last executing test programs: 17m9.374622352s ago: executing program 0 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000600)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000680)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000740), 0x4) 17m9.180797332s ago: executing program 0 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x70bd23, 0x21dfdbec, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}}, 0xc874) 17m8.264126976s ago: executing program 0 (id=60): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400000200fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="43a00000000000001c0012800900010069706970000000000c0002800800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4054) 17m6.737040072s ago: executing program 0 (id=64): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8080003, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d40)='ns/net\x00') bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mknod(&(0x7f0000000d80)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./tracing\x00', &(0x7f0000000e40)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000f00)='./tracing/uprobe_events\x00', 0x120) semctl$IPC_RMID(0x0, 0x0, 0x0) 17m5.734705925s ago: executing program 0 (id=67): setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x4}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x161) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x3, &(0x7f0000000600)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) unshare(0x60040000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000500)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x40814}, 0xc080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./debug\x00', 0x8000, 0xc0) getdents(r1, &(0x7f0000000180)=""/184, 0xb8) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x43}, 0x10) mknodat(r1, &(0x7f0000000240)='./sys\x00', 0x8000, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='Y', 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000640)={0x0, 0x0, 0x1}, 0x8) 17m3.52232368s ago: executing program 0 (id=73): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 16m47.064021583s ago: executing program 32 (id=73): socket$inet6_sctp(0xa, 0x5, 0x84) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x8382, 0x0) socket(0xa, 0x3, 0x3a) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 15m20.691405734s ago: executing program 3 (id=271): write(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001740)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001780)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffd, 0x10000b, 0x0, 0x5, 0x4007e, 0x3, 0x20000003, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, 0x0) 15m13.306987249s ago: executing program 3 (id=288): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r2 = timerfd_create(0x8, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) ftruncate(r2, 0x7) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000000000", 0x15) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000030a01010000000000000000000000002c000000200a05000000000000000000070000010900010073797a30000000000c0005"], 0x392c}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r5, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x0, 0x2c, 0x11, 0x2}], 0x10, 0xffffffff}, 0x94) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/dynamic_debug/control\x00', 0x1, 0x0) write(r7, &(0x7f00000006c0)='file device_pm.c +p\n', 0x14) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000240)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 15m10.667065659s ago: executing program 3 (id=291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8080003, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000c00)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000cc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d00)=0x6) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mknod(&(0x7f0000000d80)='./file0\x00', 0x20, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./tracing\x00', &(0x7f0000000e40)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, 0x0, 0x0) creat(&(0x7f0000000f00)='./tracing/uprobe_events\x00', 0x120) semctl$IPC_RMID(0x0, 0x0, 0x0) 15m9.67317807s ago: executing program 3 (id=292): symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file1\x00') symlink(&(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000480)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file1\x00', 0x200) 15m9.565221981s ago: executing program 3 (id=293): syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0) mkdir(&(0x7f00000000c0)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='mnt\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='mnt/ttyUSB0\x00', 0x181102, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000300)={0x3, 0x7, 0xfffffffe, 0xde9a, 0x8, "020000006800006dce8d052b7ff20000f5ff00", 0x6, 0x1ff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@local, 0x1}) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x191080, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x1f) 15m7.735257798s ago: executing program 3 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x6, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x1, 0x2, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) write(r2, &(0x7f0000000380)="b01268276d8f3f1b0e943894e8969b4829b968e0fc23e8af13d1934dff687da9486eb3bf8e514f885d523a33a4e2ebef423a3b66edd2b7e1e5ba47885ca48e2610be69f2c71b435c2f2b73", 0x4b) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 14m52.640067981s ago: executing program 33 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x6, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x1, 0x2, r3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x605, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) write(r2, &(0x7f0000000380)="b01268276d8f3f1b0e943894e8969b4829b968e0fc23e8af13d1934dff687da9486eb3bf8e514f885d523a33a4e2ebef423a3b66edd2b7e1e5ba47885ca48e2610be69f2c71b435c2f2b73", 0x4b) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x605, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x4c}}, 0x0) 24.992892136s ago: executing program 5 (id=2763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000003040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) close(0x3) unshare(0x20000400) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={@tcp6=r2, r0}) 24.703031236s ago: executing program 5 (id=2764): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4}, 0x50) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003020000102505a1a440000102030109026200"], 0x0) syz_usb_disconnect(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000600)={0x38, 0x0, 0x10000006, 0x1, 0x0, 0xb44, 0x4, 0x0, 0x9, 0x3}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000640)={r2, 0x0, 0x606000, &(0x7f0000000680)={@_ha_fsid={[0x1, 0xfffffff5]}, {0x1, 0x974, 0x6}}, 0x5, &(0x7f00000006c0), &(0x7f0000000700)=0xf}) openat(r4, &(0x7f0000000740)='./file0\x00', 0x40400, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1183}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d040}, 0x4048014) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060088470000100015007f0000017f00000191004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r6 = msgget(0x1, 0x53) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)=[{0x0}, {&(0x7f00000019c0)}], 0x2}, 0x3) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000001a00)=""/39) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000480), 0x12) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r10, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x8, 0x0, 0x0}}, 0x10) 23.158647353s ago: executing program 5 (id=2766): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db287"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)={0x40, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) 21.842062348s ago: executing program 5 (id=2768): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001400000405cd0f9fbc643b000300000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}]}, &(0x7f0000000100)=0xc) epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) eventfd(0x7) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x2, 0x0, 0x2, 0x39, 0x8, 0x4}, 0x9c) 8.781106572s ago: executing program 4 (id=2783): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x4048040) 8.634006268s ago: executing program 4 (id=2785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x2, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x2, 0x6, 0x650, 0xd0, 0x498, 0x1e0, 0x498, 0x0, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0x1, 0x10, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x5, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000e00)=0x85) syz_open_dev$usbfs(&(0x7f0000000bc0), 0x77, 0x101301) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$unix(0x1, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f01000000000000000000062402000000090401"], 0x0) 6.491377946s ago: executing program 4 (id=2791): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000003500)={0x10, 0xfffffffffffffffe, r4}, 0x66) splice(r1, 0x0, r0, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000002c0)=0x2e8d, 0x6) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xd) r7 