last executing test programs: 10.953033649s ago: executing program 1 (id=2597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 10.639516172s ago: executing program 1 (id=2599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000400)={0x1400, [0x6, 0x3ea8, 0x4, 0x3, 0x1, 0x4, 0x80, 0x7, 0x1, 0x5, 0x8008, 0x4, 0x6, 0x6, 0xfff9, 0x50, 0x9, 0x7, 0x401, 0x101, 0x5, 0x1ff, 0xbb5, 0x15, 0x4, 0x1, 0x9, 0xe4, 0x6, 0x3, 0x2, 0x6, 0x5, 0x1, 0x2, 0x1, 0x2, 0x4, 0x5, 0x10, 0x4, 0xfff, 0x40, 0x6, 0x3, 0xfffe, 0x8000, 0x526], 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) 10.623014033s ago: executing program 3 (id=2600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.723118491s ago: executing program 2 (id=2601): setrlimit(0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) msgget$private(0x0, 0x0) 9.554532128s ago: executing program 1 (id=2602): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000400)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) writev(r6, &(0x7f0000000780)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000f6c000/0x4000)=nil, 0x4000, 0x4000000}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, 0x0, 0x0) 9.554233998s ago: executing program 2 (id=2603): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x1, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000014580)) 8.711364054s ago: executing program 3 (id=2604): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x28}}, 0x0) unshare(0x2c020400) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r5, 0x351e, 0x483, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, 0xfffffffffffffffe, 0x11) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="510003000000", 0x6) 7.264510095s ago: executing program 2 (id=2605): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001000000000000004108000000fc00000900090000060015000200000014001680100008800c00018006000100000100"], 0x38}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x80}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.599495715s ago: executing program 3 (id=2606): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5.538369987s ago: executing program 1 (id=2607): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xfffffffffffffff6}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a8883633520c43653016bbef19b3fbd8cbede415ef106387315827bfec2d85762d9aef1736baea3dd53bcb9ac89a47de0eb9f39d794fbbf3b7", @ANYRES32=0x0], 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r4, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce) close_range(r0, 0xffffffffffffffff, 0x0) 5.335205605s ago: executing program 0 (id=2608): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010101}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'veth1_to_bridge\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000540)=""/145, 0x43, 0x91, 0x1}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10002bbd50000200df"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x600000a, 0x82012, r4, 0x83000000) 5.308166357s ago: executing program 3 (id=2609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x181001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x10000}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000400)={0x1400, [0x6, 0x3ea8, 0x4, 0x3, 0x1, 0x4, 0x80, 0x7, 0x1, 0x5, 0x8008, 0x4, 0x6, 0x6, 0xfff9, 0x50, 0x9, 0x7, 0x401, 0x101, 0x5, 0x1ff, 0xbb5, 0x15, 0x4, 0x1, 0x9, 0xe4, 0x6, 0x3, 0x2, 0x6, 0x5, 0x1, 0x2, 0x1, 0x2, 0x4, 0x5, 0x10, 0x4, 0xfff, 0x40, 0x6, 0x3, 0xfffe, 0x8000, 0x526], 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) 4.397788095s ago: executing program 0 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000400)={0x1400, [0x6, 0x3ea8, 0x4, 0x3, 0x1, 0x4, 0x80, 0x7, 0x1, 0x5, 0x8008, 0x4, 0x6, 0x6, 0xfff9, 0x50, 0x9, 0x7, 0x401, 0x101, 0x5, 0x1ff, 0xbb5, 0x15, 0x4, 0x1, 0x9, 0xe4, 0x6, 0x3, 0x2, 0x6, 0x5, 0x1, 0x2, 0x1, 0x2, 0x4, 0x5, 0x10, 0x4, 0xfff, 0x40, 0x6, 0x3, 0xfffe, 0x8000, 0x526], 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) 3.635958827s ago: executing program 3 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d63, 0x3}}, 0x44) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) 3.235977164s ago: executing program 0 (id=2612): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) 3.155266408s ago: executing program 2 (id=2613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x9, 0x6, &(0x7f0000000540)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x2, 0x2, 0x2, 0xa, 0x1, 0xffffffffffffffe0, 0x8}], &(0x7f0000000180)='GPL\x00', 0x9, 0x29, &(0x7f00000001c0)=""/41, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0xa, 0x4, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0xdd5d1edde8f904fb) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) pread64(r6, &(0x7f00000000c0)=""/209, 0xd1, 0x578c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000014580)) 3.129244498s ago: executing program 0 (id=2614): socket$phonet(0x23, 0x2, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.367398423s ago: executing program 3 (id=2615): rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffffff, 0x0, 0x4441, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x3) 1.287755916s ago: executing program 2 (id=2616): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x800) setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$vbi(0x0, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6032, 0x3021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6c, 0x0, &(0x7f0000000680)="3ed417c537acca896f54a802a045a1993e8e0ef432a8775ca0d3b142a214824fbea2a9a55c291649f30b61904c8899fa0d9566dc0c4ee785ee937a241201dbe4225c4c8addb9444c37a36a05e7858260e10ca08f8fab7b64f7560d42b5ebf61a9aa42011eb6bb525a5c5fc5d"}) r7 = dup3(r6, r5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1.235539948s ago: executing program 1 (id=2617): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.169091921s ago: executing program 0 (id=2618): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4, @private=0xa010101}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'veth1_to_bridge\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000540)=""/145, 0x43, 0x91, 0x1}, 0x28) r4 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="10002bbd50000200df"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x600000a, 0x82012, r4, 0x83000000) 137.634714ms ago: executing program 0 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x181001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x10000}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f0000000400)={0x1400, [0x6, 0x3ea8, 0x4, 0x3, 0x1, 0x4, 0x80, 0x7, 0x1, 0x5, 0x8008, 0x4, 0x6, 0x6, 0xfff9, 0x50, 0x9, 0x7, 0x401, 0x101, 0x5, 0x1ff, 0xbb5, 0x15, 0x4, 0x1, 0x9, 0xe4, 0x6, 0x3, 0x2, 0x6, 0x5, 0x1, 0x2, 0x1, 0x2, 0x4, 0x5, 0x10, 0x4, 0xfff, 0x40, 0x6, 0x3, 0xfffe, 0x8000, 0x526], 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) 87.482347ms ago: executing program 2 (id=2620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x181001) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000400)={0x1400, [0x6, 0x3ea8, 0x4, 0x3, 0x1, 0x4, 0x80, 0x7, 0x1, 0x5, 0x8008, 0x4, 0x6, 0x6, 0xfff9, 0x50, 0x9, 0x7, 0x401, 0x101, 0x5, 0x1ff, 0xbb5, 0x15, 0x4, 0x1, 0x9, 0xe4, 0x6, 0x3, 0x2, 0x6, 0x5, 0x1, 0x2, 0x1, 0x2, 0x4, 0x5, 0x10, 0x4, 0xfff, 0x40, 0x6, 0x3, 0xfffe, 0x8000, 0x526], 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2621): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) kernel console output (not intermixed with test programs): 27804][T10409] sd 0:0:1:0: PR command failed: 1026 [ 614.840816][T10409] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 614.880946][T10409] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 615.026819][T10414] xt_ecn: cannot match TCP bits for non-tcp packets [ 615.986225][T10430] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 618.102526][T10108] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 618.369437][T10108] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 618.377634][T10108] usb 4-1: config 0 has no interface number 0 [ 618.384141][T10108] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 618.393306][T10108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.612917][T10108] usb 4-1: config 0 descriptor?? [ 618.696767][T10108] usb 4-1: selecting invalid altsetting 1 [ 618.719111][T10108] dvb_ttusb_budget: ttusb_init_controller: error [ 618.734910][T10108] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 618.960846][T10449] input: syz1 as /devices/virtual/input/input24 [ 619.087601][T10108] DVB: Unable to find symbol cx22700_attach() [ 619.290669][T10108] DVB: Unable to find symbol tda10046_attach() [ 619.416611][T10108] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 619.472382][T10108] usb 4-1: USB disconnect, device number 23 [ 622.019108][T10494] serio: Serial port ptm0 [ 622.276874][T10108] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 625.367664][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.375263][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.425661][T10108] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 625.468298][T10108] usb 2-1: can't read configurations, error -71 [ 626.737822][T10518] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 628.102622][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 628.356142][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF4, skipping [ 628.411905][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 628.448208][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 628.457972][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.486829][ T9] usb 3-1: Product: syz [ 628.491011][ T9] usb 3-1: Manufacturer: syz [ 628.514849][ T9] usb 3-1: SerialNumber: syz [ 628.558582][ T9] usb 3-1: config 0 descriptor?? [ 628.595347][T10527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.605918][ T9] usb 3-1: ucan: probing device on interface #0 [ 628.626671][ T9] usb 3-1: ucan: invalid EP count (0) [ 628.641824][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 629.289811][T10542] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 629.321810][T10542] Attempt to restore checkpoint with obsolete wellknown handles [ 629.451807][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.506272][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.171177][T10549] syzkaller0: entered promiscuous mode [ 630.176863][T10549] syzkaller0: entered allmulticast mode [ 630.942217][ T28] usb 3-1: USB disconnect, device number 26 [ 633.945386][T10591] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 635.602794][T10606] syzkaller0: entered promiscuous mode [ 635.621166][T10606] syzkaller0: entered allmulticast mode [ 637.756932][T10623] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 638.326684][T10639] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 638.800647][T10641] syzkaller0: entered promiscuous mode [ 638.832836][T10641] syzkaller0: entered allmulticast mode [ 640.434953][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 640.751933][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 640.768338][ T9] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 640.781412][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.121992][ T5841] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 641.129943][ T9] usb 1-1: config 0 has no interface number 0 [ 641.305502][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.369601][ T9] usb 1-1: config 0 has no interface number 0 [ 641.389148][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.402996][ T9] usb 1-1: config 0 has no interface number 0 [ 641.412167][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.421898][ T9] usb 1-1: config 0 has no interface number 0 [ 641.429608][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.443017][ T9] usb 1-1: config 0 has no interface number 0 [ 641.451393][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.464617][ T9] usb 1-1: config 0 has no interface number 0 [ 641.567891][ T5841] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 641.592237][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.600382][ T9] usb 1-1: config 0 has no interface number 0 [ 641.608688][ T5841] usb 3-1: config 0 has no interface number 0 [ 641.645724][ T9] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 641.657561][ T5841] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 641.677118][T10664] binder: 10662:10664 ioctl 400c620e 0 returned -14 [ 641.707573][ T9] usb 1-1: config 0 has no interface number 0 [ 641.736343][ T5841] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 641.797388][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 641.818495][ T5841] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 641.867735][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.914713][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.557298][ T9] usb 1-1: Product: syz [ 642.725797][ T9] usb 1-1: Manufacturer: syz [ 642.742909][ T5841] usb 3-1: config 0 descriptor?? [ 642.766665][ T9] usb 1-1: SerialNumber: syz [ 642.796286][ T5841] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 642.948167][ T9] usb 1-1: config 0 descriptor?? [ 643.004528][ T9] usb 1-1: can't set config #0, error -71 [ 643.036383][ T9] usb 1-1: USB disconnect, device number 31 [ 643.086967][ T5841] usb 3-1: USB disconnect, device number 27 [ 643.118557][T10676] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 644.060374][T10677] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 647.122573][T10720] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 648.369815][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 649.194787][ T9] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 649.211991][ T9] usb 1-1: config 0 has no interface number 0 [ 649.225877][ T9] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 649.251992][ T9] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 649.272823][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 649.296470][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.331922][T10753] binder: 10751:10753 unknown command 0 [ 649.331949][T10753] binder: 10751:10753 ioctl c0306201 200000000080 returned -22 [ 649.344305][ T9] usb 1-1: config 0 descriptor?? [ 649.346734][ T9] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 649.570606][ T9] usb 1-1: USB disconnect, device number 32 [ 650.730759][T10764] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 651.852820][T10782] netlink: 'syz.2.1299': attribute type 4 has an invalid length. [ 652.040093][T10782] lo speed is unknown, defaulting to 1000 [ 655.252310][ T28] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 655.456347][ T28] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 655.464933][ T28] usb 1-1: config 0 has no interface number 0 [ 655.478343][ T28] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 655.500278][ T28] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 655.512976][ T28] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 655.524161][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.611840][ T28] usb 1-1: config 0 descriptor?? [ 655.623730][ T28] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 655.729335][T10810] binder: 10808:10810 ioctl 400c620e 0 returned -14 [ 656.507089][ T8] usb 1-1: USB disconnect, device number 33 [ 658.797084][T10834] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 659.486525][T10842] netlink: 'syz.1.1316': attribute type 4 has an invalid length. [ 659.527796][T10847] binder: 10844:10847 ioctl 400c620e 0 returned -14 [ 660.307378][T10842] lo speed is unknown, defaulting to 1000 [ 661.269630][T10855] binder: 10848:10855 ioctl 400c620e 0 returned -14 [ 661.546908][T10859] binder: 10856:10859 ioctl 400c620e 0 returned -14 [ 663.421847][ T28] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 663.632395][ T28] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 663.640604][ T28] usb 4-1: config 0 has no interface number 0 [ 663.671799][ T28] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 663.695360][ T28] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 663.710715][ T28] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 663.725518][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.736885][ T28] usb 4-1: config 0 descriptor?? [ 663.768499][ T28] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 663.982761][ T8] usb 4-1: USB disconnect, device number 24 [ 664.062375][T10880] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 665.716129][T10902] binder: 10900:10902 ioctl 400c620e 0 returned -14 [ 666.514296][T10899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1334'. [ 667.614342][T10108] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 667.988264][T10108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.115748][T10108] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 668.127801][T10108] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 668.137939][T10921] netlink: 'syz.3.1337': attribute type 4 has an invalid length. [ 668.145737][T10108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.157541][T10108] usb 2-1: config 0 descriptor?? [ 668.580764][T10921] lo speed is unknown, defaulting to 1000 [ 671.565074][T10108] usb 2-1: USB disconnect, device number 30 [ 672.691406][T10944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1344'. [ 672.782148][T10945] syzkaller0: entered promiscuous mode [ 672.787650][T10945] syzkaller0: entered allmulticast mode [ 680.387342][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 680.597213][T10996] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 681.741205][T11017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1361'. [ 684.791569][T11039] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 684.827029][T11039] lo speed is unknown, defaulting to 1000 [ 685.051845][ T5899] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 685.122221][T11047] binder: 11045:11047 ioctl 400c620e 0 returned -14 [ 685.232029][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 685.247038][ T5899] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 685.271122][ T5899] usb 1-1: config 0 has no interface number 0 [ 685.912035][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.918372][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.947338][ T5899] usb 1-1: config 0 interface 184 has no altsetting 0 [ 685.967978][ T5899] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 685.983193][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.991205][ T5899] usb 1-1: Product: syz [ 685.999403][ T5899] usb 1-1: Manufacturer: syz [ 686.006470][ T5899] usb 1-1: SerialNumber: syz [ 686.036205][ T5899] usb 1-1: config 0 descriptor?? [ 686.166560][ T5899] smsc75xx v1.0.0 [ 687.664842][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 687.720490][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 687.731612][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 687.743617][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 687.758281][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 687.769274][ T5899] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 687.780068][ T5899] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 687.850954][ T5899] usb 1-1: USB disconnect, device number 34 [ 694.525210][T11114] input: syz0 as /devices/virtual/input/input25 [ 694.535501][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 694.732010][T11114] SET target dimension over the limit! [ 695.537371][T11131] xt_ecn: cannot match TCP bits for non-tcp packets [ 696.151497][T11137] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 702.031626][T11176] binder: 11172:11176 ioctl 400c620e 0 returned -14 [ 704.001245][T11197] input: syz0 as /devices/virtual/input/input26 [ 706.056015][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 706.129061][T11195] SET target dimension over the limit! [ 709.941786][ T28] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 710.164246][ T28] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 710.172680][ T28] usb 3-1: config 0 has no interface number 0 [ 710.179248][ T28] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 710.189737][ T28] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 710.200874][ T28] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 710.213570][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.236052][ T28] usb 3-1: config 0 descriptor?? [ 710.245702][ T28] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 710.360577][T11249] input: syz0 as /devices/virtual/input/input27 [ 710.375477][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 710.388354][T11249] SET target dimension over the limit! [ 710.450743][ T28] usb 3-1: USB disconnect, device number 28 [ 711.115153][T11266] fuse: Bad value for 'fd' [ 714.424352][T11292] binder: 11290:11292 ioctl 400c620e 0 returned -14 [ 715.240811][T11297] fuse: Bad value for 'fd' [ 715.681092][T11306] input: syz0 as /devices/virtual/input/input28 [ 715.718879][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1438'. [ 715.734887][T11303] SET target dimension over the limit! [ 717.753360][T11327] fuse: Bad value for 'fd' [ 718.168203][T11337] xt_ecn: cannot match TCP bits for non-tcp packets [ 718.760386][T11345] binder: 11343:11345 ioctl 400c620e 0 returned -14 [ 723.569769][T11359] TCP: MD5 Hash mismatch for [fe88::102]:20003->[ff02::1]:20004 L3 index 0 [ 723.978988][T11366] input: syz0 as /devices/virtual/input/input29 [ 724.033941][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 725.510256][T11386] binder: 11383:11386 ioctl 400c620e 0 returned -14 [ 730.772213][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 731.666099][ T8] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 731.682329][ T8] usb 4-1: config 0 has no interface number 0 [ 731.688462][ T8] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 731.698945][ T8] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 731.708865][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 731.718052][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.736204][ T8] usb 4-1: config 0 descriptor?? [ 731.750102][ T8] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 732.024117][ T5899] usb 4-1: USB disconnect, device number 25 [ 733.076278][T11431] binder: 11429:11431 ioctl 400c620e 0 returned -14 [ 733.922656][T11435] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 734.079222][T11443] syzkaller0: entered promiscuous mode [ 734.085495][T11443] syzkaller0: entered allmulticast mode [ 734.107932][T11443] tipc: Enabling of bearer rejected, failed to enable media [ 735.311635][T11445] input: syz0 as /devices/virtual/input/input30 [ 735.321829][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 735.334752][T11445] SET target dimension over the limit! [ 736.612338][T11466] sd 0:0:1:0: PR command failed: 1026 [ 736.618122][T11466] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 736.654040][T11466] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 737.341842][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 737.544884][ T8] usb 3-1: config 0 has an invalid interface number: 249 but max is 0 [ 737.558257][ T8] usb 3-1: config 0 has no interface number 0 [ 737.576636][ T8] usb 3-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 737.601795][ T8] usb 3-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 737.627253][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 737.705480][T11477] binder: 11473:11477 ioctl 400c620e 0 returned -14 [ 738.417952][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.492965][ T8] usb 3-1: config 0 descriptor?? [ 738.650022][ T8] port100 3-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 738.967889][ T8] usb 3-1: USB disconnect, device number 29 [ 740.230185][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 741.101813][ T28] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 741.145993][T11521] netlink: 'syz.2.1497': attribute type 4 has an invalid length. [ 741.270524][T11521] lo speed is unknown, defaulting to 1000 [ 741.304069][ T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.330926][ T28] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 741.364143][ T28] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 741.407527][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.488572][ T28] usb 1-1: config 0 descriptor?? [ 741.531798][ T5841] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 741.776048][ T5841] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 741.814413][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.854959][ T5841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 741.928857][ T5841] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.966348][ T5841] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 741.975495][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 741.994577][ T5841] usb 4-1: Product: syz [ 742.004633][ T5841] usb 4-1: Manufacturer: syz [ 742.066276][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 742.076599][ T5841] cdc_wdm 4-1:1.0: skipping garbage [ 742.107859][ T5841] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 742.469018][ T5841] usb 4-1: USB disconnect, device number 26 [ 743.277192][ T5899] usb 1-1: USB disconnect, device number 35 [ 743.740212][T11546] xt_ecn: cannot match TCP bits for non-tcp packets [ 744.758475][T11562] binder: 11559:11562 ioctl 400c620e 0 returned -14 [ 746.527587][T11582] xt_ecn: cannot match TCP bits for non-tcp packets [ 747.193157][T11591] misc userio: No port type given on /dev/userio [ 747.622094][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.628371][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.061340][T11596] syzkaller0: entered promiscuous mode [ 748.067074][T11596] syzkaller0: entered allmulticast mode [ 749.270266][T11608] binder: 11603:11608 ioctl 400c620e 0 returned -14 [ 750.445607][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1522'. [ 750.459739][T11626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.471980][T11626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.491328][T11626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.499630][T11626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.782953][T11632] syzkaller0: entered promiscuous mode [ 750.789094][T11632] syzkaller0: entered allmulticast mode [ 750.889207][T11638] binder: 11635:11638 ioctl 400c620e 0 returned -14 [ 753.189285][T11653] set match dimension is over the limit! [ 754.687250][T11664] kvm: kvm [11662]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000067) [ 754.858359][T11675] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 755.474424][T11684] binder: 11676:11684 ioctl 400c620e 0 returned -14 [ 758.485057][T11713] capability: warning: `syz.3.1548' uses 32-bit capabilities (legacy support in use) [ 758.500649][T11716] netlink: 'syz.1.1547': attribute type 4 has an invalid length. [ 758.639016][T11717] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 759.162282][T11716] lo speed is unknown, defaulting to 1000 [ 763.181870][ T5899] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 763.500958][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.521842][ T5899] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.531966][ T5899] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 763.581824][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.657292][ T5899] usb 1-1: config 0 descriptor?? [ 763.743468][T11761] sd 0:0:1:0: PR command failed: 1026 [ 763.753150][T11761] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 763.774077][T11761] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 764.769510][T11770] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 765.271891][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 766.037029][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 766.064119][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 766.104917][ T8] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 766.135458][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.144962][ T8] usb 3-1: Product: syz [ 766.150362][ T8] usb 3-1: Manufacturer: syz [ 766.158228][ T8] usb 3-1: SerialNumber: syz [ 766.232520][ T8] usb 3-1: config 0 descriptor?? [ 766.243501][T11774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 766.250788][T11774] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 766.302763][ T8] usb 3-1: ucan: probing device on interface #0 [ 766.324121][ T8] usb 3-1: ucan: invalid EP count (1) [ 766.351809][ T8] usb 3-1: ucan: probe failed; try to update the device firmware [ 766.479014][ T5899] usb 1-1: USB disconnect, device number 36 [ 766.653073][T11786] binder: 11784:11786 ioctl 400c620e 0 returned -14 [ 768.182880][ T8] usb 3-1: USB disconnect, device number 30 [ 768.398131][T11803] sd 0:0:1:0: PR command failed: 1026 [ 768.404293][T11803] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 768.414277][T11802] overlayfs: missing 'lowerdir' [ 768.426744][T11803] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 770.212649][T11821] set match dimension is over the limit! [ 771.526766][T11832] binder: 11827:11832 ioctl 400c620e 0 returned -14 [ 773.096166][T11840] xt_ecn: cannot match TCP bits for non-tcp packets [ 775.419161][T11876] binder: 11874:11876 ioctl 400c620e 0 returned -14 [ 778.084250][T11886] sd 0:0:1:0: PR command failed: 1026 [ 778.202666][T11886] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 778.259163][T11894] binder: 11890:11894 ioctl 400c620e 0 returned -14 [ 778.282247][T11886] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 779.950705][ T8] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 780.255593][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 780.266054][ T8] usb 2-1: config 0 has no interface number 0 [ 780.274654][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 780.291031][ T8] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 780.336036][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 780.345541][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.358040][ T8] usb 2-1: config 0 descriptor?? [ 780.365018][T11899] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 