device number 4 [ 387.289955][ T7629] CIFS mount error: No usable UNC path provided in device string! [ 387.289955][ T7629] [ 387.289978][ T7629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 387.316410][ T59] Bluetooth: hci5: command tx timeout [ 387.782210][ T7631] CIFS mount error: No usable UNC path provided in device string! [ 387.782210][ T7631] [ 387.782226][ T7631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 389.149947][ T7509] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.150351][ T7509] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.151051][ T7509] bridge_slave_0: entered allmulticast mode [ 389.292480][ T7509] bridge_slave_0: entered promiscuous mode [ 389.340492][ T7575] lo speed is unknown, defaulting to 1000 [ 389.397674][ T59] Bluetooth: hci5: command tx timeout [ 389.631634][ T7509] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.632050][ T7509] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.632980][ T7509] bridge_slave_1: entered allmulticast mode [ 389.813156][ T7509] bridge_slave_1: entered promiscuous mode [ 390.516449][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 390.846326][ T7653] ubi: mtd0 is already attached to ubi31 [ 391.157196][ T6004] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 391.180783][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 391.180817][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 391.180843][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 391.180871][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 391.185128][ T31] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 391.185157][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.185179][ T31] usb 3-1: Product: syz [ 391.185193][ T31] usb 3-1: Manufacturer: syz [ 391.185208][ T31] usb 3-1: SerialNumber: syz [ 391.223875][ T31] usb 3-1: config 0 descriptor?? [ 391.252580][ T7509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.290815][ T31] iguanair 3-1:0.0: failed to submit urb: -90 [ 391.291121][ T31] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 391.320090][ T7509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.339084][ T6004] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 391.339147][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 391.339171][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 391.339197][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 391.339219][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 391.471885][ T6004] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 391.471916][ T6004] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 391.471937][ T6004] usb 5-1: Manufacturer: syz [ 391.486180][ T59] Bluetooth: hci5: command tx timeout [ 391.535897][ T31] usb 3-1: USB disconnect, device number 5 [ 391.585863][ T7655] qnx4: no qnx4 filesystem (no root dir). [ 391.595939][ T6004] usb 5-1: config 0 descriptor?? [ 391.723398][ T13] hsr_slave_0: left promiscuous mode [ 391.964250][ T13] hsr_slave_1: left promiscuous mode [ 391.965272][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.965298][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.965439][ T5994] usb 5-1: USB disconnect, device number 13 [ 392.064878][ T7659] CIFS mount error: No usable UNC path provided in device string! [ 392.064878][ T7659] [ 392.064901][ T7659] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 392.090153][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.090188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.251998][ T13] veth1_macvtap: left promiscuous mode [ 392.252117][ T13] veth0_macvtap: left promiscuous mode [ 392.252364][ T13] veth1_vlan: left promiscuous mode [ 392.252539][ T13] veth0_vlan: left promiscuous mode [ 392.578700][ T7661] CIFS mount error: No usable UNC path provided in device string! [ 392.578700][ T7661] [ 392.578715][ T7661] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 395.066220][ T5994] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 395.216188][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 395.218503][ T5994] usb 1-1: config 2 has an invalid interface number: 123 but max is 0 [ 395.218530][ T5994] usb 1-1: config 2 has no interface number 0 [ 395.218563][ T5994] usb 1-1: config 2 interface 123 has no altsetting 0 [ 395.230490][ T5994] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=17.2e [ 395.230527][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.230549][ T5994] usb 1-1: Product: syz [ 395.230566][ T5994] usb 1-1: Manufacturer: syz [ 395.230583][ T5994] usb 1-1: SerialNumber: syz [ 396.825975][ T5994] (null): radio-mr800 - initialization failed [ 396.826285][ T5994] radio-mr800 1-1:2.123: probe with driver radio-mr800 failed with error -22 [ 396.855580][ T5994] usbhid 1-1:2.123: couldn't find an input interrupt endpoint [ 396.928756][ T5994] usb 1-1: USB disconnect, device number 11 [ 397.465441][ T7699] CIFS mount error: No usable UNC path provided in device string! [ 397.465441][ T7699] [ 397.465457][ T7699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 409.413506][ T7746] CIFS mount error: No usable UNC path provided in device string! [ 409.413506][ T7746] [ 409.413523][ T7746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 410.925455][ T7764] zonefs (nullb0) ERROR: Not a zoned block device [ 412.179755][ T7773] ubi: mtd0 is already attached to ubi31 [ 413.090723][ T38] audit: type=1804 audit(1759416899.968:61): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.461" name="/newroot/140/file0" dev="tmpfs" ino=743 res=1 errno=0 [ 414.024595][ T7780] CIFS mount error: No usable UNC path provided in device string! [ 414.024595][ T7780] [ 414.024618][ T7780] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 414.837036][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 415.902846][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 415.905528][ T44] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 415.929432][ T44] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 415.929462][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.929483][ T44] usb 3-1: Product: syz [ 415.929498][ T44] usb 3-1: Manufacturer: syz [ 415.929513][ T44] usb 3-1: SerialNumber: syz [ 416.004956][ T44] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 416.005069][ T44] imon 3-1:155.0: unable to initialize intf0, err -19 [ 416.005086][ T44] imon:imon_probe: failed to initialize context! [ 416.005099][ T44] imon 3-1:155.0: unable to register, err -19 [ 416.572005][ T44] usb 3-1: USB disconnect, device number 6 [ 417.097249][ T13] team0 (unregistering): Port device team_slave_1 removed [ 417.674110][ T7809] ubi: mtd0 is already attached to ubi31 [ 418.344021][ T7812] ubi: mtd0 is already attached to ubi31 [ 418.414181][ T13] team0 (unregistering): Port device team_slave_0 removed [ 420.722443][ T7835] CIFS mount error: No usable UNC path provided in device string! [ 420.722443][ T7835] [ 420.722467][ T7835] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 424.075247][ T7851] ubi: mtd0 is already attached to ubi31 [ 424.727237][ T59] Bluetooth: Wrong link type (-57) [ 425.512960][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 425.720221][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 425.723137][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 425.744664][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 425.744693][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.744714][ T5877] usb 5-1: Product: syz [ 425.744730][ T5877] usb 5-1: Manufacturer: syz [ 425.744744][ T5877] usb 5-1: SerialNumber: syz [ 425.806899][ T5877] usb 5-1: config 0 descriptor?? [ 426.045562][ T6004] usb 5-1: USB disconnect, device number 14 [ 426.125343][ T7880] IPv6: addrconf: prefix option has invalid lifetime [ 426.547700][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 426.726107][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 426.728149][ T31] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 426.728175][ T31] usb 3-1: config 0 has no interface number 0 [ 426.730634][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 426.730662][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.730684][ T31] usb 3-1: Product: syz [ 426.730698][ T31] usb 3-1: Manufacturer: syz [ 426.730713][ T31] usb 3-1: SerialNumber: syz [ 426.822920][ T31] usb 3-1: config 0 descriptor?? [ 426.845077][ T31] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 426.845121][ T31] usb 3-1: No valid video chain found. [ 426.928025][ T7889] IPv6: addrconf: prefix option has invalid lifetime [ 427.037372][ T6004] usb 3-1: USB disconnect, device