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201002) creat(&(0x7f00000000c0)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x62, 0x5, 0x3b0, 0x270, 0x188, 0xffffffff, 0x270, 0x188, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@pkttype={{0x28}, {0x9, 0xffffffff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1e, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv4=@multicast1, @icmp_id=0x64, @port=0x4e22}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x263, 0xcc0}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @gre_key=0xff, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) memfd_create(0x0, 0x8) creat(&(0x7f0000000540)='./bus\x00', 0x0) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) 6.091793417s ago: executing program 1 (id=2792): open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd85, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) signalfd4(r2, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 6.088573018s ago: executing program 4 (id=2793): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001600)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000001640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001680)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002e80)=ANY=[@ANYBLOB="02017d29012918050e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e21082b1a3d206"], 0xdd12}], 0x1}, 0x20000400) 5.760608771s ago: executing program 4 (id=2794): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) r1 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x595f, 0x10000, 0x0, 0x2d8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5.755674772s ago: executing program 1 (id=2795): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x808000, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000002140)={&(0x7f0000001580)={0x50, 0x0, 0x1, {0x7, 0x29, 0xffff4ff1, 0x508101, 0xc0f7, 0x2, 0x8, 0xa7fff, 0x0, 0x0, 0x80, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x7, {0x7, 0xf1, 0x0, {0x4, 0xfffffffffffffff4, 0xd, 0x7ff, 0x100, 0x100000000, 0x2, 0xfffffffe, 0x10, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) 5.384063239s ago: executing program 2 (id=2796): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x2) syz_io_uring_setup(0x3b8c, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x80000) fcntl$dupfd(r1, 0x406, r0) epoll_create1(0x0) memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0xb) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x6}, r4, 0x8001}}, 0x44) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5.125557236s ago: executing program 2 (id=2797): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x275a, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x101c00, 0x0) ftruncate(r0, 0x46) set_mempolicy(0x1, &(0x7f0000000480)=0xff, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200900, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x40010, r0, 0xc9751000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x70d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)={'full'}, 0xfffffdef) prlimit64(0x0, 0xa, &(0x7f0000000580)={0x4, 0xb9f}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000001, 0xfffffffffffffff6, &(0x7f00000005c0)=0x1) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000680)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={0x0, 0x2, 0x4000000000000005, 0x7, 0x101}, 0x4}, 0x20, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f00000006c0)={0x8, 0x0, [{0x7, 0x6, 0x4, 0x9, 0x4, 0x390, 0x3}, {0x80000001, 0x40, 0x2, 0x6, 0x5f8e, 0xeed, 0x5}, {0x80000007, 0xd40f, 0x4, 0x7, 0x3, 0x2, 0x9}, {0x80000000, 0x4, 0x2, 0x1, 0x1, 0xbd, 0xbb0}, {0x40000000, 0x1, 0xc, 0x8, 0x0, 0x6, 0x7fd}, {0x40000000, 0x1, 0x0, 0x7ff, 0x1fb5, 0xe, 0x400}, {0x7, 0x7ff, 0x2, 0x20e8c, 0x80008001, 0x2, 0x9}, {0x80000007, 0x71f82364, 0x1, 0x7, 0x1122, 0x1, 0x7f}]}) 5.043996824s ago: executing program 5 (id=2768): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001400000405cd0f9fbc643b000300000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}]}, &(0x7f0000000100)=0xc) epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) eventfd(0x7) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x2, 0x0, 0x2, 0x39, 0x8, 0x4}, 0x9c) 3.935123907s ago: executing program 5 (id=2798): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) close(0x3) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x1, 0xf9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xbc, 0x10, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.776156924s ago: executing program 1 (id=2799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x20280, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x23) 3.674970684s ago: executing program 2 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x5005}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f00000007c0)=@xdp={0x2c, 0xa888, r6, 0x3e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000880)="034086c9775b3401a00e685dd6872f43a193", 0x12}], 0x1}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000400)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)=[{&(0x7f0000000080)="1800000072006bcd9e3fe3dc6e0800a6070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000100)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r10, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) close(0x3) 3.457076176s ago: executing program 1 (id=2801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000070900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b0001006578746864720000240002800800014000000400080003400000007a08000440000000220500020089000000300001800c00010062697477697365002000028008000340000000020800014000000014080002400000000b040004800900010073797a30"], 0x104}}, 0x0) 3.347931187s ago: executing program 1 (id=2802): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000feb000/0x2000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fee000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)="0457f426cb8a89ca380b04ef7766b156701b60c51b379de013bb84c7f8", 0x1d}, 0x68) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "00c2eea900000052be01271ba3245500"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf32(r2, 0x0, 0x0) 3.22638764s ago: executing program 2 (id=2803): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x0, 0x2100) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 2.919923991s ago: executing program 1 (id=2804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x2703) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000400)={0x0, 0x1, 0x5, &(0x7f0000000440)={0x6, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x6, 0x5, 0x93, 0x1, 0x0, 0x5f, 0xb, 0x20, 0xa6, 0x2, 0x5, 0x9, 0xfffffffe}, {0xfffffffd, 0xfffa, 0x0, 0x4, 0xfa, 0xf6, 0xce, 0x8, 0x4, 0xff, 0x1, 0xa6, 0x800000000000000}, {0xffffff01, 0x35, 0x80, 0x0, 0x4, 0x1, 0x19, 0xe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000004}], 0x7f}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000580)=0x474c, 0x4) bind$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000000640), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x17, &(0x7f0000000680)=0x80, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f00000006c0)=0xfffffbf9, 0x4) recvmmsg(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/127, 0x7f}, 0x2}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x2e, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) 2.660418538s ago: executing program 4 (id=2805): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x6e, "", [{{0x9, 0x4, 0x0, 0xfd, 0x8d, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x9, 0x43}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200f280000002809f70ba381030000000000000000cb4fdca0560f9205bd07791e41fd540d54f365c5b1d43e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.283564338s ago: executing program 2 (id=2806): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001400000405cd0f9fbc643b000300000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}]}, &(0x7f0000000100)=0xc) epoll_create1(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) eventfd(0x7) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x2, 0x0, 0x2, 0x39, 0x8, 0x4}, 0x9c) 0s ago: executing program 2 (id=2807): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f00000014c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000003500)={0x10, 0xfffffffffffffffe, r4}, 0x66) splice(r1, 0x0, r0, 0x0, 0x10, 0x7) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000002c0)=0x2e8d, 0x6) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000340)=0xd) r7 = open(&(0x7f0000000380)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r6, r7, 0x0, 0x1000000201002) creat(&(0x7f00000000c0)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r9, 0x5407, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x62, 0x5, 0x3b0, 0x270, 0x188, 0xffffffff, 0x270, 0x188, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@pkttype={{0x28}, {0x9, 0xffffffff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1e, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv4=@multicast1, @icmp_id=0x64, @port=0x4e22}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x263, 0xcc0}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @gre_key=0xff, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) memfd_create(0x0, 0x8) creat(&(0x7f0000000540)='./bus\x00', 