780.394422][ T8] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 780.587042][T11899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.597619][T11899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.480084][T11923] set match dimension is over the limit! [ 783.008540][ T5804] usb 2-1: USB disconnect, device number 31 [ 783.299604][T11932] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 783.830261][T11931] sd 0:0:1:0: PR command failed: 1026 [ 783.835943][T11931] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 783.842789][T11931] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 783.875078][T11940] syzkaller0: entered promiscuous mode [ 783.893390][T11940] syzkaller0: entered allmulticast mode [ 785.067543][T11954] binder: 11952:11954 ioctl 400c620e 0 returned -14 [ 786.045622][T11958] binder: 11956:11958 ioctl 400c620e 0 returned -14 [ 787.591844][T10108] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 787.687953][T11972] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 788.241856][T11974] sd 0:0:1:0: PR command failed: 1026 [ 788.254131][T11974] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 788.260985][T11974] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 788.295986][T10108] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 788.321952][T10108] usb 1-1: config 0 has no interface number 0 [ 788.328085][T10108] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 788.522826][T10108] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 789.331794][T10108] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 789.377493][T10108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.428275][T10108] usb 1-1: config 0 descriptor?? [ 789.453753][T10108] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 789.550003][T11984] binder: 11980:11984 ioctl 400c620e 0 returned -14 [ 791.795517][T11999] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 792.217607][T10108] usb 1-1: USB disconnect, device number 37 [ 792.425834][T12005] binder: 12000:12005 ioctl 400c620e 0 returned -14 [ 793.512903][T12013] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 793.949614][T12017] binder: 12015:12017 ioctl 400c620e 0 returned -14 [ 794.746580][T12019] xt_ecn: cannot match TCP bits for non-tcp packets [ 798.301379][T12057] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 798.514340][T12059] binder: 12052:12059 ioctl 400c620e 0 returned -14 [ 798.748505][T12061] xt_ecn: cannot match TCP bits for non-tcp packets [ 799.258261][T12066] set match dimension is over the limit! [ 802.130304][T12082] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 802.755503][T12084] kvm: Disabled LAPIC found during irq injection [ 805.763288][T12107] input: syz1 as /devices/virtual/input/input31 [ 806.451643][T12109] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 806.938823][T12112] xt_ecn: cannot match TCP bits for non-tcp packets [ 808.756980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.764840][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.831906][ T5804] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 812.244041][ T5804] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 812.253392][ T5804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.397252][ T5804] usb 1-1: config 0 has no interface number 0 [ 812.405419][T12148] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 812.839873][ T5804] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 812.970238][ T5804] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 813.071824][ T5804] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.111868][ T5804] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 813.111896][ T5804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.114096][ T5804] usb 1-1: config 0 descriptor?? [ 813.131385][ T5804] gspca_main: spca561-2.14.0 probing abcd:cdee [ 813.164824][T12154] syz.3.1665: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3 [ 813.871992][T12159] binder: 12155:12159 ioctl 400c620e 0 returned -14 [ 813.875249][ T5804] spca561: probe of 1-1:0.156 failed with error -22 [ 813.876051][T12154] ,mems_allowed=0-1 [ 813.987812][T12154] CPU: 1 PID: 12154 Comm: syz.3.1665 Not tainted syzkaller #0 [ 813.987836][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 813.987852][T12154] Call Trace: [ 813.987860][T12154] [ 813.987874][T12154] dump_stack_lvl+0x16c/0x230 [ 813.987919][T12154] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 813.987946][T12154] ? show_regs_print_info+0x20/0x20 [ 813.987971][T12154] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 813.988008][T12154] warn_alloc+0x210/0x300 [ 813.988034][T12154] ? stack_trace_save+0x9c/0xe0 [ 813.988058][T12154] ? zone_watermark_ok_safe+0x230/0x230 [ 813.988092][T12154] ? kasan_set_track+0x5f/0x70 [ 813.988109][T12154] ? kasan_set_track+0x4e/0x70 [ 813.988125][T12154] ? __kasan_kmalloc+0x8f/0xa0 [ 813.988143][T12154] ? xsk_init_queue+0xb0/0x110 [ 813.988163][T12154] ? xsk_setsockopt+0x43c/0x6f0 [ 813.988184][T12154] ? do_sock_setsockopt+0x175/0x1a0 [ 813.988201][T12154] ? __x64_sys_setsockopt+0x184/0x200 [ 813.988223][T12154] __vmalloc_node_range+0x126/0x1320 [ 813.988275][T12154] ? free_vm_area+0x50/0x50 [ 813.988307][T12154] vmalloc_user+0x74/0x80 [ 813.988330][T12154] ? xskq_create+0xbf/0x170 [ 813.988351][T12154] xskq_create+0xbf/0x170 [ 813.988377][T12154] xsk_init_queue+0xb0/0x110 [ 813.988403][T12154] xsk_setsockopt+0x43c/0x6f0 [ 813.988428][T12154] ? xsk_poll+0x670/0x670 [ 813.988454][T12154] ? __fget_files+0x28/0x4d0 [ 813.988480][T12154] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 813.988500][T12154] ? security_socket_setsockopt+0x7e/0xa0 [ 813.988518][T12154] ? xsk_poll+0x670/0x670 [ 813.988542][T12154] do_sock_setsockopt+0x175/0x1a0 [ 813.988561][T12154] ? __fdget+0x180/0x210 [ 813.988585][T12154] __x64_sys_setsockopt+0x184/0x200 [ 813.988610][T12154] do_syscall_64+0x55/0xb0 [ 813.988625][T12154] ? clear_bhb_loop+0x40/0x90 [ 813.988645][T12154] ? clear_bhb_loop+0x40/0x90 [ 813.988667][T12154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 813.988686][T12154] RIP: 0033:0x7fcd0498f749 [ 813.988710][T12154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.988725][T12154] RSP: 002b:00007fcd02bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 813.988745][T12154] RAX: ffffffffffffffda RBX: 00007fcd04be6090 RCX: 00007fcd0498f749 [ 813.988759][T12154] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 813.988771][T12154] RBP: 00007fcd04a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 813.988783][T12154] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.988795][T12154] R13: 00007fcd04be6128 R14: 00007fcd04be6090 R15: 00007ffe30203de8 [ 813.988824][T12154] [ 813.993546][T12154] Mem-Info: [ 813.993557][T12154] active_anon:6628 inactive_anon:0 isolated_anon:0 [ 813.993557][T12154] active_file:17617 inactive_file:40178 isolated_file:0 [ 813.993557][T12154] unevictable:768 dirty:66 writeback:0 [ 813.993557][T12154] slab_reclaimable:10481 slab_unreclaimable:93289 [ 813.993557][T12154] mapped:24603 shmem:1361 pagetables:556 [ 813.993557][T12154] sec_pagetables:0 bounce:0 [ 813.993557][T12154] kernel_misc_reclaimable:0 [ 813.993557][T12154] free:1328030 free_pcp:14843 free_cma:0 [ 813.993605][T12154] Node 0 active_anon:26512kB inactive_anon:0kB active_file:70468kB inactive_file:160512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98412kB dirty:264kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11344kB pagetables:2224kB sec_pagetables:0kB all_unreclaimable? no [ 813.993650][T12154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 813.993695][T12154] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.993744][T12154] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 813.993783][T12154] Node 0 DMA32 free:1401856kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:26464kB inactive_anon:0kB active_file:70468kB inactive_file:159196kB unevictable:1536kB writepending:264kB present:3129332kB managed:2589640kB mlocked:0kB bounce:0kB free_pcp:34332kB local_pcp:13748kB free_cma:0kB [ 813.993834][T12154] lowmem_reserve[]: 0 0 1 1 1 [ 813.993870][T12154] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 813.993925][T12154] lowmem_reserve[]: 0 0 0 0 0 [ 813.993962][T12154] Node 1 Normal free:3894884kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25040kB local_pcp:9916kB free_cma:0kB [ 813.994013][T12154] lowmem_reserve[]: 0 0 0 0 0 [ 813.994050][T12154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 813.994220][T12154] Node 0 DMA32: 2328*4kB (UME) 682*8kB (UME) 489*16kB (UME) 726*32kB (UME) 506*64kB (UME) 185*128kB (UME) 136*256kB (UME) 117*512kB (UM) 61*1024kB (UM) 8*2048kB (UM) 275*4096kB (UM) = 1401856kB [ 813.994390][T12154] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 813.994533][T12154] Node 1 Normal: 147*4kB (UME) 59*8kB (UME) 24*16kB (UME) 50*32kB (UME) 16*64kB (UME) 9*128kB (UME) 2*256kB (ME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3894884kB [ 813.994695][T12154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.994710][T12154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.994724][T12154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 813.994738][T12154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 813.994752][T12154] 59156 total pagecache pages [ 813.994763][T12154] 0 pages in swap cache [ 813.994769][T12154] Free swap = 124680kB [ 813.994776][T12154] Total swap = 124996kB [ 813.994783][T12154] 2097051 pages RAM [ 813.994790][T12154] 0 pages HighMem/MovableOnly [ 813.994796][T12154] 416127 pages reserved [ 813.994802][T12154] 0 pages cma reserved [ 814.055600][ T5804] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 814.055683][ T5804] usb 1-1: MIDIStreaming interface descriptor not found [ 814.129436][ T5804] usb 1-1: USB disconnect, device number 38 [ 814.214723][T12163] sctp: [Deprecated]: syz.2.1669 (pid 12163) Use of int in max_burst socket option deprecated. [ 814.214723][T12163] Use struct sctp_assoc_value instead [ 814.396868][T12164] udevd[12164]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.190030][T12163] 9pnet_fd: Insufficient options for proto=fd [ 816.099406][T12187] sd 0:0:1:0: PR command failed: 1026 [ 816.099444][T12187] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 816.099484][T12187] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 817.393722][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.481313][T12205] set match dimension is over the limit! [ 817.674582][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.099244][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.170513][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.760347][T12222] binder: 12220:12222 ioctl 400c620e 0 returned -14 [ 823.391004][T12248] binder: 12246:12248 ioctl 400c620e 0 returned -14 [ 827.937867][T12287] binder: 12284:12287 ioctl 400c620e 0 returned -14 [ 828.771391][T12291] binder: 12288:12291 ioctl 400c620e 0 returned -14 [ 837.024167][T12333] binder: 12328:12333 ioctl 400c620e 0 returned -14 [ 837.290206][T12340] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 841.665055][T12387] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 846.413634][T12429] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 847.990374][T12438] comedi comedi0: No channels found! [ 853.852252][T12472] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 853.862901][T12472] cramfs: wrong magic [ 854.250010][T12474] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 856.612749][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 857.061639][ T5899] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 857.071808][ T5899] usb 4-1: config 0 has no interface number 0 [ 857.078320][ T5899] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 857.100601][ T5899] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 857.228399][ T5899] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 857.295116][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.393245][ T5899] usb 4-1: config 0 descriptor?? [ 857.460510][ T5899] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 858.221420][ T5899] usb 4-1: USB disconnect, device number 27 [ 858.789758][T12510] netlink: 'syz.3.1759': attribute type 4 has an invalid length. [ 858.979937][T12510] lo speed is unknown, defaulting to 1000 [ 860.999869][T12531] binder: 12529:12531 ioctl 400c620e 0 returned -14 [ 864.776673][T12552] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 866.784455][T12560] netlink: 'syz.1.1770': attribute type 10 has an invalid length. [ 867.184709][T12560] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.200727][T12560] bond0: (slave team0): Enslaving as an active interface with an up link [ 867.297973][T12573] binder: 12570:12573 ioctl 400c620e 0 returned -14 [ 870.196194][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.202720][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.301045][T12610] binder: 12594:12610 ioctl 400c620e 0 returned -14 [ 872.777496][T12616] binder: 12614:12616 ioctl 400c620e 0 returned -14 [ 873.773739][T12624] set match dimension is over the limit! [ 874.935768][T12631] xt_ecn: cannot match TCP bits for non-tcp packets [ 877.038100][T12642] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 880.058624][T12660] sd 0:0:1:0: PR command failed: 1026 [ 880.064957][T12660] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 880.074275][T12660] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 884.276774][T12696] sd 0:0:1:0: PR command failed: 1026 [ 884.307524][T12696] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 885.084422][T12696] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 885.133712][T12702] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 889.973043][ T5899] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 889.998854][T12752] netlink: 'syz.3.1822': attribute type 4 has an invalid length. [ 890.060929][T12752] lo speed is unknown, defaulting to 1000 [ 890.183926][ T5899] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 890.246223][ T5899] usb 1-1: config 0 has no interface number 0 [ 890.259492][ T5899] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 890.271814][ T5899] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 890.291829][ T5899] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 890.302116][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.312895][ T5899] usb 1-1: config 0 descriptor?? [ 890.323370][ T5899] port100 1-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 890.560736][ T5899] usb 1-1: USB disconnect, device number 39 [ 893.231898][T10108] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 893.499165][T10108] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.530338][T10108] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 893.540494][T10108] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 893.551961][T10108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.563105][T10108] usb 3-1: config 0 descriptor?? [ 895.863608][ T5899] usb 3-1: USB disconnect, device