number 7 [ 428.147167][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 428.296260][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 428.298638][ T5877] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 428.298664][ T5877] usb 1-1: config 0 has no interface number 0 [ 428.298719][ T5877] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.298741][ T5877] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 428.298774][ T5877] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 428.298801][ T5877] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 428.298824][ T5877] usb 1-1: config 0 interface 219 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.302650][ T5877] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 428.302678][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.302699][ T5877] usb 1-1: Product: syz [ 428.302713][ T5877] usb 1-1: Manufacturer: syz [ 428.302729][ T5877] usb 1-1: SerialNumber: syz [ 428.451584][ T5877] usb 1-1: config 0 descriptor?? [ 428.463224][ T7894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 428.689420][ T5877] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 428.713844][ T5877] usb 1-1: USB disconnect, device number 12 [ 428.803572][ T5884] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 428.948715][ T5884] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=e9.41 [ 428.948748][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.977527][ T5884] usb 5-1: config 0 descriptor?? [ 428.998188][ T5884] lan78xx 5-1:0.0 (unnamed net_device) (uninitialized): USB bus speed not supported [ 428.998473][ T5884] lan78xx 5-1:0.0: probe with driver lan78xx failed with error -5 [ 429.955467][ T5877] usb 5-1: USB disconnect, device number 15 [ 430.210304][ T59] Bluetooth: hci2: unexpected event for opcode 0x041c [ 430.611120][ T7509] team0: Port device team_slave_0 added [ 430.672279][ T7509] team0: Port device team_slave_1 added [ 430.776134][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 430.956230][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 430.963686][ T5877] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 430.963717][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.963737][ T5877] usb 1-1: Product: syz [ 430.963752][ T5877] usb 1-1: Manufacturer: syz [ 430.963767][ T5877] usb 1-1: SerialNumber: syz [ 430.998962][ T1230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 431.022800][ T5877] usb 1-1: config 0 descriptor?? [ 431.084897][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.084916][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.084944][ T7509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.172664][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.172699][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 431.172743][ T1230] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 431.172768][ T1230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.191997][ T1230] usb 5-1: config 0 descriptor?? [ 431.196606][ T7509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.196623][ T7509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.196652][ T7509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.299011][ T44] usb 1-1: USB disconnect, device number 13 [ 431.522271][ T1230] ath6kl: Failed to submit usb control message: -71 [ 431.522324][ T1230] ath6kl: unable to send the bmi data to the device: -71 [ 431.522339][ T1230] ath6kl: Unable to send get target info: -71 [ 431.541302][ T1230] ath6kl: Failed to init ath6kl core: -71 [ 431.542956][ T1230] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 431.593078][ T1230] usb 5-1: USB disconnect, device number 16 [ 431.747809][ T5877] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 431.896093][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 431.899273][ T5877] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.899301][ T5877] usb 3-1: config 0 has no interface number 0 [ 431.899337][ T5877] usb 3-1: config 0 interface 1 has no altsetting 0 [ 431.903677][ T5877] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 431.903706][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.903726][ T5877] usb 3-1: Product: syz [ 431.903741][ T5877] usb 3-1: Manufacturer: syz [ 431.903756][ T5877] usb 3-1: SerialNumber: syz [ 432.018637][ T5877] usb 3-1: config 0 descriptor?? [ 432.286235][ T5877] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -71 [ 432.326666][ T5877] usb 3-1: USB disconnect, device number 8 [ 432.354523][ T7509] hsr_slave_0: entered promiscuous mode [ 432.355946][ T7509] hsr_slave_1: entered promiscuous mode [ 432.428558][ T7509] debugfs: 'hsr0' already exists in 'hsr' [ 432.428589][ T7509] Cannot create hsr debugfs directory [ 432.586166][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 432.870483][ T5884] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 432.870546][ T5884] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 432.870569][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.876710][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.876742][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 432.876762][ T5884] usb 5-1: Product: syz [ 432.876777][ T5884] usb 5-1: Manufacturer: syz [ 432.876792][ T5884] usb 5-1: SerialNumber: syz [ 432.901531][ T7944] ubi: mtd0 is already attached to ubi31 [ 432.954270][ T5884] usb 5-1: config 0 descriptor?? [ 432.989152][ T5884] hub 5-1:0.0: bad descriptor, ignoring hub [ 432.989195][ T5884] hub 5-1:0.0: probe with driver hub failed with error -5 [ 433.067164][ T5884] usb 5-1: selecting invalid altsetting 0 [ 433.086231][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 433.620188][ T5884] usb 5-1: USB disconnect, device number 17 [ 435.302430][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.315610][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.325650][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.328127][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.336279][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 436.048082][ T7978] CIFS mount error: No usable UNC path provided in device string! [ 436.048082][ T7978] [ 436.048105][ T7978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 436.259550][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.262799][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.265605][ T7575] bridge_slave_0: entered allmulticast mode [ 436.318288][ T7575] bridge_slave_0: entered promiscuous mode [ 436.387150][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.387291][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.387532][ T7575] bridge_slave_1: entered allmulticast mode [ 436.419225][ T7575] bridge_slave_1: entered promiscuous mode [ 437.040462][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.137451][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.489557][ T5130] Bluetooth: hci0: command tx timeout [ 437.662622][ T38] audit: type=1800 audit(1759416924.488:62): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.513" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 438.636444][ T8005] ubi: mtd0 is already attached to ubi31 [ 439.379042][ T7972] lo speed is unknown, defaulting to 1000 [ 439.457100][ T7575] team0: Port device team_slave_0 added [ 439.525135][ T7575] team0: Port device team_slave_1 added [ 439.556312][ T5130] Bluetooth: hci0: command tx timeout [ 439.997271][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.997290][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.997317][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.061933][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.095672][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.095691][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.095719][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.423726][ T8026] CIFS mount error: No usable UNC path provided in device string! [ 441.423726][ T8026] [ 441.423848][ T8026] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 442.046101][ T5130] Bluetooth: hci0: command tx timeout [ 443.669262][ T59] Bluetooth: hci2: unexpected event for opcode 0x043d [ 444.318265][ T8050] ubi: mtd0 is already attached to ubi31 [ 444.637538][ T59] Bluetooth: hci0: command tx timeout [ 445.410176][ T38] audit: type=1804 audit(1759416932.318:63): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.530" name="/newroot/169/file0" dev="tmpfs" ino=909 res=1 errno=0 [ 