0x0) ioctl$TIOCMSET(r9, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) kernel console output (not intermixed with test programs): ndpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.252115][T12075] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1030.260235][T12075] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1030.270713][T12075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.282305][T12075] usb 6-1: config 0 descriptor?? [ 1030.621273][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 1030.643859][ T5907] usbhid: probe of 5-1:0.0 failed with error -71 [ 1030.655693][ T5907] usb 5-1: USB disconnect, device number 78 [ 1030.719830][T12075] usbhid 6-1:0.0: can't add hid device: -71 [ 1030.726005][T12075] usbhid: probe of 6-1:0.0 failed with error -71 [ 1030.743243][T12075] usb 6-1: USB disconnect, device number 72 [ 1030.871362][ T5936] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 1030.965199][ T23] gspca_spca1528: reg_w err -71 [ 1030.977527][ T23] spca1528: probe of 2-1:0.1 failed with error -71 [ 1030.988079][ T23] usb 2-1: USB disconnect, device number 81 [ 1031.047331][ T5936] usb 3-1: device descriptor read/64, error -71 [ 1031.331679][ T5936] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1031.487362][ T5936] usb 3-1: device descriptor read/64, error -71 [ 1031.620017][ T5936] usb usb3-port1: attempt power cycle [ 1031.632161][ T23] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1031.831134][ T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.849588][ T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.863360][ T23] usb 6-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 1031.875031][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1031.885255][ T23] usb 6-1: SerialNumber: syz [ 1032.047359][ T5936] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1032.089299][ T5936] usb 3-1: device descriptor read/8, error -71 [ 1032.110993][ T23] usb 6-1: 0:2 : does not exist [ 1032.128539][ T23] usb 6-1: USB disconnect, device number 73 [ 1032.172100][T14658] udevd[14658]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1032.282347][T15474] fuse: Bad value for 'fd' [ 1032.317486][T15475] comedi comedi3: board detection failed [ 1032.416443][T15477] bridge0: port 3(netdevsim0) entered blocking state [ 1032.424407][ T5936] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1032.433770][T15477] bridge0: port 3(netdevsim0) entered disabled state [ 1032.443877][T15477] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1032.654419][T15477] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1032.696748][T15477] bridge0: port 3(netdevsim0) entered blocking state [ 1032.703667][T15477] bridge0: port 3(netdevsim0) entered forwarding state [ 1032.776478][ T5936] usb 3-1: device descriptor read/8, error -71 [ 1034.377986][ T5936] usb usb3-port1: unable to enumerate USB device [ 1035.996322][T15489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2487'. [ 1036.126981][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2492'. [ 1036.535436][ T5907] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1037.182543][ T5907] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1037.218176][ T5907] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1037.263545][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1037.278528][T15510] fuse: Bad value for 'fd' [ 1037.295761][ T5907] usb 6-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1037.347985][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.388000][ T5907] usb 6-1: config 0 descriptor?? [ 1037.721629][T15518] comedi comedi3: board detection failed [ 1037.777907][T12075] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1037.846784][T15519] bridge0: port 3(netdevsim0) entered blocking state [ 1037.855022][T15519] bridge0: port 3(netdevsim0) entered disabled state [ 1037.864551][T15519] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1037.892665][T15519] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1037.938304][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 1037.944515][ T5907] usbhid: probe of 6-1:0.0 failed with error -71 [ 1038.087896][T12075] usb 3-1: Using ep0 maxpacket: 8 [ 1038.210275][T15519] bridge0: port 3(netdevsim0) entered blocking state [ 1038.217290][T15519] bridge0: port 3(netdevsim0) entered forwarding state [ 1038.458971][T12075] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.550082][T12075] usb 3-1: config 0 has no interfaces? [ 1038.681186][ T5907] usb 6-1: USB disconnect, device number 74 [ 1038.738527][T12075] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1038.754551][T12075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.799016][T12075] usb 3-1: Product: syz [ 1038.835488][T12075] usb 3-1: Manufacturer: syz [ 1038.843185][T12075] usb 3-1: SerialNumber: syz [ 1038.856223][T12075] usb 3-1: config 0 descriptor?? [ 1039.057564][T13853] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1039.207850][T12075] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1039.261768][T13853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.272286][T13853] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1039.285635][T13853] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1039.294862][T13853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.319440][T13853] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1039.392757][T12075] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.413668][T12075] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1039.425030][T12075] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1039.435138][T12075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.450747][T12075] usb 5-1: config 0 descriptor?? [ 1039.880797][T12075] usbhid 5-1:0.0: can't add hid device: -71 [ 1039.891203][T12075] usbhid: probe of 5-1:0.0 failed with error -71 [ 1039.908570][T12075] usb 5-1: USB disconnect, device number 79 [ 1039.952655][T15542] rxe_eth0 speed is unknown, defaulting to 1000 [ 1040.454165][T15551] fuse: Bad value for 'fd' [ 1040.777773][ T5907] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1040.987231][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 1040.995468][ T5907] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1041.003977][ T5907] usb 5-1: config 0 has no interface number 0 [ 1041.014242][ T5907] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1041.034857][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.052002][ T5907] usb 5-1: Product: syz [ 1041.056545][ T5907] usb 5-1: Manufacturer: syz [ 1041.065299][ T5907] usb 5-1: SerialNumber: syz [ 1041.076022][ T5907] usb 5-1: config 0 descriptor?? [ 1041.092384][ T5907] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1041.391226][T12075] usb 3-1: USB disconnect, device number 86 [ 1041.684035][T15565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2509'. [ 1041.803584][T15186] usb 2-1: USB disconnect, device number 82 [ 1041.900694][ T5907] gspca_spca1528: reg_w err -71 [ 1041.937271][ T5907] spca1528: probe of 5-1:0.1 failed with error -71 [ 1041.958783][ T5907] usb 5-1: USB disconnect, device number 80 [ 1042.027931][ T5948] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1042.220871][ T5948] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1042.264110][ T5948] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1042.278588][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1042.285287][ T5948] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1042.297818][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.313206][ T5948] usb 3-1: config 0 descriptor?? [ 1042.779945][ T5948] usbhid 3-1:0.0: can't add hid device: -71 [ 1042.838881][ T5948] usbhid: probe of 3-1:0.0 failed with error -71 [ 1042.868693][ T5948] usb 3-1: USB disconnect, device number 87 [ 1042.887843][T15186] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1043.017387][ T5949] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1043.082110][T15186] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1043.092243][T15186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.101501][T15186] usb 5-1: Product: syz [ 1043.105737][T15186] usb 5-1: Manufacturer: syz [ 1043.111878][T15186] usb 5-1: SerialNumber: syz [ 1043.212566][ T5949] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.224227][ T5949] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1043.231916][ T5949] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1043.241670][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.257962][ T5949] usb 6-1: config 0 descriptor?? [ 1043.297424][ T5907] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1043.492697][ T5907] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.503663][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1043.517251][ T5907] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1043.526354][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.540564][ T5907] usb 2-1: config 0 descriptor?? [ 1043.546298][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1043.564172][ T5907] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1043.686770][ T5949] usbhid 6-1:0.0: can't add hid device: -71 [ 1043.701666][ T5949] usbhid: probe of 6-1:0.0 failed with error -71 [ 1043.714254][ T5949] usb 6-1: USB