number 31 [ 895.878304][T12801] input: syz0 as /devices/virtual/input/input32 [ 895.893746][T12799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1834'. [ 895.933600][T12799] SET target dimension over the limit! [ 899.149774][T12825] netlink: 'syz.0.1839': attribute type 4 has an invalid length. [ 901.012218][T12825] lo speed is unknown, defaulting to 1000 [ 901.892129][T12846] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 903.418265][T12857] input: syz0 as /devices/virtual/input/input33 [ 905.476237][T12857] SET target dimension over the limit! [ 905.521991][T12851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1846'. [ 909.078591][T12889] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 917.013325][T12946] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 924.916483][T13008] input: syz0 as /devices/virtual/input/input34 [ 924.932612][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1884'. [ 924.975735][T13008] SET target dimension over the limit! [ 928.941781][T13032] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 931.658525][T13068] binder: 13059:13068 ioctl 400c620e 0 returned -14 [ 931.666173][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.691129][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.171769][T13083] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 936.204966][T13104] binder: 13102:13104 ioctl 400c620e 0 returned -14 [ 938.324850][T13116] binder: 13108:13116 ioctl 400c620e 0 returned -14 [ 939.576951][T13131] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 941.960798][T13146] binder: 13139:13146 ioctl 400c620e 0 returned -14 [ 943.657797][T13156] binder: 13150:13156 ioctl 400c620e 0 returned -14 [ 945.085026][T13178] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 952.302457][T13234] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 957.129858][T13271] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 958.454142][T13288] binder: 13287:13288 ioctl 400c620e 0 returned -14 [ 959.504901][T13304] binder: 13300:13304 ioctl 400c620e 0 returned -14 [ 960.329618][T13317] binder: 13315:13317 ioctl 400c620e 0 returned -14 [ 962.753807][T13341] binder: 13340:13341 ioctl 400c620e 0 returned -14 [ 962.773475][T13347] xt_ecn: cannot match TCP bits for non-tcp packets [ 964.201800][ T8] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 965.491045][ T8] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 966.551828][ T8] usb 1-1: config 0 has no interface number 0 [ 966.558086][ T8] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 966.568116][ T8] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 966.593840][ T8] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 966.603076][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.614691][ T8] usb 1-1: config 0 descriptor?? [ 966.628674][ T8] usb 1-1: can't set config #0, error -71 [ 966.643267][ T8] usb 1-1: USB disconnect, device number 40 [ 967.401475][T13371] binder: 13370:13371 ioctl 400c620e 0 returned -14 [ 967.746879][T13382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1981'. [ 968.174538][T13386] xt_ecn: cannot match TCP bits for non-tcp packets [ 968.383760][T13392] binder: 13391:13392 ioctl 400c620e 0 returned -14 [ 972.969325][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'. [ 973.053358][T13425] xt_ecn: cannot match TCP bits for non-tcp packets [ 973.333333][T13432] binder: 13431:13432 ioctl 400c620e 0 returned -14 [ 975.361317][T13442] binder: 13441:13442 ioctl 400c620e 0 returned -14 [ 976.502084][T13455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2003'. [ 977.159937][T13459] xt_ecn: cannot match TCP bits for non-tcp packets [ 977.324457][T13463] binder: 13461:13463 ioctl 400c620e 0 returned -14 [ 982.853522][T13498] binder: 13497:13498 ioctl 400c620e 0 returned -14 [ 983.132221][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 983.453913][T13505] xt_ecn: cannot match TCP bits for non-tcp packets [ 984.680728][T13518] binder: 13512:13518 ioctl 400c620e 0 returned -14 [ 985.165151][T13525] input: syz0 as /devices/virtual/input/input35 [ 985.853143][T13531] SET target dimension over the limit! [ 985.874317][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2020'. [ 986.841490][T13545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2025'. [ 987.454743][T13549] binder: 13548:13549 ioctl 400c620e 0 returned -14 [ 987.605291][T13552] xt_ecn: cannot match TCP bits for non-tcp packets [ 989.030711][T13568] sd 0:0:1:0: PR command failed: 1026 [ 989.061855][T13568] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 989.068844][T13568] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 990.744309][T13587] input: syz0 as /devices/virtual/input/input36 [ 990.794662][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 990.836695][T13585] SET target dimension over the limit! [ 991.051241][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'. [ 992.632524][T13599] xt_ecn: cannot match TCP bits for non-tcp packets [ 993.077982][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.084442][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.134163][T13605] sd 0:0:1:0: PR command failed: 1026 [ 993.139583][T13605] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 993.242013][T13605] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 993.575225][T13615] binder: 13612:13615 ioctl 400c620e 0 returned -14 [ 996.993131][T13639] binder: 13637:13639 ioctl 400c620e 0 returned -14 [ 997.802766][T13648] xt_ecn: cannot match TCP bits for non-tcp packets [ 998.323543][T13651] sd 0:0:1:0: PR command failed: 1026 [ 998.339295][T13651] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 998.359522][T13651] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 998.441606][T13661] binder: 13656:13661 ioctl 400c620e 0 returned -14 [ 999.304461][T13662] input: syz0 as /devices/virtual/input/input37 [ 999.933007][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 1000.023192][T13662] SET target dimension over the limit! [ 1002.474902][T13691] binder: 13690:13691 ioctl 400c620e 0 returned -14 [ 1005.597069][T13720] input: syz0 as /devices/virtual/input/input38 [ 1005.633038][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 1005.684959][T13728] SET target dimension over the limit! [ 1008.111796][T13747] binder: 13746:13747 ioctl 400c620e 0 returned -14 [ 1008.272112][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1010.293145][T13782] binder: 13776:13782 ioctl 400c620e 0 returned -14 [ 1012.322328][T13821] Can't find ip_set type ha [ 1013.067979][T13834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 1015.695634][T13862] set match dimension is over the limit! [ 1017.292005][ T5899] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1017.538063][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.558572][ T5899] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.567641][ T5899] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1017.581851][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.611872][ T5899] usb 2-1: config 0 descriptor?? [ 1021.321940][T10108] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1021.424753][T13906] set match dimension is over the limit! [ 1021.463983][ T5804] usb 2-1: USB disconnect, device number 32 [ 1021.524335][T10108] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1021.582065][T10108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.608843][T10108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.627499][T10108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.654955][T10108] usb 3-1: config 0 descriptor?? [ 1021.663626][T10108] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1023.632350][T10108] usb 3-1: USB disconnect, device number 32 [ 1024.214520][T13932] xt_ecn: cannot match TCP bits for non-tcp packets [ 1028.578886][ T5804] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1029.377124][ T5804] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1029.399671][ T5804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.432070][ T5804] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1029.449772][ T5804] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1029.565944][T10108] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1029.623420][ T5804] usb 1-1: Manufacturer: syz [ 1030.089847][T10108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.090805][ T5804] usb 1-1: config 0 descriptor?? [ 1030.146892][T10108] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1030.186373][T10108] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1030.202029][T10108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.217048][T10108] usb 2-1: config 0 descriptor?? [ 1030.307569][ T5804] rc_core: IR keymap rc-hauppauge not found [ 1030.341907][ T5804] Registered IR keymap rc-empty [ 1030.362802][ T5804] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1030.459615][ T5804] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input39 [ 1030.490718][ T5804] usb 1-1: USB disconnect, device number 41 [ 1032.801974][ T5804] usb 2-1: USB disconnect, device number 33 [ 1033.514579][T13994] binder: 13993:13994 ioctl 400c620e 0 returned -14 [ 1036.002610][ T5841] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1036.397854][ T5841] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 1036.409626][ T5841] usb 1-1: config 0 has no interface number 0 [ 1036.607532][ T5841] usb 1-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1036.631895][ T5841] usb 1-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1037.128455][ T5841] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1037.177179][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.595809][ T5841] usb 1-1: config 0 descriptor?? [ 1037.623488][ T5841] usb 1-1: can't set config #0, error -71 [ 1037.630801][ T5841] usb 1-1: USB disconnect, device number 42 [ 1037.872971][T10108] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 1038.314831][T10108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.447787][T10108] usb 4-1: config 0 has no interfaces? [ 1038.464953][T10108] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1038.474567][T10108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.485308][T10108] usb 4-1: config 0 descriptor?? [ 1038.702637][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.715411][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.222151][ T5841] usb 4-1: USB disconnect, device number 28 [ 1043.721897][T14081] binder: 14077:14081 ioctl 400c620e 0 returned -14 [ 1046.155734][ T5899] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1046.692146][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 1046.713476][ T5899] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 1046.737369][ T5899] usb 1-1: config 2 has no interface number 0 [ 1046.755935][ T5899] usb 1-1: config 2 interface 88 has no altsetting 0 [ 1046.771313][ T5899] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1046.821991][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.990318][ T5899] usb 1-1: Product: syz [ 1047.004716][ T5899] usb 1-1: Manufacturer: syz [ 1047.020605][ T5899] usb 1-1: SerialNumber: syz [ 1047.322482][T14119] binder: 14117:14119 ioctl 400c620e 0 returned -14 [ 1047.641083][ T5899] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1047.676354][ T5899] asix: probe of 1-1:2.88 failed with error -71 [ 1047.688086][ T5899] usb 1-1: USB disconnect, device number 43 [ 1047.869952][T14124] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1047.970101][T14124] CIFS mount error: No usable UNC path provided in device string! [ 1047.970101][T14124] [ 1048.097337][T14124] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1052.393235][T14151] random: crng reseeded on system resumption [ 1053.340657][T14163] binder: 14159:14163 ioctl 400c620e 0 returned -14 [ 1054.411944][ T5841] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 1054.516945][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.523752][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.706639][ T5841] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1054.741553][ T5841] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1054.763433][ T5841] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1054.773283][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.008696][ T5841] usb 1-1: GET_CAPABILITIES returned 0 [ 1055.019133][ T5841] usbtmc 1-1:16.0: can't read capabilities [ 1057.807530][ T5899] usb 1-1: USB disconnect, device number 44 [ 1058.195299][T14202] binder: 14200:14202 ioctl 400c620e 0 returned -14 [ 1065.124552][T14264] xt_ecn: cannot match TCP bits for non-tcp packets [ 1066.602350][ T5765] Bluetooth: hci1: command 0x0406 tx timeout [ 1069.174906][T14296] binder: 14291:14296 ioctl 400c620e 0 returned -14 [ 1074.722094][ T5899] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1075.477503][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 1075.550069][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1075.646722][ T5899] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 1075.667147][ T5899] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.699335][ T5899] usb 2-1: config 4 has no interface number 0 [ 1075.743952][ T5899] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1075.791330][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.831786][ T5899] usb 2-1: Product: syz [ 1075.845781][ T5899] usb 2-1: Manufacturer: syz [ 1075.854771][ T5899] usb 2-1: SerialNumber: syz [ 1077.608404][T14370] binder: 14368:14370 ioctl 400c620e 0 returned -14 [ 1079.932996][T14376] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1081.167112][T14388] binder: 14382:14388 ioctl 400c620e 0 returned -14 [ 1081.339158][ T5899] usb 2-1: USB disconnect, device number 34 [ 1081.399254][T14390] binder: 14389:14390 ioctl c0306201 0 returned -14 [ 1082.591974][ T5899] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1083.382227][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 1083.398792][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.414950][ T5899] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1083.431329][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.477646][ T5899] usb 2-1: config 0 descriptor?? [ 1083.961876][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 1084.417805][ T5899] creative-sb0540 0003:041E:3100.0004: unknown main item tag 0x1 [ 1084.425797][ T5899] creative-sb0540 0003:041E:3100.0004: item fetching failed at offset 4/5 [ 1084.459957][ T5899] creative-sb0540 0003:041E:3100.0004: parse failed [ 1084.489625][ T5899] creative-sb0540: probe of 0003:041E:3100.0004 failed with error -22 [ 1084.647825][ T5899] usb 2-1: USB disconnect, device number 35 [ 1092.082609][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1092.301861][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1092.320552][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.353729][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.373628][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1092.410054][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.434876][ T8] usb 3-1: config 0 descriptor?? [ 1092.925571][ T8] kye 0003:0458:5016.