445.575361][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.577325][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.103403][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.115215][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.124871][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.134824][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.137105][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.476191][ T5927] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 446.638875][ T5927] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 446.638904][ T5927] usb 3-1: config 0 has no interface number 0 [ 446.638941][ T5927] usb 3-1: config 0 interface 144 has no altsetting 0 [ 446.645674][ T5927] usb 3-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=fa.a9 [ 446.645706][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.645726][ T5927] usb 3-1: Product: syz [ 446.645740][ T5927] usb 3-1: Manufacturer: syz [ 446.645754][ T5927] usb 3-1: SerialNumber: syz [ 446.659808][ T5927] usb 3-1: config 0 descriptor?? [ 447.228106][ T44] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 447.269383][ T5927] ir_toy 3-1:0.144: required endpoints not found [ 447.273385][ T5927] usb 3-1: USB disconnect, device number 9 [ 447.378576][ T44] usb 5-1: No LPM exit latency info found, disabling LPM. [ 447.381819][ T44] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 447.381861][ T44] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 447.381881][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.399939][ T44] usb 5-1: string descriptor 0 read error: -22 [ 447.400185][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.400212][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.452565][ T13] bridge_slave_1: left allmulticast mode [ 447.452806][ T13] bridge_slave_1: left promiscuous mode [ 447.453068][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.243019][ T44] usb 5-1: 0:2 : does not exist [ 448.276635][ T5130] Bluetooth: hci1: command tx timeout [ 448.284498][ T13] bridge_slave_0: left allmulticast mode [ 448.284529][ T13] bridge_slave_0: left promiscuous mode [ 448.284785][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.331479][ T44] usb 5-1: USB disconnect, device number 18 [ 448.515015][ T13] bridge_slave_1: left allmulticast mode [ 448.515044][ T13] bridge_slave_1: left promiscuous mode [ 448.515285][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.597924][ T13] bridge_slave_0: left allmulticast mode [ 448.597954][ T13] bridge_slave_0: left promiscuous mode [ 448.598217][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.883561][ T13] bridge_slave_1: left allmulticast mode [ 448.883584][ T13] bridge_slave_1: left promiscuous mode [ 448.883751][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.886490][ T5927] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 448.986305][ T13] bridge_slave_0: left allmulticast mode [ 448.986336][ T13] bridge_slave_0: left promiscuous mode [ 448.986608][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.049040][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 449.053844][ T5927] usb 1-1: config 8 has an invalid interface number: 28 but max is 0 [ 449.053872][ T5927] usb 1-1: config 8 has no interface number 0 [ 449.092056][ T8090] CIFS mount error: No usable UNC path provided in device string! [ 449.092056][ T8090] [ 449.092078][ T8090] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 449.133451][ T5927] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 449.133483][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.133503][ T5927] usb 1-1: Product: syz [ 449.133519][ T5927] usb 1-1: Manufacturer: syz [ 449.133534][ T5927] usb 1-1: SerialNumber: syz [ 449.182902][ T5927] go7007 1-1:8.28: probe with driver go7007 failed with error -12 [ 449.569747][ T8093] ubi: mtd0 is already attached to ubi31 [ 449.794720][ T5884] usb 1-1: USB disconnect, device number 14 [ 451.337713][ T5130] Bluetooth: hci1: command tx timeout [ 452.111241][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.238381][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.957121][ T8126] erofs (device nbd4): cannot find valid erofs superblock [ 453.965407][ T8127] ubi: mtd0 is already attached to ubi31 [ 454.190910][ T5130] Bluetooth: hci1: command tx timeout [ 454.538877][ T13] bond0 (unregistering): Released all slaves [ 454.653063][ T5130] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 454.806254][ T5884] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 454.851092][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.045360][ T5884] usb 5-1: not running at top speed; connect to a high speed hub [ 455.356547][ T5884] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.356573][ T5884] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 455.356594][ T5884] usb 5-1: config 1 has no interface number 1 [ 455.356644][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 455.357954][ T5884] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 455.577100][ T5884] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.577132][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.577152][ T5884] usb 5-1: Product: syz [ 455.577167][ T5884] usb 5-1: Manufacturer: syz [ 455.577183][ T5884] usb 5-1: SerialNumber: syz [ 455.662570][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.922218][ T5884] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 456.092291][ T13] bond0 (unregistering): Released all slaves [ 456.206279][ T5130] Bluetooth: hci1: command tx timeout [ 456.422269][ T5884] usb 5-1: USB disconnect, device number 19 [ 457.787459][ T8160] udevd[8160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.001651][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.097066][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.166739][ T13] bond0 (unregistering): Released all slaves [ 458.689374][ T5130] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 458.689515][ T5130] Bluetooth: hci2: Injecting HCI hardware error event [ 458.691814][ T59] Bluetooth: hci2: hardware error 0x00 [ 458.767469][ T8064] lo speed is unknown, defaulting to 1000 [ 459.677565][ T7972] chnl_net:caif_netlink_parms(): no params data found [ 461.041951][ T8187] ubi: mtd0 is already attached to ubi31 [ 461.466953][ T8193] ubi: mtd0 is already attached to ubi31 [ 461.794783][ T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 462.256490][ T13] hsr_slave_0: left promiscuous mode [ 462.333482][ T8203] ======================================================= [ 462.333482][ T8203] WARNING: The mand mount option has been deprecated and [ 462.333482][ T8203] and is ignored by this kernel. Remove the mand [ 462.333482][ T8203] option from the mount to silence this warning. [ 462.333482][ T8203] ======================================================= [ 462.333581][ T8203] tmpfs: Bad value for 'mpol' [ 462.411731][ T13] hsr_slave_1: left promiscuous mode [ 462.414440][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.507433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.588136][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.721908][ T8211] CIFS mount error: No usable UNC path provided in device string! [ 462.721908][ T8211] [ 462.721930][ T8211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 462.866208][ T13] hsr_slave_0: left promiscuous mode [ 462.896685][ T13] hsr_slave_1: left promiscuous mode [ 462.897599][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.061430][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.357053][ T8244] ubi: mtd0 is already attached to ubi31 [ 466.526199][ T13] team0 (unregistering): Port device team_slave_1 removed [ 467.340355][ T8265] CIFS mount error: No usable UNC path provided in device string! [ 467.340355][ T8265] [ 467.340378][ T8265] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 467.996843][ T13] team0 (unregistering): Port device team_slave_0 removed [ 469.066163][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 469.223833][ T10] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 469.223906][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 469.223931][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 469.223958][ T10] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 469.223980][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 469.225523][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.225551][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.225571][ T10] usb 3-1: Manufacturer: syz [ 469.240308][ T10] usb 3-1: config 0 descriptor?? [ 470.176140][ T5877] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 470.267243][ T13] team0 (unregistering): Port device team_slave_1 removed [ 470.331042][ T5877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.331101][ T5877] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.332889][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice=ab.40 [ 470.332916][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.332934][ T5877] usb 1-1: SerialNumber: syz [ 470.370626][ T5877] usb 1-1: bad CDC descriptors [ 470.607637][ T5877] usb 3-1: USB disconnect, device number 10 [ 470.635521][ T13] team0 (unregistering): Port device team_slave_0 removed [ 470.636991][ T5884] usb 1-1: USB disconnect, device number 15 [ 471.228023][ T5877] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 471.801623][ T5877] usb 3-1: config 0 has an invalid interface number: 73 but max is 0 [ 471.801653][ T5877] usb 3-1: config 0 has no interface number 0 [ 471.808139][ T5877] usb 3-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 471.808187][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.808210][ T5877] usb 3-1: Product: syz [ 471.808228][ T5877] usb 3-1: Manufacturer: syz [ 471.808245][ T5877] usb 3-1: SerialNumber: syz [ 472.000018][ T5877] usb 3-1: config 0 descriptor?? [ 472.222577][ T5877] uvcvideo 3-1:0.73: probe with driver uvcvideo failed with error -22 [ 472.235335][ T5877] usb 3-1: USB disconnect, device number 11 [ 474.678337][ T8336] CIFS mount error: No usable UNC path provided in device string! [ 474.678337][ T8336] [ 474.678424][ T8336] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 475.546120][ T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 475.917326][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 475.922438][ T44] usb 1-1: config 0 has no interfaces? [ 475.922477][ T44] usb 1-1: New USB device found, idVendor=0f99, idProduct=0025, bcdDevice=29.40 [ 475.922501][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.036289][ T44] usb 1-1: config 0 descriptor?? [ 476.402101][ T44] usb 1-1: USB disconnect, device number 16 [ 477.916227][ T44] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 478.033873][ T13] team0 (unregistering): Port device team_slave_1 removed [ 478.456236][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 478.721663][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 478.724071][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 478.724102][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 478.724129][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 478.724151][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.724175][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.724200][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.796941][ T5884] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 478.796971][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.796991][ T5884] usb 1-1: Product: syz [ 478.797005][ T5884] usb 1-1: Manufacturer: syz [ 478.797020][ T5884] usb 1-1: SerialNumber: syz [ 478.818294][ T44] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 478.818354][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 478.818385][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 478.818416][ T44] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 478.818441][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 478.819732][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 478.819760][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 478.819796][ T44] usb 3-1: Manufacturer: syz [ 478.832470][ T44] usb 3-1: config 0 descriptor?? [ 478.938306][ T5884] usb 1-1: config 0 descriptor?? [ 479.291070][ T5884] usb 1-1: USB disconnect, device number 17 [ 479.309272][ T13] team0 (unregistering): Port device team_slave_0 removed [ 480.277799][ T5877] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 480.427379][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 480.452069][ T44] usb 3-1: USB disconnect, device number 12 [ 480.475702][ T5877] usb 1-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5 [ 480.475736][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.475757][ T5877] usb 1-1: Product: syz [ 480.475772][ T5877] usb 1-1: Manufacturer: syz [ 480.475787][ T5877] usb 1-1: SerialNumber: syz [ 480.540638][ T5877] usb 1-1: config 0 descriptor?? [ 480.588458][ T5877] gspca_main: mars-2.14.0 probing 093a:050f [ 480.820806][ T988] usb 1-1: USB disconnect, device number 18 [ 480.934620][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.934756][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.934966][ T7972] bridge_slave_0: entered allmulticast mode [ 480.939802][ T7972] bridge_slave_0: entered promiscuous mode [ 480.966105][ T44] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 481.025132][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.025260][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.025496][ T7972] bridge_slave_1: entered allmulticast mode [ 481.029954][ T7972] bridge_slave_1: entered promiscuous mode [ 481.148083][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 481.427917][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.427970][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 481.427998][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 481.428019][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 481.428042][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.428085][ T44] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 481.428108][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.760062][ T44] usb 5-1: config 0 descriptor?? [ 482.074779][ T44] usb 5-1: USB disconnect, device number 20 [ 482.691723][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.796891][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 482.890239][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.983643][ T44] usb 3-1: config 7 has an invalid interface number: 227 but max is 0 [ 482.983674][ T44] usb 3-1: config 7 has no interface number 0 [ 482.983709][ T44] usb 3-1: config 7 interface 227 has no altsetting 0 [ 482.998872][ T44] usb 3-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 482.998909][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.998932][ T44] usb 3-1: Product: syz [ 482.998949][ T44] usb 3-1: Manufacturer: syz [ 482.998966][ T44] usb 3-1: SerialNumber: syz [ 483.166461][ T5877] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 483.393699][ T5877] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 483.393730][ T5877] usb 5-1: config 0 has no interface number 0 [ 483.471859][ T5877] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a [ 483.471891][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.471910][ T5877] usb 5-1: Product: syz [ 483.471923][ T5877] usb 5-1: Manufacturer: syz [ 483.471936][ T5877] usb 5-1: SerialNumber: syz [ 483.525160][ T5877] usb 5-1: config 0 descriptor?? [ 483.988480][ T44] cdc_wdm 3-1:7.227: More than one union descriptor, skipping ... [ 483.988527][ T44] cdc_wdm 3-1:7.227: probe with driver cdc_wdm failed with error -22 [ 484.172414][ T5877] snd_usb_variax 5-1:0.113: Line 6 Variax Workbench found [ 484.172442][ T5877] usb 5-1: selecting invalid altsetting 1 [ 484.172468][ T5877] snd_usb_variax 5-1:0.113: set_interface failed [ 484.174372][ T5877] snd_usb_variax 5-1:0.113: Line 6 Variax Workbench now disconnected [ 484.174597][ T5877] snd_usb_variax 5-1:0.113: probe with driver snd_usb_variax failed with error -22 [ 484.225063][ T5877] usb 5-1: USB disconnect, device number 21 [ 484.256503][ T44] usb 3-1: USB disconnect, device number 13 [ 484.460461][ T8064] chnl_net:caif_netlink_parms(): no params data found [ 484.527889][ T7972] team0: Port device team_slave_0 added [ 484.560839][ T7972] team0: Port device team_slave_1 added [ 484.640436][ T8401] CIFS mount error: No usable UNC path provided in device string! [ 484.640436][ T8401] [ 484.640458][ T8401] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 485.136160][ T5877] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 485.288705][ T5877] usb 3-1: config 0 has an invalid interface number: 210 but max is 0 [ 485.288734][ T5877] usb 3-1: config 0 has no interface number 0 [ 485.288785][ T5877] usb 3-1: config 0 interface 210 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 485.288814][ T5877] usb 3-1: config 0 interface 210 has no altsetting 0 [ 485.292041][ T5877] usb 3-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=4d.c4 [ 485.292071][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.292092][ T5877] usb 3-1: Product: syz [ 485.292108][ T5877] usb 3-1: Manufacturer: syz [ 485.292122][ T5877] usb 3-1: SerialNumber: syz [ 485.296326][ T8079] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 485.703674][ T8079] usb 5-1: config 2 has an