disconnect, device number 75 [ 1044.284965][ T5949] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1044.467765][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 1044.475965][ T5949] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.486999][ T5949] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 1044.501653][ T5949] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1044.511237][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.521429][ T5949] usb 3-1: Product: syz [ 1044.525676][ T5949] usb 3-1: Manufacturer: syz [ 1044.532748][ T5949] usb 3-1: SerialNumber: syz [ 1044.541219][ T5949] usb 3-1: config 0 descriptor?? [ 1045.398788][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1045.416892][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1045.431775][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1045.445484][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1045.458534][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1045.471659][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1045.485498][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1045.499016][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1045.511973][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1045.524448][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1045.534557][T15186] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1045.549382][T15186] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1045.562625][T15186] usb 5-1: USB disconnect, device number 81 [ 1046.043797][ T5884] usb 2-1: USB disconnect, device number 83 [ 1046.131138][T15615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2523'. [ 1046.148002][T15617] comedi comedi3: board detection failed [ 1046.971851][T15186] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1047.149727][ T5948] usb 3-1: USB disconnect, device number 88 [ 1047.265296][T15186] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1047.306320][T15186] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1047.339493][T15186] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1047.376945][T15186] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1047.404665][T15186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.424850][T15186] usb 5-1: config 0 descriptor?? [ 1047.647289][ T5884] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1047.757796][ T5948] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1047.838444][ T5884] usb 6-1: Using ep0 maxpacket: 16 [ 1047.847765][T15186] usbhid 5-1:0.0: can't add hid device: -71 [ 1047.858051][T15186] usbhid: probe of 5-1:0.0 failed with error -71 [ 1047.885913][T15186] usb 5-1: USB disconnect, device number 82 [ 1047.908377][ T5948] usb 2-1: device descriptor read/64, error -71 [ 1048.073096][T15624] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2525'. [ 1048.147977][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1048.173628][ T5884] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1048.182229][ T5884] usb 6-1: can't read configurations, error -71 [ 1048.198543][ T5948] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1048.377905][ T5948] usb 2-1: device descriptor read/64, error -71 [ 1048.498068][ T5948] usb usb2-port1: attempt power cycle [ 1048.580226][ T5907] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1048.809466][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.870123][ T5907] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1048.889303][ T7191] cgroup: fork rejected by pids controller in /syz5 [ 1048.896867][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1048.918080][ T5907] usb 3-1: Product: syz [ 1048.922344][ T5907] usb 3-1: Manufacturer: syz [ 1048.927885][ T5948] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1048.984070][ T5948] usb 2-1: device descriptor read/8, error -71 [ 1048.989950][ T5907] usb 3-1: selecting invalid altsetting 1 [ 1048.996240][ T5907] dvb_ttusb_budget: ttusb_init_controller: error [ 1049.003121][T13853] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1049.029823][ T5907] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1049.176292][ T5907] DVB: Unable to find symbol cx22700_attach() [ 1049.189456][T15635] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 1049.221540][T13853] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1049.261569][T13853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.279343][T13853] usb 5-1: Product: syz [ 1049.281178][ T5948] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1049.283572][T13853] usb 5-1: Manufacturer: syz [ 1049.338856][ T5948] usb 2-1: device descriptor read/8, error -71 [ 1049.347658][T13853] usb 5-1: SerialNumber: syz [ 1049.358034][ T5907] DVB: Unable to find symbol tda10046_attach() [ 1049.384876][ T5907] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1049.415959][ T5907] usb 3-1: USB disconnect, device number 89 [ 1049.478840][ T5948] usb usb2-port1: unable to enumerate USB device [ 1049.706217][ T71] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.795309][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1050.037682][ T71] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.330894][ T71] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.528272][ T71] bridge0: port 3(netdevsim0) entered disabled state [ 1050.654171][ T71] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1050.688870][ T71] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1050.707356][ T71] bridge0: port 3(netdevsim0) entered disabled state [ 1050.795376][ T71] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.838590][ T5936] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1051.051051][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1051.068440][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.087749][ T5936] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 1051.111845][ T5936] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1051.123342][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.136377][ T5936] usb 3-1: Product: syz [ 1051.141257][ T5936] usb 3-1: Manufacturer: syz [ 1051.146437][ T5936] usb 3-1: SerialNumber: syz [ 1051.179213][ T5936] usb 3-1: config 0 descriptor?? [ 1051.667744][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 1051.703506][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1051.733964][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1051.765533][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1051.789126][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1051.803067][T15203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1051.814454][T15203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1051.816032][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1051.834469][T15203] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1051.843210][T15203] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1051.846477][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1051.868423][T15203] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1051.879532][T15203] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.943819][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1051.997844][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1052.047584][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1052.094576][T13853] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1052.126610][T13853] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1052.202491][T13853] usb 5-1: USB disconnect, device number 83 [ 1052.282998][T15652] rxe_eth0 speed is unknown, defaulting to 1000 [ 1053.120198][T15677] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1053.537367][ T5948] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1053.732250][ T5948] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1053.775406][ T5948] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.854083][ T5948] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1053.865755][ T5948] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1053.896848][ T5949] usb 3-1: USB disconnect, device number 90 [ 1053.948997][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.991722][T15203] Bluetooth: hci0: command tx timeout [ 1054.105000][ T5948] usb 5-1: config 0 descriptor?? [ 1054.296954][T15652] chnl_net:caif_netlink_parms(): no params data found [ 1054.583746][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 1054.590130][ T5949] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1054.618845][ T5948] usbhid: probe of 5-1:0.0 failed with error -71 [ 1054.633150][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.713226][ T5948] usb 5-1: USB disconnect, device number 84 [ 1054.837560][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 1054.865406][ T5949] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1054.904612][ T5949] usb 3-1: config 0 has no interface number 0 [ 1054.912096][ T71] hsr_slave_0: left promiscuous mode [ 1054.926244][ T71] hsr_slave_1: left promiscuous mode [ 1054.933596][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.941541][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.950363][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.958307][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.986853][ T5949] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1055.017904][ T71] bridge_slave_1: left allmulticast mode [ 1055.024340][ T71] bridge_slave_1: left promiscuous mode [ 1055.047479][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.067606][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.101624][ T5949] usb 3-1: Product: syz [ 1055.105941][ T5949] usb 3-1: Manufacturer: syz [ 1055.110083][ T71] bridge_slave_0: left allmulticast mode [ 1055.116635][ T71] bridge_slave_0: left promiscuous mode [ 1055.138397][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.143190][ T5949] usb 3-1: SerialNumber: syz [ 1055.163933][ T5949] usb 3-1: config 0 descriptor?? [ 1055.194595][ T5949] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1055.316744][ T71] veth1_macvtap: left promiscuous mode [ 1055.347199][ T71] veth0_macvtap: left promiscuous mode [ 1055.357969][ T71] veth1_vlan: left promiscuous mode [ 1055.364332][ T71] veth0_vlan: left promiscuous mode [ 1056.000949][ T5949] gspca_spca1528: reg_w err -71 [ 1056.040245][ T5949] spca1528: probe of 3-1:0.1 failed with error -71 [ 1056.059117][T15203] Bluetooth: hci0: command tx timeout [ 1056.076285][ T5949] usb 3-1: USB disconnect, device number 91 [ 1057.936401][ T71] team0 (unregistering): Port device team_slave_1 removed [ 1058.035194][ T71] team0 (unregistering): Port device team_slave_0 removed [ 1058.106823][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.137610][T15203] Bluetooth: hci0: command tx timeout [ 1058.180608][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.337194][ T23] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1058.549959][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1058.558553][ T23] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1058.567799][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.578948][ T23] usb 5-1: config 0 descriptor?? [ 1058.604795][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1058.684690][ T71] bond0 (unregistering): Released all slaves [ 1058.817254][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 1058.919491][T15701] rxe_eth0 speed is unknown, defaulting to 1000 [ 1059.075377][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.102601][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.134701][T15652] bridge_slave_0: entered allmulticast mode [ 1059.185313][T15652] bridge_slave_0: entered promiscuous mode [ 1059.219575][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.226824][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.283464][T15652] bridge_slave_1: entered allmulticast mode [ 1059.309517][T15729] input: syz0 as /devices/virtual/input/input65 [ 1059.328078][T15652] bridge_slave_1: entered promiscuous mode [ 1059.525796][T15652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.547550][T15652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.689025][T15652] team0: Port device team_slave_0 added [ 1059.716147][T15652] team0: Port device team_slave_1 added [ 1059.943430][T15652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.967148][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.037351][T15652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.086553][T15652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.107980][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.195387][T15652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.217777][T15203] Bluetooth: hci0: command tx timeout [ 1060.307968][T15746] comedi comedi3: board detection failed [ 1060.510166][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.078022][T15748] bridge0: port 3(netdevsim0) entered blocking state [ 1061.086388][T15748] bridge0: port 3(netdevsim0) entered disabled state [ 1061.095062][T15748] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1061.269167][T15748] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1061.293050][T15748] bridge0: port 3(netdevsim0) entered blocking state [ 1061.299900][T15748] bridge0: port 3(netdevsim0) entered forwarding state [ 1061.423466][T15652] hsr_slave_0: entered promiscuous mode [ 1061.546318][T15652] hsr_slave_1: entered promiscuous mode [ 1061.548822][ T23] gspca_vc032x: reg_w err -71 [ 1061.556684][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.579355][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.584830][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.597386][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.602744][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.616874][T15652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.619953][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.634269][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.641262][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.646733][T15652] Cannot create hsr debugfs directory [ 1061.654758][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.671785][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.687561][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.695726][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.716338][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.725642][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.747466][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.777227][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.782611][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1061.819961][ T23] gspca_vc032x: Unknown sensor... [ 1061.825546][ T23] vc032x: probe of 5-1:0.0 failed with error -22 [ 1061.863579][ T23] usb 5-1: USB disconnect, device number 85 [ 1061.952563][T15760] rxe_eth0 speed is unknown, defaulting to 1000 [ 1062.921204][ T5948] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1063.027278][ T23] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1063.052838][T15652] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.074713][T15652] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.093382][T15652] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.124863][T15652] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1063.137224][ T5948] usb 2-1: Using ep0 maxpacket: 8 [ 1063.152472][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.183941][ T5948] usb 2-1: config 0 has no interfaces? [ 1063.198972][ T5948] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1063.217151][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.225304][ T5948] usb 2-1: Product: syz [ 1063.242927][ T5948] usb 2-1: Manufacturer: syz [ 1063.247665][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.247723][ T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1063.247750][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.315964][ T5948] usb 2-1: SerialNumber: syz [ 1063.362863][ T5948] usb 2-1: config 0 descriptor?? [ 1063.442667][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.490908][T15652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.525345][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.532632][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.548932][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.556192][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.096565][T15652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.222785][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 1064.709898][T15819] xt_bpf: check failed: parse error [ 1064.794370][T15652] veth0_vlan: entered promiscuous mode [ 1064.844249][T15652] veth1_vlan: entered promiscuous mode [ 1064.961834][T15652] veth0_macvtap: entered promiscuous mode [ 1064.991670][T15652] veth1_macvtap: entered promiscuous mode [ 1065.053415][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.077265][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.093401][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.106337][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.119936][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1065.132412][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.145865][T15652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1065.181420][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.223186][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.250863][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.274540][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.286429][T15652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1065.302999][T15652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.316744][T15652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.348951][T15652] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.362265][T15652] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.375154][T15652] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.403567][T15652] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.484516][T15834] rxe_eth0 speed is unknown, defaulting to 1000 [ 1065.528233][ T23] usb 2-1: USB disconnect, device number 88 [ 1065.799599][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.821983][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.930109][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1065.965488][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.098998][ T5948] usb 5-1: USB disconnect, device number 86 [ 1066.227282][ T23] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1067.396859][T15865] rxe_eth0 speed is unknown, defaulting to 1000 [ 