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1093.382584][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.389326][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.407501][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.436052][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.451438][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.486425][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.501782][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.521788][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.528499][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.940537][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1093.999459][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.026211][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.042317][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.061942][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.069031][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.101963][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.129404][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.161892][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.180944][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.191058][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.221773][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1094.231004][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.362058][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.373599][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.380332][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.391988][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.399114][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.406240][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.421749][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.428464][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.452923][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.467361][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.490847][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.511764][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.527276][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.549037][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.565055][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.575262][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.584468][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.621791][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.632332][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.645674][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.671122][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.696036][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.711924][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.745433][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1095.963310][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.122995][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.230370][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.239321][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.261653][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.269199][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.279875][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.300291][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.334774][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.346238][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.353072][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.366862][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.380892][T14547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.391269][ T5841] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1096.401146][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.423227][T14547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.451983][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.458702][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.504398][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.519401][T14558] tmpfs: Bad value for 'mpol' [ 1096.543517][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.550242][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.559613][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.567603][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.577448][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.589520][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.601580][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.621276][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.628287][T14561] futex_wake_op: syz.0.2277 tries to shift op by 144; fix this program [ 1096.641844][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.656699][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.664665][ T5841] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1096.674171][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.680880][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.688182][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.696312][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.705874][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.712671][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.719384][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.728451][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.735971][ T5841] usb 2-1: config 0 descriptor?? [ 1096.750199][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.771095][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.779229][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.789779][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.909418][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.916630][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.923465][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.930690][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.937880][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.945750][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.952722][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.962910][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1096.969685][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.681396][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.688181][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.696924][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x1 [ 1097.706020][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.719361][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.733358][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.763028][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.770186][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.780175][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.787434][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.809449][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.821183][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.828997][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.844516][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.874685][ T5841] konepure 0003:1E7D:2DBE.0006: unknown main item tag 0x0 [ 1097.885074][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.951930][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1097.991329][ T5841] konepure 0003:1E7D:2DBE.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 1098.026626][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.596483][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.774221][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.781156][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.862590][ T5841] usb 2-1: USB disconnect, device number 36 [ 1098.881752][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.888486][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.955179][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1098.991934][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.101530][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.111488][T14572] fido_id[14572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1099.130015][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.209704][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.386273][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.420821][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.534893][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.631209][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.672366][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.679103][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.704028][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.720731][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.758687][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.795989][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.831954][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.838727][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.861978][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.881558][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.891952][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.911752][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.927123][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.941999][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1099.958105][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.262970][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.325185][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.448793][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.481816][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.520623][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.537719][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.566237][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.585725][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.609621][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.630156][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.650946][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.747044][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.822127][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.833860][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.841783][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.849091][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.856418][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.863597][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.870690][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.877599][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.885299][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.892212][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1100.899749][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.017891][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.046461][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.154963][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.217828][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.242210][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.258306][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.367276][ T8] kye 0003:0458:5016.0005: unknown main item tag 0x0 [ 1101.444083][ T8] kye 0003:0458:5016.0005: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1101.458523][ T8] kye 0003:0458:5016.0005: tablet-enabling feature report not found [ 1101.468306][ T8] kye 0003:0458:5016.0005: tablet enabling failed [ 1101.590507][ T8] usb 3-1: USB disconnect, device number 33 [ 1101.696507][T14612] @: renamed from vlan0 (while UP) [ 1101.791799][ T5899] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1102.181768][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 1102.913405][ T5899] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1102.922661][ T5899] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1102.931271][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1102.940379][ T5899] usb 2-1: config 1 has no interface number 0 [ 1102.946572][ T5899] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.959747][ T5899] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1102.972947][ T5899] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1102.982546][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.044111][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1103.279492][T14628] binder: 14623:14628 ioctl 400c620e 0 returned -14 [ 1103.728594][ T5899] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1104.274711][ T8] usb 2-1: USB disconnect, device number 37 [ 1104.313122][ T8] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1107.134235][T14664] syz.0.2308 (14664) used greatest stack depth: 17960 bytes left [ 1108.146853][ T5899] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1109.869126][T14676] binder: 14675:14676 ioctl 400c620e 0 returned -14 [ 1111.658408][T14690] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1111.666621][T14690] UDF-fs: Scanning with blocksize 512 failed [ 1111.781216][T14690] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1111.791723][T14690] UDF-fs: Scanning with blocksize 1024 failed [ 1111.845317][T14690] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1111.853015][T14690] UDF-fs: Scanning with blocksize 2048 failed [ 1111.865327][T14690] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1111.873674][T14690] UDF-fs: Scanning with blocksize 4096 failed [ 1113.131804][ T5899] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1115.033724][T14713] binder: 14707:14713 ioctl 400c620e 0 returned -14 [ 1115.163324][ T5899] usb 3-1: config 0 has no interfaces? [ 1115.237290][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1115.246857][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.255392][ T5899] usb 3-1: Product: syz [ 1115.262010][ T5899] usb 3-1: Manufacturer: syz [ 1115.269044][ T5899] usb 3-1: config 0 descriptor?? [ 1115.523706][ T8] usb 3-1: USB disconnect, device number 35 [ 1115.957549][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.964877][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.679471][T14787] kAFS: unable to lookup cell '' [ 1127.731880][T10108] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1127.994805][T14414] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1128.004125][T14414] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1128.013729][T14414] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1128.022417][T14414] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1128.030021][T14414] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1128.038739][T14414] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1128.046921][T10108] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1128.062061][T10108] usb 4-1: config 0 has no interface number 0 [ 