invalid interface number: 211 but max is 0 [ 485.703906][ T8079] usb 5-1: config 2 has no interface number 0 [ 485.704050][ T8079] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 485.704137][ T8079] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.957252][ T8079] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95 [ 485.957313][ T8079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.957336][ T8079] usb 5-1: Product: syz [ 485.957351][ T8079] usb 5-1: Manufacturer: syz [ 485.957366][ T8079] usb 5-1: SerialNumber: syz [ 486.345299][ T5877] usb 3-1: config 0 descriptor?? [ 486.416342][ T8403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 486.422602][ T5877] em28xx 3-1:0.210: New device syz syz @ 12 Mbps (2013:8461, interface 210, class 210) [ 486.422659][ T5877] em28xx 3-1:0.210: Device initialization failed. [ 486.422677][ T5877] em28xx 3-1:0.210: Device must be connected to a high-speed USB 2.0 port. [ 486.449743][ T8405] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 486.457634][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.457656][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.457691][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.527566][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.527593][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.527619][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.638182][ T8079] em28xx 5-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211) [ 486.638219][ T8079] em28xx 5-1:2.211: Device initialization failed. [ 486.638235][ T8079] em28xx 5-1:2.211: Device must be connected to a high-speed USB 2.0 port. [ 486.696725][ T8079] usb 3-1: USB disconnect, device number 14 [ 486.803134][ T44] usb 5-1: USB disconnect, device number 22 [ 489.700683][ T7972] hsr_slave_0: entered promiscuous mode [ 489.745490][ T7972] hsr_slave_1: entered promiscuous mode [ 489.760753][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.760847][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.761240][ T8064] bridge_slave_0: entered allmulticast mode [ 489.763140][ T8064] bridge_slave_0: entered promiscuous mode [ 489.806974][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.807112][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.807353][ T8064] bridge_slave_1: entered allmulticast mode [ 489.810305][ T8064] bridge_slave_1: entered promiscuous mode [ 490.569108][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.324071][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.889034][ T8079] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 492.057396][ T8079] usb 5-1: Using ep0 maxpacket: 8 [ 492.088646][ T8079] usb 5-1: unable to get BOS descriptor or descriptor too short [ 492.526829][ T8079] usb 5-1: config 1 has an invalid interface number: 6 but max is 2 [ 492.526859][ T8079] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 492.526880][ T8079] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 492.526901][ T8079] usb 5-1: config 1 has no interface number 3 [ 492.526979][ T8079] usb 5-1: too many endpoints for config 1 interface 6 altsetting 0: 58, using maximum allowed: 30 [ 492.528749][ T8079] usb 5-1: config 1 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 492.540112][ T8079] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.540143][ T8079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.540164][ T8079] usb 5-1: Product: syz [ 492.540179][ T8079] usb 5-1: Manufacturer: syz [ 492.540194][ T8079] usb 5-1: SerialNumber: syz [ 492.807709][ T8079] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 492.894706][ T8079] usb 5-1: USB disconnect, device number 23 [ 492.995917][ T8064] team0: Port device team_slave_0 added [ 493.083107][ T8064] team0: Port device team_slave_1 added [ 493.310924][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.414178][ T8482] CIFS mount error: No usable UNC path provided in device string! [ 493.414178][ T8482] [ 493.414252][ T8482] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 494.307075][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.307094][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.307123][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.309574][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.309590][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.309619][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.432484][ T8064] hsr_slave_0: entered promiscuous mode [ 495.433838][ T8064] hsr_slave_1: entered promiscuous mode [ 495.434774][ T8064] debugfs: 'hsr0' already exists in 'hsr' [ 495.434800][ T8064] Cannot create hsr debugfs directory [ 495.996171][ T8079] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 496.279783][ T8079] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 496.279877][ T8079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.659472][ T8079] usb 1-1: config 0 descriptor?? [ 496.724619][ T8079] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 496.905736][ T8079] usb 1-1: USB disconnect, device number 19 [ 497.262669][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.343178][ T8526] CIFS mount error: No usable UNC path provided in device string! [ 497.343178][ T8526] [ 497.343202][ T8526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 497.542038][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.545304][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.577677][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.579781][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 498.457534][ T13] bridge_slave_1: left allmulticast mode [ 498.457566][ T13] bridge_slave_1: left promiscuous mode [ 498.457843][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.837791][ T13] bridge_slave_0: left allmulticast mode [ 498.837824][ T13] bridge_slave_0: left promiscuous mode [ 498.838121][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.336212][ T5877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 499.486244][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 499.494547][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short [ 499.509629][ T5877] usb 3-1: config 248 has an invalid interface number: 242 but max is 0 [ 499.509660][ T5877] usb 3-1: config 248 has no interface number 0 [ 499.509711][ T5877] usb 3-1: config 248 interface 242 has no altsetting 0 [ 499.514680][ T5877] usb 3-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 499.514709][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.514730][ T5877] usb 3-1: Product: syz [ 499.514745][ T5877] usb 3-1: Manufacturer: syz [ 499.514760][ T5877] usb 3-1: SerialNumber: syz [ 499.653837][ T59] Bluetooth: hci0: command tx timeout [ 499.818357][ T5877] quatech2 3-1:248.242: Quatech 2nd gen USB to Serial Driver converter detected [ 499.822681][ T5877] usb 3-1: qt2_attach - failed to power on unit: -71 [ 499.823050][ T5877] quatech2 3-1:248.242: probe with driver quatech2 failed with error -71 [ 499.860496][ T5877] usb 3-1: USB disconnect, device number 15 [ 499.862357][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.998977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.078997][ T13] bond0 (unregistering): Released all slaves [ 500.233310][ T8079] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 500.406114][ T8079] usb 1-1: Using ep0 maxpacket: 16 [ 500.409482][ T8079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.409543][ T8079] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 500.410781][ T8079] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.410817][ T8079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 500.410836][ T8079] usb 1-1: SerialNumber: syz [ 500.769698][ T8079] usb 1-1: bad CDC descriptors [ 501.716458][ T59] Bluetooth: hci0: command tx timeout [ 501.860807][ T8079] usb 1-1: USB disconnect, device number 20 [ 502.177214][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.177257][ T8522] lo speed is unknown, defaulting to 1000 [ 502.506976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.803300][ T59] Bluetooth: hci0: command tx timeout [ 504.280005][ T13] team0 (unregistering): Port device team_slave_1 removed [ 506.731389][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.154857][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.154909][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.397301][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.593387][ T5130] Bluetooth: hci0: command tx timeout [ 507.593898][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.595169][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.596089][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.609666][ T13] team0 (unregistering): Port device team_slave_0 removed [ 508.343078][ T8621] ubi: mtd0 is already attached to ubi31 [ 509.102299][ T5927] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 509.327899][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 509.365997][ T5927] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 509.366241][ T5927] usb 5-1: config 64 has no interface number 0 [ 509.366719][ T5927] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 509.366814][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.727465][ T5130] Bluetooth: hci5: command tx timeout [ 510.103330][ T5927] usb 5-1: probing VID:PID(2201:012C) [ 510.115400][ T5927] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 510.115499][ T5927] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 510.213803][ T5927] usb 5-1: USB disconnect, device number 24 [ 511.419024][ T988] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 512.217202][ T5130] Bluetooth: hci5: command tx timeout [ 512.296526][ T988] usb 5-1: Using ep0 maxpacket: 16 [ 512.298622][ T988] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 512.298662][ T988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.298681][ T988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.298711][ T988] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 512.298727][ T988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.303475][ T988] usb 5-1: config 0 descriptor?? [ 512.434558][ T988] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 512.619406][ T8079] usb 5-1: USB disconnect, device number 25 [ 513.190373][ T8606] lo speed is unknown, defaulting to 1000 [ 513.316123][ T5927] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 513.636571][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 513.645900][ T5927] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 513.646082][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.646106][ T5927] usb 1-1: config 0 has no interface number 0 [ 513.715990][ T8660] ubi: mtd0 is already attached to ubi31 [ 514.463916][ T5130] Bluetooth: hci5: command tx timeout [ 514.469534][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 514.469568][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.469592][ T5927] usb 1-1: Product: syz [ 514.469608][ T5927] usb 1-1: Manufacturer: syz [ 514.469625][ T5927] usb 1-1: SerialNumber: syz [ 514.544007][ T5927] usb 1-1: config 0 descriptor?? [ 514.606790][ T5927] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 514.606826][ T5927] usb 1-1: No valid video chain found. [ 514.794927][ T5927] usb 1-1: USB disconnect, device number 21 [ 515.546186][ T988] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 515.700173][ T988] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 515.700203][ T988] usb 3-1: config 0 has no interface number 0 [ 515.703751][ T988] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 515.703780][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.703801][ T988] usb 3-1: Product: syz [ 515.703816][ T988] usb 3-1: Manufacturer: syz [ 515.703831][ T988] usb 3-1: SerialNumber: syz [ 515.781843][ T988] usb 3-1: config 0 descriptor?? [ 515.802095][ T988] peak_usb 3-1:0.99: probe with driver peak_usb failed with error 99 [ 516.026697][ T5927] usb 3-1: USB disconnect, device number 16 [ 516.426759][ T13] bridge_slave_1: left allmulticast mode [ 516.426792][ T13] bridge_slave_1: left promiscuous mode [ 516.427065][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.446164][ T8079] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 516.515328][ T13] bridge_slave_0: left allmulticast mode [ 516.515359][ T13] bridge_slave_0: left promiscuous mode [ 516.515641][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.516508][ T5130] Bluetooth: hci5: command tx timeout [ 516.600455][ T8079] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.600486][ T8079] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 516.600526][ T8079] usb 5-1: config 220 interface 0 has no altsetting 0 [ 516.610699][ T8079] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.610737][ T8079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.610762][ T8079] usb 5-1: Product: syz [ 516.610779][ T8079] usb 5-1: Manufacturer: syz [ 516.610796][ T8079] usb 5-1: SerialNumber: syz [ 516.686915][ T13] bridge_slave_1: left allmulticast mode [ 516.686945][ T13] bridge_slave_1: left promiscuous mode [ 516.687207][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.789404][ T13] bridge_slave_0: left allmulticast mode [ 516.789438][ T13] bridge_slave_0: left promiscuous mode [ 516.789682][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.915562][ T8079] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 516.915604][ T8079] usb 5-1: No valid video chain found. [ 517.208873][ T8079] usb 5-1: USB disconnect, device number 26 [ 517.304141][ T8706] ubi: mtd0 is already attached to ubi31 [ 518.606137][ T5877] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 518.757334][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.782496][ T5877] usb 1-1: not running at top speed; connect to a high speed hub [ 518.783708][ T5877] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 518.783733][ T5877] usb 1-1: config 0 has no interface number 0 [ 518.783774][ T5877] usb 1-1: config 0 interface 4 has no altsetting 0 [ 518.784590][ T5877] usb 1-1: language id specifier not provided by device, defaulting to English [ 518.823894][ T5877] usb 1-1: New USB device found, idVendor=19d2, idProduct=0326, bcdDevice=20.e7 [ 518.823926][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.823949][ T5877] usb 1-1: Product: syz [ 518.823965][ T5877] usb 1-1: Manufacturer: syz [ 518.823980][ T5877] usb 1-1: SerialNumber: syz [ 518.887848][ T5877] usb 1-1: config 0 descriptor?? [ 519.019145][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.544444][ T13] bond0 (unregistering): Released all slaves [ 519.665115][ T5877] usb 1-1: USB disconnect, device number 22 [ 520.006365][ T5994] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 520.166968][ T5994] usb 3-1: Using ep0 maxpacket: 32 [ 520.296232][ T5994] usb 3-1: config 14 has an invalid interface number: 137 but max is 3 [ 520.296262][ T5994] usb 3-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 520.296284][ T5994] usb 3-1: config 14 has 2 interfaces, different from the descriptor's value: 4 [ 520.296306][ T5994] usb 3-1: config 14 has no interface number 1 [ 520.296386][ T5994] usb 3-1: config 14 interface 0 altsetting 8 endpoint 0x6 has invalid wMaxPacketSize 0 [ 520.296410][ T5994] usb 3-1: config 14 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.296437][ T5994] usb 3-1: config 14 interface 137 has no altsetting 0 [ 520.296456][ T5994] usb 3-1: config 14 interface 0 has no altsetting 0 [ 520.302554][ T5994] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=2a.8a [ 520.302587][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.302608][ T5994] usb 3-1: Product: syz [ 520.302621][ T5994] usb 3-1: Manufacturer: syz [ 520.302636][ T5994] usb 3-1: SerialNumber: syz [ 520.419606][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.606967][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.611600][ T5994] ati_remote2 3-1:14.0: ati_remote2_probe(): need 2 interfaces, found 2 [ 520.664065][ T5994] usb 3-1: USB disconnect, device number 17 [ 520.730176][ T13] bond0 (unregistering): Released all slaves [ 520.833442][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 520.836215][ T6004] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 520.986090][ T6004] usb 1-1: Using ep0 maxpacket: 8 [ 520.988614][ T6004] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 520.988646][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.072014][ T6004] usb 1-1: config 0 descriptor?? [ 521.102905][ T6004] go7007 1-1:0.0: probe with driver go7007 failed with error -12 [ 521.296915][ T5978] usb 1-1: USB disconnect, device number 23 [ 521.456112][ T5994] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 521.636254][ T5994] usb 5-1: Using ep0 maxpacket: 8 [ 521.642743][ T5994] usb 5-1: unable to get BOS descriptor or descriptor too short [ 521.666392][ T5994] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.666425][ T5994] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 521.666450][ T5994] usb 5-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.666478][ T5994] usb 5-1: config 1 interface 0 has no altsetting 0 [ 521.687474][ T5994] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.687508][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.687533][ T5994] usb 5-1: Product: syz [ 521.687550][ T5994] usb 5-1: Manufacturer: syz [ 521.687565][ T5994] usb 5-1: SerialNumber: syz [ 521.696805][ T8751] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 521.696942][ T8751] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 521.826076][ T988] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 521.971284][ T5994] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 521.986123][ T988] usb 3-1: Using ep0 maxpacket: 16 [ 521.989057][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 521.990679][ T988] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 521.993676][ T988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.993704][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.993725][ T988] usb 3-1: Product: syz [ 521.993740][ T988] usb 3-1: Manufacturer: syz [ 521.993755][ T988] usb 3-1: SerialNumber: syz [ 522.057069][ T5994] usb 5-1: USB disconnect, device number 27 [ 522.156222][ T13] hsr_slave_0: left promiscuous mode [ 522.225137][ T13] hsr_slave_1: left promiscuous mode [ 522.228079][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.270308][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.336446][ T988] usb 3-1: 2:1 : unsupported format bits 0x80 [ 522.395656][ T988] usb 3-1: USB disconnect, device number 18 [ 522.461745][ T13] hsr_slave_0: left promiscuous mode [ 522.489689][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.529330][ T13] hsr_slave_1: left promiscuous mode [ 522.541747][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.597058][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.191267][ T8785] CIFS mount error: No usable UNC path provided in device string! [ 523.191267][ T8785] [ 523.191291][ T8785] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 523.858062][ T38] audit: type=1326 audit(1759417010.768:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8786 comm="syz.2.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6263e6eec9 code=0x0 [ 524.226109][ T5978] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 524.376383][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 524.379649][ T5978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 524.381353][ T5978] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 524.381373][ T5978] usb 1-1: config 1 has no interface number 0 [ 524.387476][ T5978] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 524.387507][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.387521][ T5978] usb 1-1: Product: syz [ 524.387532][ T5978] usb 1-1: Manufacturer: syz [ 524.387542][ T5978] usb 1-1: SerialNumber: syz [ 524.707338][ T5978] uvcvideo 1-1:1.206: probe with driver uvcvideo failed with error -22 [ 524.738669][ T5978] usb 1-1: USB disconnect, device number 24 [ 525.057405][ T13] team0 (unregistering): Port device team_slave_1 removed [ 525.398864][ T13] team0 (unregistering): Port device team_slave_0 removed [ 525.626343][ T988] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 525.758815][ T8801] CIFS mount error: No usable UNC path provided in device string! [ 525.758815][ T8801] [ 525.758839][ T8801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 525.827338][ T988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 525.830761][ T988] usb 1-1: not running at top speed; connect to a high speed hub [ 525.870489][ T988] usb 1-1: config 251 has an invalid interface number: 156 but max is 0 [ 525.870520][ T988] usb 1-1: config 251 has no interface number 0 [ 525.870550][ T988] usb 1-1: config 251 interface 156 has no altsetting 0 [ 525.874191][ T988] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8 [ 525.874213][ T988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.874227][ T988] usb 1-1: Product: syz [ 525.874237][ T988] usb 1-1: Manufacturer: syz [ 525.874247][ T988] usb 1-1: SerialNumber: syz [ 526.170072][ T988] usb 1-1: unknown interface protocol 0x2c, assuming v1 [ 526.170091][ T988] usb 1-1: cannot find UAC_HEADER [ 526.290667][ T988] snd-usb-audio 1-1:251.156: probe with driver snd-usb-audio failed with error -22 [ 526.312265][ T988] usb 1-1: USB disconnect, device number 25 [ 526.517244][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.856116][ T5927] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 527.166235][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 527.173072][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.186274][ T5927] usb 3-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 527.186305][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.186379][ T5927] usb 3-1: Product: syz [ 527.186395][ T5927] usb 3-1: Manufacturer: syz [ 527.186411][ T5927] usb 3-1: SerialNumber: syz [ 527.222956][ T8813] CIFS mount error: No usable UNC path provided in device string! [ 527.222956][ T8813] [ 527.223030][ T8813] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 527.975385][ T5927] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 527.975472][ T5927] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 528.008823][ T5927] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 528.033370][ T5927] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 528.063123][ T5927] usb 3-1: USB disconnect, device number 19 [ 528.248900][ T5927] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 528.298780][ T5927] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 528.299672][ T5927] visor 3-1:1.0: device disconnected [ 528.655764][ T8824] CIFS mount error: No usable UNC path provided in device string! [ 528.655764][ T8824] [ 528.655834][ T8824] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 528.860678][ T988] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 529.069690][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.341994][ T988] usb 5-1: not running at top speed; connect to a high speed hub [ 529.354997][ T988] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 529.355025][ T988] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 529.355079][ T988] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.392638][ T988] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.392673][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.392694][ T988] usb 5-1: Product: syz [ 529.392709][ T988] usb 5-1: Manufacturer: syz [ 529.392723][ T988] usb 5-1: SerialNumber: syz [ 529.719632][ T988] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 529.719682][ T988] cdc_ncm 5-1:1.0: bind() failure [ 529.759073][ T988] usb 5-1: USB disconnect, device number 28 [ 531.130987][ T8845] CIFS mount error: No usable UNC path provided in device string! [ 531.130987][ T8845] [ 531.131012][ T8845] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 532.336816][ T13] team0 (unregistering): Port device team_slave_1 removed [ 532.802891][ T13] team0 (unregistering): Port device team_slave_0 removed [ 532.861355][ T8857] ubi: mtd0 is already attached to ubi31 [ 533.186459][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 533.378358][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 533.380956][ T10] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 533.380986][ T10] usb 5-1: config 0 has no interface number 0 [ 533.383426][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=37.fd [ 533.383448][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.383462][ T10] usb 5-1: Product: syz [ 533.383473][ T10] usb 5-1: Manufacturer: syz [ 533.383483][ T10] usb 5-1: SerialNumber: syz [ 533.388405][ T10] usb 5-1: config 0 descriptor?? [ 533.528281][ T10] ldusb 5-1:0.225: Interrupt in endpoint not found [ 533.721926][ T10] usb 5-1: USB disconnect, device number 29 [ 535.574424][ T8868] ubi: mtd0 is already attached to ubi31 [ 538.580374][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.580553][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.580771][ T8522] bridge_slave_0: entered allmulticast mode [ 538.585891][ T8522] bridge_slave_0: entered promiscuous mode [ 538.840216][ T6004] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 538.858961][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 538.958935][ T8885] ubi: mtd0 is already attached to ubi31 [ 539.721757][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.721895][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.722125][ T8522] bridge_slave_1: entered allmulticast mode [ 539.748560][ T8522] bridge_slave_1: entered promiscuous mode [ 539.798110][ T6004] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 539.798174][ T6004] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 