1067.716284][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 1067.958424][ T5949] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1068.132631][T15884] xt_bpf: check failed: parse error [ 1068.163001][ T5949] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1068.205936][ T5949] usb 6-1: config 0 has no interface number 0 [ 1068.237187][ T5949] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1068.269413][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.317343][ T5949] usb 6-1: Product: syz [ 1068.321648][ T5949] usb 6-1: Manufacturer: syz [ 1068.350790][ T5949] usb 6-1: SerialNumber: syz [ 1068.403581][ T5949] usb 6-1: config 0 descriptor?? [ 1068.658782][ T5949] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1068.700833][ T5949] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1068.736250][ T5949] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1068.780776][ T5949] usb 6-1: media controller created [ 1068.849620][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.945995][ T5949] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1069.157574][ T5948] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1069.391797][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.456893][ T5948] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1069.530139][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.547421][ T5950] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1069.570107][ T5949] usb 6-1: USB disconnect, device number 78 [ 1069.988431][ T5907] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1070.197714][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 1070.226173][ T5907] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1070.257156][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.287213][ T5907] usb 2-1: config 0 descriptor?? [ 1070.313729][ T5907] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1070.367411][T15941] program syz.5.2580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.404354][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 1071.537399][ T5950] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1071.697210][ T5950] usb 3-1: device descriptor read/64, error -71 [ 1071.975079][ T5936] usb 5-1: USB disconnect, device number 87 [ 1071.987401][ T5950] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1072.151857][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.187524][ T5950] usb 3-1: device descriptor read/64, error -71 [ 1072.307478][ T5950] usb usb3-port1: attempt power cycle [ 1072.717222][ T5950] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1072.727724][ T23] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1072.748451][ T5950] usb 3-1: device descriptor read/8, error -71 [ 1072.760790][ T5907] gspca_vc032x: reg_w err -71 [ 1072.765739][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765756][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765768][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765779][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765789][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765800][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765811][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765823][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765834][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765844][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765855][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765865][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765875][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765887][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765897][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765908][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765919][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 1072.765930][ T5907] gspca_vc032x: Unknown sensor... [ 1072.766011][ T5907] vc032x: probe of 2-1:0.0 failed with error -22 [ 1072.778948][ T5907] usb 2-1: USB disconnect, device number 90 [ 1072.929825][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.947668][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.963126][ T23] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1072.972692][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.983800][ T23] usb 6-1: config 0 descriptor?? [ 1072.995451][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1073.017346][ T5950] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1073.068099][ T5950] usb 3-1: device descriptor read/8, error -71 [ 1073.188206][ T5950] usb usb3-port1: unable to enumerate USB device [ 1073.368438][ T5948] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1073.521341][T16007] input: syz0 as /devices/virtual/input/input67 [ 1073.567577][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 1073.583890][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.612749][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.637213][ T5948] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1073.646344][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.680137][ T5948] usb 5-1: config 0 descriptor?? [ 1074.100028][ T5948] usbhid 5-1:0.0: can't add hid device: -71 [ 1074.108624][ T5948] usbhid: probe of 5-1:0.0 failed with error -71 [ 1074.126102][ T5948] usb 5-1: USB disconnect, device number 88 [ 1074.367297][T16020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1074.374293][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1074.403986][T16020] vhci_hcd vhci_hcd.0: Device attached [ 1074.427227][T16021] vhci_hcd: connection closed [ 1074.433043][ T2982] vhci_hcd: stop threads [ 1074.460768][ T2982] vhci_hcd: release socket [ 1074.465342][ T2982] vhci_hcd: disconnect device [ 1074.767556][ T5949] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1074.981070][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.998470][ T5949] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.029355][ T5949] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1075.049455][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.517747][ T5950] usb 6-1: USB disconnect, device number 79 [ 1075.731501][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2603'. [ 1075.967410][ T5950] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1076.016744][T16051] input: syz0 as /devices/virtual/input/input68 [ 1076.147561][ T5950] usb 6-1: device descriptor read/64, error -71 [ 1076.437374][ T5950] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1076.597387][ T5950] usb 6-1: device descriptor read/64, error -71 [ 1076.718711][ T5950] usb usb6-port1: attempt power cycle [ 1076.827210][ T5907] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1076.991088][T16070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1077.029083][ T5907] usb 5-1: Using ep0 maxpacket: 32 [ 1077.055039][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.076226][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.088671][ T5907] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1077.098229][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.123441][ T5907] usb 5-1: config 0 descriptor?? [ 1077.127914][ T5950] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1077.169761][ T5950] usb 6-1: device descriptor read/8, error -71 [ 1077.377332][ T23] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 1077.438358][ T5950] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1077.483522][ T5950] usb 6-1: device descriptor read/8, error -71 [ 1077.535474][ T5949] usb 2-1: USB disconnect, device number 91 [ 1077.555551][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 1077.577293][ T5907] usbhid: probe of 5-1:0.0 failed with error -71 [ 1077.589499][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.608926][ T5950] usb usb6-port1: unable to enumerate USB device [ 1077.617335][ T5907] usb 5-1: USB disconnect, device number 89 [ 1077.623536][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.646836][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 1077.670062][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1077.686788][ T23] usb 3-1: SerialNumber: syz [ 1077.912697][ T23] usb 3-1: 0:2 : does not exist [ 1077.926343][ T23] usb 3-1: USB disconnect, device number 97 [ 1077.962081][T15521] udevd[15521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.077239][ T5949] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1078.152277][T16078] rxe_eth0 speed is unknown, defaulting to 1000 [ 1078.276226][ T5949] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 1078.293706][ T5949] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.322187][ T5949] usb 2-1: config 4 has no interface number 0 [ 1078.328585][ T5949] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1078.346672][ T5949] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1078.368587][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.393249][ T5949] usb 2-1: Product: syz [ 1078.403384][ T5949] usb 2-1: Manufacturer: syz [ 1078.415035][ T5949] usb 2-1: SerialNumber: syz [ 1078.751759][T16085] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1078.773220][T16085] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1078.888438][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 1078.904072][ T5949] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1078.921281][ T5949] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1078.956892][ T5949] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1078.971160][ T5949] usb 2-1: media controller created [ 1078.981570][ T5949] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1079.104946][ T5949] DVB: Unable to find symbol dib7000p_attach() [ 1079.113268][ T5949] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1079.207552][ T5949] rc_core: IR keymap rc-dib0700-rc5 not found [ 1079.220752][ T5949] Registered IR keymap rc-empty [ 1079.228365][ T5949] dvb-usb: could not initialize remote control. [ 1079.236061][ T5949] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1079.622756][ T5936] usb 2-1: USB disconnect, device number 92 [ 1079.672229][ T5936] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1079.777204][ T5949] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1079.931785][ T5950] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1079.973629][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1079.986899][ T5949] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1080.013200][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1080.022570][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.060105][T16103] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1080.064545][ T5907] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1080.136542][ T5949] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1080.147209][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 1080.161108][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.181567][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.231954][ T5950] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1080.264706][ T5907] usb 6-1: not running at top speed; connect to a high speed hub [ 1080.272702][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.295155][ T5950] usb 3-1: config 0 descriptor?? [ 1080.329676][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1080.366201][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1080.388469][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1080.405065][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1080.425967][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1080.445910][ T5907] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1080.470662][ T5907] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1080.487371][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.495864][ T5907] usb 6-1: Product: syz [ 1080.527024][ T5907] usb 6-1: Manufacturer: syz [ 1080.532383][ T5907] usb 6-1: SerialNumber: syz [ 1080.566411][T16108] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1080.574379][T16108] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1080.583264][T16108] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1080.591092][T16108] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1080.598624][T16108] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1080.610230][ T5907] usb 6-1: USB2VGA dongle found at address 84 [ 1080.622874][ T5907] usb 6-1: Allocated 8 output buffers [ 1080.628726][ T5907] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 1080.841752][T16108] usb 6-1: Device not attached to USB 2.0 hub [ 1080.912766][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 1080.919375][ T5950] usbhid: probe of 3-1:0.0 failed with error -71 [ 1080.934387][ T5950] usb 3-1: USB disconnect, device number 98 [ 1081.233795][ T23] usb 6-1: USB disconnect, device number 84 [ 1081.782710][T16131] loop5: detected capacity change from 0 to 4096 [ 1081.831544][T16131] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1081.864426][T16131] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1081.893057][T16131] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1081.918994][T16131] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 1081.930588][T16131] loop5: [ 1082.140017][T16137] input: syz0 as /devices/virtual/input/input71 [ 1082.890355][ T23] usb 5-1: USB disconnect, device number 90 [ 1082.977284][ T5948] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1083.212429][ T5948] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1083.251056][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.270211][ T5948] usb 3-1: Product: syz [ 1083.274467][ T5948] usb 3-1: Manufacturer: syz [ 1083.283718][ T5948] usb 3-1: SerialNumber: syz [ 1083.453530][T16171] xt_bpf: check failed: parse error [ 1083.657711][ T23] usb 6-1: new full-speed USB device number 85 using dummy_hcd [ 1083.730575][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1083.882670][ T23] usb 6-1: not running at top speed; connect to a high speed hub [ 1083.898403][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1083.913884][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1083.934830][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1083.957256][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1083.976348][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1083.998642][ T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1084.031130][ T23] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1084.052166][T16184] input: syz0 as /devices/virtual/input/input72 [ 1084.062939][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.103552][ T23] usb 6-1: Product: syz [ 1084.111192][ T23] usb 6-1: Manufacturer: syz [ 1084.115902][ T23] usb 6-1: SerialNumber: syz [ 1084.126218][T16167] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1084.143016][T16167] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1084.160643][T16167] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1084.180739][T16167] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1084.191115][T16167] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1084.211408][ T23] usb 6-1: USB2VGA dongle found at address 85 [ 1084.224033][ T23] usb 6-1: Allocated 8 output buffers [ 1084.232560][ T23] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 1084.429105][T16167] usb 6-1: Device not attached to USB 2.0 hub [ 1084.557240][ T23] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1084.607645][ T5949] usb 6-1: USB disconnect, device number 85 [ 1084.759247][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1084.787125][ T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1084.824573][ T23] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1084.837329][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1084.845520][ T23] usb 5-1: Product: syz [ 1084.857306][ T23] usb 5-1: Manufacturer: syz [ 1084.885709][ T23] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1085.196585][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1085.315226][ T23] mos7840: probe of ttyUSB0 failed with error -5 [ 1085.434650][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1085.451348][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1085.463995][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1085.477705][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1085.492278][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1085.505395][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1085.531062][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1085.550659][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1085.562054][ T5948] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1085.577554][ T5948] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1085.607780][ T5948] usb 3-1: USB disconnect, device number 99 [ 1085.955367][T16216] Cannot find add_set index 0 as target [ 1086.010338][T16216] Set syz1 is full, maxelem 2076 reached [ 1086.127931][T16220] input: syz0 as /devices/virtual/input/input73 [ 1086.527256][ T5907] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1086.738793][ T5907] usb 2-1: not running at top speed; connect to a high speed hub [ 1086.760262][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1086.787758][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1086.807723][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1086.837175][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1086.857370][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1086.877145][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1086.903869][ T5907] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1086.927536][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.935725][ T5907] usb 2-1: Product: syz [ 1086.947137][ T5907] usb 2-1: Manufacturer: syz [ 1086.951835][ T5907] usb 2-1: SerialNumber: syz [ 1086.981169][T16222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.002451][T16222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.026162][T16222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.061132][T16222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.089397][T16222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1087.103303][ T5907] usb 2-1: USB2VGA dongle found at address 93 [ 1087.139530][ T5907] usb 2-1: Allocated 8 output buffers [ 1087.146623][ T5907] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1087.301306][ T5949] usb 5-1: USB disconnect, device number 91 [ 1087.315003][ T5949] mos7840 5-1:1.0: device disconnected [ 1087.342209][T16222] usb 2-1: Device not attached to USB 2.0 hub [ 1087.390740][T16252] Cannot find add_set