1128.071650][T10108] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1128.081665][T10108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.093491][T10108] usb 4-1: Product: syz [ 1128.097673][T10108] usb 4-1: Manufacturer: syz [ 1128.117221][T10108] usb 4-1: SerialNumber: syz [ 1128.127824][T10108] usb 4-1: config 0 descriptor?? [ 1128.157097][T13806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.185803][T14846] lo speed is unknown, defaulting to 1000 [ 1128.285286][T13806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.366975][T10108] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1128.408718][T10108] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1128.462333][T10108] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1128.470489][T10108] usb 4-1: media controller created [ 1128.481002][T13806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.497000][T10108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1128.802302][T13806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.640843][T10108] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1129.750963][T14846] chnl_net:caif_netlink_parms(): no params data found [ 1130.127777][T14414] Bluetooth: hci1: command tx timeout [ 1130.374104][T13806] tipc: Left network mode [ 1130.426366][T14846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.433911][T14846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.441232][T14846] bridge_slave_0: entered allmulticast mode [ 1130.448931][T14846] bridge_slave_0: entered promiscuous mode [ 1130.497461][T14846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.506219][T14846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.511836][ T5899] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1130.516686][T14846] bridge_slave_1: entered allmulticast mode [ 1130.528924][T14846] bridge_slave_1: entered promiscuous mode [ 1130.614046][T14846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.667998][T14846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.721832][ T5899] usb 3-1: Using ep0 maxpacket: 32 [ 1130.729784][ T5899] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1130.762349][ T5899] usb 3-1: config 0 has no interface number 0 [ 1130.785007][ T5899] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1130.806972][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.851964][ T5899] usb 3-1: Product: syz [ 1130.856197][ T5899] usb 3-1: Manufacturer: syz [ 1130.860798][ T5899] usb 3-1: SerialNumber: syz [ 1130.904744][T14846] team0: Port device team_slave_0 added [ 1130.919655][ T5899] usb 3-1: config 0 descriptor?? [ 1130.926229][T14846] team0: Port device team_slave_1 added [ 1130.935997][T10108] usb 4-1: USB disconnect, device number 29 [ 1130.963487][ T5899] smsc95xx v2.0.0 [ 1130.968641][ T5899] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1130.993571][ T5899] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 1131.174478][T10108] usb 3-1: USB disconnect, device number 36 [ 1131.264292][T14846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.284691][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.383214][T14846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.790404][T14846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.831528][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.087795][T14846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.199901][T14414] Bluetooth: hci1: command tx timeout [ 1133.338670][T14846] hsr_slave_0: entered promiscuous mode [ 1133.355270][T14846] hsr_slave_1: entered promiscuous mode [ 1133.375496][T14846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1133.393713][T14846] Cannot create hsr debugfs directory [ 1133.428201][T14903] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1133.947698][T13806] bond0: (slave wlan1): Releasing backup interface [ 1134.297054][T14414] Bluetooth: hci1: command tx timeout [ 1134.796372][T13806] hsr_slave_0: left promiscuous mode [ 1134.816319][T13806] hsr_slave_1: left promiscuous mode [ 1134.830646][T13806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.850552][T13806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.860526][T13806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.884426][T13806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.029189][T13806] bridge_slave_1: left allmulticast mode [ 1135.065107][T13806] bridge_slave_1: left promiscuous mode [ 1135.072699][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.417211][T13806] bridge_slave_0: left allmulticast mode [ 1135.485710][T13806] bridge_slave_0: left promiscuous mode [ 1135.533323][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.783900][T13806] veth1_macvtap: left promiscuous mode [ 1135.791507][T13806] veth0_macvtap: left promiscuous mode [ 1135.801063][T13806] veth1_vlan: left promiscuous mode [ 1135.808046][T13806] veth0_vlan: left promiscuous mode [ 1136.352148][T14414] Bluetooth: hci1: command tx timeout [ 1136.676600][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 1136.723929][T13806] team0 (unregistering): Port device team_slave_1 removed [ 1136.768553][T13806] team0 (unregistering): Port device team_slave_0 removed [ 1136.808907][T13806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.852969][T13806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.331214][T13806] bond0 (unregistering): Released all slaves [ 1138.852575][T13806] IPVS: stop unused estimator thread 0... [ 1138.971996][T10108] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1139.163823][T10108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1139.192664][T10108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1139.252461][T10108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1139.261577][T10108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.294482][T14846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1139.383129][T14846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1139.472337][T14846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1139.514584][T14846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1140.245408][T10108] usb 3-1: usb_control_msg returned -32 [ 1140.251592][T10108] usbtmc 3-1:16.0: can't read capabilities [ 1140.445224][T14846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.474235][T14846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.499229][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.506441][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.538695][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.545909][T11030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.114663][T14846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.217164][T14846] veth0_vlan: entered promiscuous mode [ 1141.259096][T14846] veth1_vlan: entered promiscuous mode [ 1141.348844][T14846] veth0_macvtap: entered promiscuous mode [ 1141.364120][T14846] veth1_macvtap: entered promiscuous mode [ 1141.633286][T14846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.657503][T14846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.708006][T14846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.718899][T14846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.730927][T14846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.740976][ T8] usb 3-1: USB disconnect, device number 37 [ 1141.742836][T14846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.757768][T14846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.769076][T14846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1141.779723][T14846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.791929][T14846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.819229][T14846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.854519][T14846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.881848][T14846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.890747][T14846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.131900][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.142148][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.867802][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.922111][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.411877][T14872] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1143.604176][T14872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.637444][T14872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.660448][T14872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1143.825253][T14872] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1144.005269][T14872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.261987][T14872] usb 4-1: config 0 descriptor?? [ 1144.932608][T14872] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 1145.025468][T14872] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1145.408638][ T8] usb 4-1: USB disconnect, device number 30 [ 1145.417998][T15045] usb 4-1: string descriptor 0 read error: -19 [ 1146.048257][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1146.058596][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1146.871317][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1146.909780][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1147.086044][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1147.093739][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1148.134689][T15092] lo speed is unknown, defaulting to 1000 [ 1149.413830][ T5768] Bluetooth: hci2: command tx timeout [ 1149.517301][T15131] binder: 15130:15131 ioctl 400c620e 0 returned -14 [ 1150.639655][T15092] chnl_net:caif_netlink_parms(): no params data found [ 1151.471941][ T5768] Bluetooth: hci2: command tx timeout [ 1152.653062][T15092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.660155][T15092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.747896][T15092] bridge_slave_0: entered allmulticast mode [ 1152.770174][T15092] bridge_slave_0: entered promiscuous mode [ 1152.794724][T15092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.822264][T15092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.849708][T15092] bridge_slave_1: entered allmulticast mode [ 1152.881326][T15092] bridge_slave_1: entered promiscuous mode [ 1152.938142][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.956659][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1153.084132][T15092] team0: Port device team_slave_0 added [ 1153.094512][T15092] team0: Port device team_slave_1 added [ 1153.655149][ T5768] Bluetooth: hci2: command tx timeout [ 1154.773730][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.780713][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.806645][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.946139][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1154.958847][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.965989][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.702136][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.741823][ T5768] Bluetooth: hci2: command tx timeout [ 1156.605103][T15195] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2407'. [ 1156.633640][T15195] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1156.738008][T15092] hsr_slave_0: entered promiscuous mode [ 1156.776452][T15092] hsr_slave_1: entered promiscuous mode [ 1156.819366][T15092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1156.848080][T15092] Cannot create hsr debugfs directory [ 1158.201876][T10108] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1158.284505][T15092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.394229][T15092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.425685][T10108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.441361][T10108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1158.450678][T10108] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1158.459849][T10108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.483077][T10108] usb 1-1: config 0 descriptor?? [ 1158.544231][T15092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.507365][T15092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.565893][T15231] binder: 15230:15231 ioctl 400c620e 0 returned -14 [ 1160.773906][T15092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1160.788689][T15092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1161.776161][T15092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1161.821210][ T5841] usb 1-1: USB disconnect, device number 45 [ 1161.828474][T15092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1162.286441][T15092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.307585][T15092] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.361575][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.368771][T11030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.406516][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.413676][T11030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.838563][T15264] binder: 15262:15264 ioctl 400c620e 0 returned -14 [ 1163.905429][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.919745][T15267] fuse: Unknown parameter 'group_i00000000000000000000' [ 1164.001063][T15092] veth0_vlan: entered promiscuous mode [ 1164.035429][T15092] veth1_vlan: entered promiscuous mode [ 1164.563641][T15092] veth0_macvtap: entered promiscuous mode [ 1164.586123][T15092] veth1_macvtap: entered promiscuous mode [ 1164.613539][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.676393][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.707320][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.717853][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.731845][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1164.749614][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.766468][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.767862][T15277] xt_ecn: cannot match TCP bits for non-tcp packets [ 1164.786666][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.797476][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.808714][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.819518][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.830509][T15092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1164.851996][T15092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.874450][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.922870][T15092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.963441][T15092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.048483][T15092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.064178][T15092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.243984][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.273685][ T5848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.285213][ T5848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.312140][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.401885][T14642] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1165.654292][T14642] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.676774][T14642] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1165.700939][T14642] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1165.774215][T14642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.789565][T14642] usb 