539.798203][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 539.798232][ T6004] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 539.798255][ T6004] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 539.800973][ T6004] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.801003][ T6004] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.801025][ T6004] usb 1-1: Manufacturer: syz [ 539.922452][ T6004] usb 1-1: config 0 descriptor?? [ 540.246801][ T8892] ubi: mtd0 is already attached to ubi31 [ 541.046245][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 541.213440][ T5884] usb 1-1: USB disconnect, device number 26 [ 541.287968][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 541.659084][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.659120][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.659146][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.664301][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 541.664333][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.664355][ T10] usb 5-1: Product: syz [ 541.664370][ T10] usb 5-1: Manufacturer: syz [ 541.664385][ T10] usb 5-1: SerialNumber: syz [ 541.781449][ T10] usb 5-1: config 0 descriptor?? [ 542.321974][ T10] usb 5-1: USB disconnect, device number 30 [ 542.399011][ T7957] udevd[7957]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.506935][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.559601][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.931909][ T8915] ubi: mtd0 is already attached to ubi31 [ 544.165755][ T8522] team0: Port device team_slave_0 added [ 544.204171][ T8522] team0: Port device team_slave_1 added [ 544.456167][ T5927] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 544.607925][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 544.616285][ T5927] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 544.616323][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.616347][ T5927] usb 5-1: Product: syz [ 544.616364][ T5927] usb 5-1: Manufacturer: syz [ 544.616380][ T5927] usb 5-1: SerialNumber: syz [ 544.623515][ T5927] usb 5-1: config 0 descriptor?? [ 544.914263][ T5884] usb 5-1: USB disconnect, device number 31 [ 548.005008][ T8937] ubi: mtd0 is already attached to ubi31 [ 548.601370][ T5927] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 549.322856][ T8945] ubi: mtd0 is already attached to ubi31 [ 550.065826][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.075085][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.075328][ T8606] bridge_slave_0: entered allmulticast mode [ 550.081140][ T8606] bridge_slave_0: entered promiscuous mode [ 550.167804][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.167822][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.167852][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.172399][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.172553][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.172769][ T8606] bridge_slave_1: entered allmulticast mode [ 550.213990][ T8606] bridge_slave_1: entered promiscuous mode [ 550.217624][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.217645][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.217690][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.846011][ T8961] ubi: mtd0 is already attached to ubi31 [ 551.341835][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.766405][ T5978] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 554.798299][ T5978] usb 1-1: device descriptor read/all, error -71 [ 554.902192][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.273693][ T8606] team0: Port device team_slave_0 added [ 556.567121][ T8606] team0: Port device team_slave_1 added [ 557.479931][ T59] ================================================================== [ 557.479950][ T59] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 557.479993][ T59] Read of size 8 at addr ffffc90010253008 by task kworker/u9:0/59 [ 557.480010][ T59] [ 557.480039][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 557.480087][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.480112][ T59] Workqueue: hci0 hci_rx_work [ 557.480155][ T59] Call Trace: [ 557.480167][ T59] [ 557.480177][ T59] dump_stack_lvl+0x189/0x250 [ 557.480204][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.480226][ T59] ? __pfx__printk+0x10/0x10 [ 557.480254][ T59] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 557.480281][ T59] ? __virt_addr_valid+0xdc/0x5c0 [ 557.480305][ T59] ? __virt_addr_valid+0xdc/0x5c0 [ 557.480331][ T59] print_report+0xca/0x240 [ 557.480362][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 557.480393][ T59] kasan_report+0x118/0x150 [ 557.480422][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 557.480458][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 557.480491][ T59] kcov_remote_start+0x2b0/0x6f0 [ 557.480529][ T59] hci_rx_work+0x130/0xe80 [ 557.480564][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 557.480606][ T59] process_scheduled_works+0xae1/0x17b0 [ 557.480655][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.480696][ T59] worker_thread+0x8a0/0xda0 [ 557.480743][ T59] kthread+0x711/0x8a0 [ 557.480767][ T59] ? __pfx_worker_thread+0x10/0x10 [ 557.480799][ T59] ? __pfx_kthread+0x10/0x10 [ 557.480821][ T59] ? rt_spin_unlock+0x150/0x200 [ 557.480856][ T59] ? rt_spin_unlock+0x161/0x200 [ 557.480886][ T59] ? __pfx_kthread+0x10/0x10 [ 557.480910][ T59] ret_from_fork+0x439/0x7d0 [ 557.480944][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 557.480980][ T59] ? __switch_to_asm+0x39/0x70 [ 557.481004][ T59] ? __switch_to_asm+0x33/0x70 [ 557.481027][ T59] ? __pfx_kthread+0x10/0x10 [ 557.481051][ T59] ret_from_fork_asm+0x1a/0x30 [ 557.481083][ T59] [ 557.481091][ T59] [ 557.481097][ T59] The buggy address belongs to a vmalloc virtual mapping [ 557.481114][ T59] Memory state around the buggy address: [ 557.481126][ T59] ffffc90010252f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 557.481142][ T59] ffffc90010252f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 557.481157][ T59] >ffffc90010253000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 557.481168][ T59] ^ [ 557.481180][ T59] ffffc90010253080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 557.481195][ T59] ffffc90010253100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 557.481206][ T59] ================================================================== [ 557.481225][ T59] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 557.481245][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 557.481268][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 557.481283][ T59] Workqueue: hci0 hci_rx_work [ 557.481312][ T59] Call Trace: [ 557.481320][ T59] [ 557.481329][ T59] dump_stack_lvl+0x99/0x250 [ 557.481349][ T59] ? __asan_memcpy+0x40/0x70 [ 557.481371][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.481392][ T59] ? __pfx__printk+0x10/0x10 [ 557.481426][ T59] vpanic+0x281/0x750 [ 557.481448][ T59] ? __pfx_vpanic+0x10/0x10 [ 557.481478][ T59] panic+0xb9/0xc0 [ 557.481498][ T59] ? __pfx_panic+0x10/0x10 [ 557.481518][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 557.481544][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 557.481573][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 557.481610][ T59] check_panic_on_warn+0x89/0xb0 [ 557.481636][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 557.481664][ T59] end_report+0x78/0x160 [ 557.481691][ T59] kasan_report+0x129/0x150 [ 557.481719][ T59] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 557.481756][ T59] __list_del_entry_valid_or_report+0xb5/0x190 [ 557.481788][ T59] kcov_remote_start+0x2b0/0x6f0 [ 557.481824][ T59] hci_rx_work+0x130/0xe80 [ 557.481860][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 557.481891][ T59] process_scheduled_works+0xae1/0x17b0 [ 557.481939][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.481980][ T59] worker_thread+0x8a0/0xda0 [ 557.482027][ T59] kthread+0x711/0x8a0 [ 557.482049][ T59] ? __pfx_worker_thread+0x10/0x10 [ 557.482081][ T59] ? __pfx_kthread+0x10/0x10 [ 557.482101][ T59] ? rt_spin_unlock+0x150/0x200 [ 557.482159][ T59] ? rt_spin_unlock+0x161/0x200 [ 557.482191][ T59] ? __pfx_kthread+0x10/0x10 [ 557.482213][ T59] ret_from_fork+0x439/0x7d0 [ 557.482246][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 557.482279][ T59] ? __switch_to_asm+0x39/0x70 [ 557.482303][ T59] ? __switch_to_asm+0x33/0x70 [ 557.482326][ T59] ? __pfx_kthread+0x10/0x10 [ 557.482347][ T59] ret_from_fork_asm+0x1a/0x30 [ 557.482381][ T59] [ 557.482722][ T59] Kernel Offset: disabled