4-1: config 0 descriptor?? [ 1166.852941][T15299] binder: 15298:15299 ioctl 400c620e 0 returned -14 [ 1167.963871][T15310] xt_ecn: cannot match TCP bits for non-tcp packets [ 1168.248076][T10108] usb 4-1: USB disconnect, device number 31 [ 1168.912169][T15326] futex_wake_op: syz.0.2440 tries to shift op by 144; fix this program [ 1168.977568][T14414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1169.083068][T14414] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1169.098138][T14414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1169.120132][T14414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1169.254163][T14414] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1169.261579][T14414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1169.906639][T15334] binder: 15332:15334 ioctl 400c620e 0 returned -14 [ 1170.124237][T13806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.162589][T15327] lo speed is unknown, defaulting to 1000 [ 1170.201243][T15339] xt_ecn: cannot match TCP bits for non-tcp packets [ 1170.216052][T13806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.350509][T13806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.497958][T13806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.935084][T15327] chnl_net:caif_netlink_parms(): no params data found [ 1171.072707][T10108] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1171.138494][T13806] tipc: Left network mode [ 1171.317830][T14414] Bluetooth: hci4: command tx timeout [ 1171.330667][T10108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.380139][T10108] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.420531][T10108] usb 2-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1171.450377][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.457724][T10108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.498003][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.511994][T10108] usb 2-1: config 0 descriptor?? [ 1171.526197][T15327] bridge_slave_0: entered allmulticast mode [ 1171.542526][T15327] bridge_slave_0: entered promiscuous mode [ 1171.649378][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.666839][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.742022][T15327] bridge_slave_1: entered allmulticast mode [ 1171.758332][T15327] bridge_slave_1: entered promiscuous mode [ 1172.212473][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.388866][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.395407][T14414] Bluetooth: hci4: command tx timeout [ 1173.602132][T15327] team0: Port device team_slave_0 added [ 1173.761150][T15327] team0: Port device team_slave_1 added [ 1174.536639][T15327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.544363][ T5804] IPVS: starting estimator thread 0... [ 1174.590855][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.659134][T15327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.682144][T15402] IPVS: using max 21 ests per chain, 50400 per kthread [ 1174.788789][T15327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.822383][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1174.920975][T15327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.135043][ T5804] usb 2-1: USB disconnect, device number 38 [ 1175.267772][T15416] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1175.291931][T15416] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1175.303033][T13806] bond0: (slave wlan1): Releasing backup interface [ 1175.391609][T15327] hsr_slave_0: entered promiscuous mode [ 1175.412118][T15327] hsr_slave_1: entered promiscuous mode [ 1175.431783][T15327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1175.449578][T15327] Cannot create hsr debugfs directory [ 1175.473280][T14414] Bluetooth: hci4: command tx timeout [ 1176.679029][T13806] hsr_slave_0: left promiscuous mode [ 1176.692577][T13806] hsr_slave_1: left promiscuous mode [ 1176.698600][T13806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.721799][T13806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.742958][T13806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.757812][T13806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.775893][T13806] bridge_slave_1: left allmulticast mode [ 1176.781551][T13806] bridge_slave_1: left promiscuous mode [ 1176.797870][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.819793][T13806] bridge_slave_0: left allmulticast mode [ 1176.835419][T13806] bridge_slave_0: left promiscuous mode [ 1176.851712][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.924264][T13806] veth1_macvtap: left promiscuous mode [ 1176.943613][T13806] veth0_macvtap: left promiscuous mode [ 1176.949349][T13806] veth1_vlan: left promiscuous mode [ 1176.973457][T13806] veth0_vlan: left promiscuous mode [ 1177.411489][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.419722][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.561576][T14414] Bluetooth: hci4: command tx timeout [ 1178.225277][T13806] team0 (unregistering): Port device team_slave_1 removed [ 1178.268127][T13806] team0 (unregistering): Port device team_slave_0 removed [ 1178.308922][T13806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1178.355466][T13806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.391875][ T8] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1178.572117][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1178.581160][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1178.592500][ T8] usb 3-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.602978][ T8] usb 3-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 1178.615138][ T8] usb 3-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1178.624317][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.632663][ T8] usb 3-1: Product: syz [ 1178.636852][ T8] usb 3-1: Manufacturer: syz [ 1178.641467][ T8] usb 3-1: SerialNumber: syz [ 1178.935615][T13806] bond0 (unregistering): Released all slaves [ 1179.409315][T15450] netlink: 'syz.0.2464': attribute type 13 has an invalid length. [ 1181.130658][ T8] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1183.493521][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2469'. [ 1183.724419][ T8] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1183.741778][ T8] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1183.753507][T15284] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1184.387509][ T8] usb 3-1: USB disconnect, device number 38 [ 1184.406008][T15284] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1185.594525][T15487] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 1185.606917][T15487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2475'. [ 1185.696338][T15487] team0: Port device geneve0 added [ 1185.973772][T15497] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2476'. [ 1186.081589][T13806] IPVS: stop unused estimator thread 0... [ 1187.846247][T15518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'. [ 1187.885973][T15327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1188.059332][T15327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1188.090656][T15327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1188.106200][T15327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1189.088258][T15327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.156918][T15327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.220065][T13806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.227289][T13806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.275454][T13806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.283564][T13806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.286943][T15552] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1190.345307][T15561] binder: 15560:15561 ioctl 400c620e 0 returned -14 [ 1190.479976][T15551] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1190.480423][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2490'. [ 1190.561112][T15327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.763191][T15327] veth0_vlan: entered promiscuous mode [ 1190.807628][T15327] veth1_vlan: entered promiscuous mode [ 1191.874063][T15327] veth0_macvtap: entered promiscuous mode [ 1191.934645][T15327] veth1_macvtap: entered promiscuous mode [ 1192.024084][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.060009][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.113445][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.129447][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.139534][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1192.158368][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.179129][T15327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1192.199649][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.231853][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.259487][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.314201][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.354629][T15327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1192.373216][T15327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1192.394105][T15327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1192.416424][T15327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.443167][T15327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.459616][T15327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.491743][T15327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.710401][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.759006][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.780658][T13806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.824677][T13806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1193.253808][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1193.567731][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1193.621826][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.671592][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1193.701518][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.979409][ T9] usb 3-1: usb_control_msg returned -32 [ 1193.991843][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1195.037635][T15623] binder: 15622:15623 ioctl 400c620e 0 returned -14 [ 1196.010848][T14642] usb 3-1: USB disconnect, device number 39 [ 1198.458680][T15669] binder: 15668:15669 ioctl 400c620e 0 returned -14 [ 1198.849437][T13806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.398580][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1199.412062][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1199.733922][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1199.748911][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1199.757035][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1199.780808][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1200.350001][T13806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.756547][T13806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.069277][T15684] lo speed is unknown, defaulting to 1000 [ 1201.872672][T14414] Bluetooth: hci0: command tx timeout [ 1202.731218][T13806] tipc: Left network mode [ 1203.370782][T15684] chnl_net:caif_netlink_parms(): no params data found [ 1203.675483][T15769] Bluetooth: MGMT ver 1.22 [ 1203.991774][T14414] Bluetooth: hci0: command tx timeout [ 1205.107510][T15684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.157572][T15684] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.173818][T15684] bridge_slave_0: entered allmulticast mode [ 1205.196650][T15684] bridge_slave_0: entered promiscuous mode [ 1205.231076][T15684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.243549][T15684] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.252474][T15684] bridge_slave_1: entered allmulticast mode [ 1205.259546][T15684] bridge_slave_1: entered promiscuous mode [ 1205.309561][T15684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.371181][T15684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.102039][T14414] Bluetooth: hci0: command tx timeout [ 1206.175395][T15684] team0: Port device team_slave_0 added [ 1206.424650][T15684] team0: Port device team_slave_1 added [ 1206.641528][T13806] bond0: (slave wlan1): Releasing backup interface [ 1207.589955][T15684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.619143][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1207.852299][T15684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.115103][T14414] Bluetooth: hci0: command tx timeout [ 1208.278011][T15684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.330097][T15684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.413924][T15684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.495613][T13806] hsr_slave_0: left promiscuous mode [ 1208.511319][T13806] hsr_slave_1: left promiscuous mode [ 1208.526289][T13806] bridge_slave_1: left allmulticast mode [ 1208.543936][T13806] bridge_slave_1: left promiscuous mode [ 1208.549580][T13806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.573461][T13806] bridge_slave_0: left allmulticast mode [ 1208.579142][T13806] bridge_slave_0: left promiscuous mode [ 1208.594548][T13806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.803222][T13806] veth1_macvtap: left promiscuous mode [ 1208.808804][T13806] veth0_macvtap: left promiscuous mode [ 1208.844990][T13806] veth1_vlan: left promiscuous mode [ 1208.850359][T13806] veth0_vlan: left promiscuous mode [ 1211.495702][T15855] binder: 15851:15855 ioctl 400c620e 0 returned -14 [ 1211.843645][T13806] team0 (unregistering): Port device team_slave_1 removed [ 1211.964645][T13806] team0 (unregistering): Port device team_slave_0 removed [ 1212.092301][T13806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1212.203860][T13806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1213.254829][T13806] bond0 (unregistering): (slave team0): Releasing backup interface [ 1214.431236][T13806] bond0 (unregistering): Released all slaves [ 1214.824859][T15896] binder: 15893:15896 ioctl 400c620e 0 returned -14 [ 1217.961912][ T5899] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1218.066998][T15684] hsr_slave_0: entered promiscuous mode [ 1218.107357][T15925] binder: 15923:15925 ioctl 400c620e 0 returned -14 [ 1218.129713][T15684] hsr_slave_1: entered promiscuous mode [ 1218.232362][ T5899] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1218.323920][ T5899] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1218.412662][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1218.494571][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1218.571580][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1218.669249][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1218.735882][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1218.795667][ T5899] usb 3-1: Product: syz [ 1218.827581][ T5899] usb 3-1: Manufacturer: syz [ 1218.903034][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1218.913216][ T5899] cdc_wdm 3-1:1.0: skipping garbage [ 1218.923689][ T5899] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1218.972955][ T5899] cdc_wdm 3-1:1.0: Unknown control protocol [ 1218.999629][T15927] set match dimension is over the limit! [ 1219.155241][T12777] usb 3-1: USB disconnect, device number 40 [ 1219.460283][T13806] IPVS: stop unused estimator thread 0... [ 1220.657412][T14642] IPVS: starting estimator thread 0... [ 1220.891955][T15951] IPVS: using max 20 ests per chain, 48000 per kthread [ 1221.654392][T15969] binder: 15966:15969 ioctl 400c620e 0 returned -14 [ 1222.525150][T15684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1222.575612][T15684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1222.593125][T15684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1222.686222][T15684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1222.715530][T15976] siw: device registration error -23 [ 1223.259933][T15990] mmap: syz.2.2565 (15990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1223.312261][T15992] input: syz1 as /devices/virtual/input/input42 [ 1223.466584][T15684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.547807][T15684] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.945991][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.953116][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.987043][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.994161][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.438480][T16011] netlink: 'syz.0.2569': attribute type 8 has an invalid length. [ 1224.475490][T16011] autofs4:pid:16011:autofs_fill_super: called with bogus options [ 1225.112126][ T5899] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1225.324451][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.372057][ T5899] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1225.399646][T16020] binder: 16018:16020 ioctl 400c620e 0 returned -14 [ 1225.469355][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.593265][ T5899] usb 4-1: config 0 descriptor?? [ 1225.768532][T15684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.811002][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 1226.310460][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1226.324492][T15684] veth0_vlan: entered promiscuous mode [ 1226.372594][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 1226.427779][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1226.487752][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 1226.514415][T15684] veth1_vlan: entered promiscuous mode [ 1226.781898][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 1226.783556][T16041] siw: device registration error -23 [ 1226.798769][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 1227.170335][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 1227.247437][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 1227.263965][ T5899] pwc: recv_control_msg error -32 req 02 val 2500 [ 1227.272340][ T5899] pwc: recv_control_msg error -32 req 02 val 2400 [ 1227.302401][ T5899] pwc: recv_control_msg error -32 req 02 val 2600 [ 1227.339340][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 1227.356719][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 1227.366599][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 1227.374749][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 1227.394414][ T5899] pwc: Registered as video103. [ 1227.415090][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 1227.464749][T15684] veth0_macvtap: entered promiscuous mode [ 1227.471080][ T5899] usb 4-1: USB disconnect, device number 32 [ 1227.528733][T15684] veth1_macvtap: entered promiscuous mode [ 1227.786203][T16053] tmpfs: Bad value for 'mpol' [ 1231.031378][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.094933][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.118732][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.130808][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.140888][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.169085][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.207439][T16067] binder: 16064:16067 ioctl 400c620e 0 returned -14 [ 1231.991023][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.017018][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.030084][T15684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.045568][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.060995][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.101770][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.151823][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.173123][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.186886][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.197311][T15684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.210361][T15684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.393564][T15684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.676609][T15684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.688103][T15684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.697690][T15684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.710519][T15684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.057153][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.076597][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.175305][T13806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.184044][T13806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.491864][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1233.693530][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1234.223162][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.235131][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.309024][ T8] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1234.318263][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.328561][T16095] futex_wake_op: syz.2.2586 tries to shift op by 144; fix this program [ 1234.362817][ T8] usb 4-1: config 0 descriptor?? [ 1234.587064][T16099] binder: 16098:16099 ioctl 400c620e 0 returned -14 [ 1234.805167][ T8] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 1235.008613][ T8] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 1235.030949][ T8] ft260: probe of 0003:0403:6030.0008 failed with error -5 [ 1235.144605][T16103] binder: 16101:16103 ioctl 400c620e 0 returned -14 [ 1236.290421][T16022] usb 4-1: USB disconnect, device number 33 [ 1237.063317][T16122] input: syz1 as /devices/virtual/input/input44 [ 1237.142843][T16122] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2593'. [ 1237.649943][T16133] binder: 16132:16133 ioctl 400c620e 0 returned -14 [ 1237.928908][T16138] binder: 16135:16138 ioctl 400c620e 0 returned -14 [ 1238.860616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.869266][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.030615][T16151] Cannot find set identified by id 0 to match [ 1241.278606][T16151] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1243.360650][T16169] netlink: 'syz.0.2608': attribute type 8 has an invalid length. [ 1243.531946][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1244.065491][T16172] binder: 16170:16172 ioctl 400c620e 0 returned -14 [ 1244.162013][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 1244.205198][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1244.249765][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1244.338791][T16176] binder: 16174:16176 ioctl 400c620e 0 returned -14 [ 1245.162970][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1245.182101][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1245.241790][ T9] usb 2-1: Product: syz [ 1245.245985][ T9] usb 2-1: Manufacturer: syz [ 1245.250593][ T9] usb 2-1: SerialNumber: syz [ 1245.459339][ T9] usb 2-1: config 0 descriptor?? [ 1247.137856][ T9] usb 2-1: can't set config #0, error -71 [ 1247.153225][ T9] usb 2-1: USB disconnect, device number 39 [ 1247.948079][T16209] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 1248.465892][T16213] binder: 16210:16213 ioctl 400c620e 0 returned -14 [ 1248.552004][T16216] binder: 16211:16216 ioctl 400c620e 0 returned -14 [ 1249.075053][T15284] ------------[ cut here ]------------ [ 1249.080698][T15284] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 1249.291911][T15284] WARNING: CPU: 0 PID: 15284 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 1249.301348][T15284] Modules linked in: [ 1249.305316][T15284] CPU: 0 PID: 15284 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1249.313927][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.324141][T15284] Workqueue: events request_firmware_work_func [ 1249.330592][T15284] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1249.336473][T15284] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 3a cc c9 ff 49 8b 17 48 c7 c7 00 a9 ba 8a 48 89 de e8 68 da 3c ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 22 5e 72 ff [ 1249.356283][T15284] RSP: 0018:ffffc90003b67800 EFLAGS: 00010246 [ 1249.362429][T15284] RAX: c1c82a6a3f208b00 RBX: ffffffff8b215360 RCX: ffff888027a93c00 [ 1249.370416][T15284] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1249.378501][T15284] RBP: dffffc0000000000 R08: ffffc90003b67407 R09: 1ffff9200076ce80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1249.386567][T15284] R10: dffffc0000000000 R11: fffff5200076ce81 R12: 1ffffffff1642a70 [ 1249.394607][T15284] R13: 0000000000000001 R14: ffff8880627ccba0 R15: ffff88801a2d0008 [ 1249.402666][T15284] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1249.412198][T15284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1249.418802][T15284] CR2: 0000200000007000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1249.427631][T15284] Call Trace: [ 1249.430928][T15284] [ 1249.433920][T15284] ? sysfs_unmerge_group+0x10d/0x130 [ 1249.439548][T15284] device_del+0x251/0x900 [ 1249.444028][T15284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1249.449946][T15284] ? kill_device+0x160/0x160 [ 1249.454584][T15284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1249.460492][T15284] ? _raw_spin_unlock+0x40/0x40 [ 1249.465419][T15284] ? complete_all+0x2d/0x1d0 [ 1249.470020][T15284] ? __fw_load_abort+0x8b/0x1a0 [ 1249.475139][T15284] firmware_fallback_sysfs+0x682/0x940 [ 1249.480633][T15284] _request_firmware+0xed9/0x1510 [ 1249.485853][T15284] ? request_firmware+0x50/0x50 [ 1249.490730][T15284] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1249.496793][T15284] ? read_lock_is_recursive+0x20/0x20 [ 1249.502219][T15284] request_firmware_work_func+0xb0/0x1b0 [ 1249.507877][T15284] ? process_scheduled_works+0x957/0x15b0 [ 1249.514205][T15284] process_scheduled_works+0xa45/0x15b0 [ 1249.519809][T15284] ? assign_work+0x400/0x400 [ 1249.524597][T15284] ? assign_work+0x39e/0x400 [ 1249.529262][T15284] worker_thread+0xa55/0xfc0 [ 1249.533928][T15284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1249.539839][T15284] ? _raw_spin_unlock+0x40/0x40 [ 1249.544839][T15284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1249.550776][T15284] kthread+0x2fa/0x390 [ 1249.554911][T15284] ? pr_cont_work+0x560/0x560 [ 1249.559613][T15284] ? kthread_blkcg+0xd0/0xd0 [ 1249.564249][T15284] ret_from_fork+0x48/0x80 [ 1249.568678][T15284] ? kthread_blkcg+0xd0/0xd0 [ 1249.573342][T15284] ret_from_fork_asm+0x11/0x20 [ 1249.578137][T15284] [ 1249.581165][T15284] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1249.588444][T15284] CPU: 0 PID: 15284 Comm: kworker/0:3 Not tainted syzkaller #0 [ 1249.595992][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1249.606049][T15284] Workqueue: events request_firmware_work_func [ 1249.612213][T15284] Call Trace: [ 1249.615498][T15284] [ 1249.618431][T15284] dump_stack_lvl+0x16c/0x230 [ 1249.623130][T15284] ? show_regs_print_info+0x20/0x20 [ 1249.628345][T15284] ? load_image+0x3b0/0x3b0 [ 1249.632878][T15284] panic+0x2c0/0x710 [ 1249.636778][T15284] ? bpf_jit_dump+0xd0/0xd0 [ 1249.641274][T15284] ? ret_from_fork_asm+0x11/0x20 [ 1249.646204][T15284] __warn+0x2e0/0x470 [ 1249.650172][T15284] ? sysfs_remove_group+0x178/0x2a0 [ 1249.655372][T15284] ? sysfs_remove_group+0x178/0x2a0 [ 1249.660552][T15284] report_bug+0x2be/0x4f0 [ 1249.664865][T15284] ? sysfs_remove_group+0x178/0x2a0 [ 1249.670045][T15284] ? sysfs_remove_group+0x178/0x2a0 [ 1249.675235][T15284] ? sysfs_remove_group+0x17a/0x2a0 [ 1249.680417][T15284] handle_bug+0xcf/0x120 [ 1249.684657][T15284] exc_invalid_op+0x1a/0x50 [ 1249.689145][T15284] asm_exc_invalid_op+0x1a/0x20 [ 1249.693984][T15284] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 1249.699774][T15284] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 3a cc c9 ff 49 8b 17 48 c7 c7 00 a9 ba 8a 48 89 de e8 68 da 3c ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 22 5e 72 ff [ 1249.719383][T15284] RSP: 0018:ffffc90003b67800 EFLAGS: 00010246 [ 1249.725452][T15284] RAX: c1c82a6a3f208b00 RBX: ffffffff8b215360 RCX: ffff888027a93c00 [ 1249.733410][T15284] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1249.741367][T15284] RBP: dffffc0000000000 R08: ffffc90003b67407 R09: 1ffff9200076ce80 [ 1249.749322][T15284] R10: dffffc0000000000 R11: fffff5200076ce81 R12: 1ffffffff1642a70 [ 1249.757278][T15284] R13: 0000000000000001 R14: ffff8880627ccba0 R15: ffff88801a2d0008 [ 1249.765247][T15284] ? sysfs_unmerge_group+0x10d/0x130 [ 1249.770516][T15284] device_del+0x251/0x900 [ 1249.774843][T15284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1249.780723][T15284] ? kill_device+0x160/0x160 [ 1249.785300][T15284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1249.791179][T15284] ? _raw_spin_unlock+0x40/0x40 [ 1249.796014][T15284] ? complete_all+0x2d/0x1d0 [ 1249.800587][T15284] ? __fw_load_abort+0x8b/0x1a0 [ 1249.805423][T15284] firmware_fallback_sysfs+0x682/0x940 [ 1249.810871][T15284] _request_firmware+0xed9/0x1510 [ 1249.815900][T15284] ? request_firmware+0x50/0x50 [ 1249.820778][T15284] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1249.826747][T15284] ? read_lock_is_recursive+0x20/0x20 [ 1249.832110][T15284] request_firmware_work_func+0xb0/0x1b0 [ 1249.837750][T15284] ? process_scheduled_works+0x957/0x15b0 [ 1249.843466][T15284] process_scheduled_works+0xa45/0x15b0 [ 1249.849020][T15284] ? assign_work+0x400/0x400 [ 1249.853605][T15284] ? assign_work+0x39e/0x400 [ 1249.858187][T15284] worker_thread+0xa55/0xfc0 [ 1249.862767][T15284] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1249.868663][T15284] ? _raw_spin_unlock+0x40/0x40 [ 1249.873504][T15284] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1249.879398][T15284] kthread+0x2fa/0x390 [ 1249.883454][T15284] ? pr_cont_work+0x560/0x560 [ 1249.888119][T15284] ? kthread_blkcg+0xd0/0xd0 [ 1249.892696][T15284] ret_from_fork+0x48/0x80 [ 1249.897107][T15284] ? kthread_blkcg+0xd0/0xd0 [ 1249.901691][T15284] ret_from_fork_asm+0x11/0x20 [ 1249.906452][T15284] [ 1249.909671][T15284] Kernel Offset: disabled [ 1249.914058][T15284] Rebooting in 86400 seconds..