index 0 as target [ 1087.505523][ T5907] usb 2-1: USB disconnect, device number 93 [ 1087.527398][ T5948] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1087.743942][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.755781][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1087.770610][ T5948] usb 3-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 1087.780940][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1087.790277][ T5948] usb 3-1: SerialNumber: syz [ 1087.837293][ T23] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1088.012814][ T5948] usb 3-1: 0:2 : does not exist [ 1088.034485][ T23] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1088.044694][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.049786][ T5948] usb 3-1: USB disconnect, device number 100 [ 1088.055080][ T23] usb 5-1: Product: syz [ 1088.064606][ T23] usb 5-1: Manufacturer: syz [ 1088.071519][ T23] usb 5-1: SerialNumber: syz [ 1088.125937][T15521] udevd[15521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1088.769923][T16271] input: syz0 as /devices/virtual/input/input74 [ 1089.163720][ T5907] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1089.377489][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 1089.401104][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.432765][ T5907] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.457302][ T5907] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1089.476678][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.496510][ T5907] usb 6-1: config 0 descriptor?? [ 1089.927442][ T23] net_ratelimit: 2 callbacks suppressed [ 1089.927466][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 1089.952070][ T5907] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1090.097215][ T5948] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 1090.158785][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1090.171553][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1090.184925][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1090.211358][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1090.230460][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1090.247306][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1090.278024][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 1090.292114][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1090.305754][ T23] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1090.305953][ T5948] usb 3-1: not running at top speed; connect to a high speed hub [ 1090.328920][ T23] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1090.351694][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1090.352293][ T23] usb 5-1: USB disconnect, device number 92 [ 1090.389606][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1090.431843][ T5907] usb 6-1: USB disconnect, device number 86 [ 1090.437341][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1090.464839][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1090.522165][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1090.535459][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1090.551159][ T5948] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1090.562404][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.570969][ T5948] usb 3-1: Product: syz [ 1090.575195][ T5948] usb 3-1: Manufacturer: syz [ 1090.582585][ T5948] usb 3-1: SerialNumber: syz [ 1090.604534][T16291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1090.623385][T16291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1090.635212][T16291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1090.668733][T16291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1090.676190][T16291] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1090.698210][ T5948] usb 3-1: USB2VGA dongle found at address 101 [ 1090.716282][ T5948] usb 3-1: Allocated 8 output buffers [ 1090.724292][ T5948] usb 3-1: Not attached to USB 2.0 hub, deferring init [ 1090.897487][T16291] usb 3-1: Device not attached to USB 2.0 hub [ 1091.073228][ T5949] usb 3-1: USB disconnect, device number 101 [ 1091.088084][ T5907] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1091.281970][ T5907] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.287476][ T5948] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1091.292661][ T5907] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.310942][ T5907] usb 5-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 1091.321750][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1091.329947][ T5907] usb 5-1: SerialNumber: syz [ 1091.487378][T15186] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1091.505711][ T5948] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.516880][ T5948] usb 2-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 1091.527627][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.550106][ T5948] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1091.566825][ T5907] usb 5-1: 0:2 : does not exist [ 1091.590971][ T5907] usb 5-1: USB disconnect, device number 93 [ 1091.677194][T15186] usb 6-1: Using ep0 maxpacket: 8 [ 1091.689345][T15186] usb 6-1: too many endpoints for config 0 interface 0 altsetting 253: 141, using maximum allowed: 30 [ 1091.701392][T15186] usb 6-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 1091.715826][T15186] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1091.723043][T15186] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1091.734556][T15186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.768045][T15186] usb 6-1: config 0 descriptor?? [ 1092.193286][T15186] kye 0003:0458:501B.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1092.213331][T15186] hid_parser_main: 5 callbacks suppressed [ 1092.213352][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.232786][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.247386][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.254983][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.262564][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.269921][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.276733][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x0 [ 1092.289917][T15186] kye 0003:0458:501B.001C: unknown main item tag 0x4 [ 1092.304788][T15186] kye 0003:0458:501B.001C: item fetching failed at offset 32/40 [ 1092.314870][T15186] kye 0003:0458:501B.001C: parse failed [ 1092.324785][T15186] kye: probe of 0003:0458:501B.001C failed with error -22 [ 1092.404539][ T5936] usb 6-1: USB disconnect, device number 87 [ 1092.648537][T15186] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1092.851805][T15186] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 1092.864241][T15186] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.883186][T15186] usb 3-1: config 4 has no interface number 0 [ 1092.889583][T15186] usb 3-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1092.922083][T15186] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1092.933805][T15186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.957292][T15186] usb 3-1: Product: syz [ 1092.961546][T15186] usb 3-1: Manufacturer: syz [ 1092.977224][T15186] usb 3-1: SerialNumber: syz [ 1093.076141][T16341] program syz.4.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1093.407995][T15186] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1093.422156][T15186] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1093.431959][T15186] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1093.439746][T15186] usb 3-1: media controller created [ 1093.449316][T15186] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.522968][T15186] DVB: Unable to find symbol dib7000p_attach() [ 1093.531623][T15186] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1093.637333][ T5949] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1093.645129][T15186] rc_core: IR keymap rc-dib0700-rc5 not found [ 1093.659819][T15186] Registered IR keymap rc-empty [ 1093.669830][T15186] dvb-usb: could not initialize remote control. [ 1093.687424][T15186] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1093.829199][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2695'. [ 1093.848892][ T5949] usb 5-1: not running at top speed; connect to a high speed hub [ 1093.858861][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1093.872404][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1093.886622][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1093.902056][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1093.927313][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1093.956054][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1093.969846][ T5949] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1093.981489][ T23] usb 3-1: USB disconnect, device number 102 [ 1093.986733][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.996601][ T5949] usb 5-1: Product: syz [ 1094.001116][ T5949] usb 5-1: Manufacturer: syz [ 1094.008525][ T5949] usb 5-1: SerialNumber: syz [ 1094.020062][T16344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.029822][T16344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.040077][T16344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.048138][T16344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.062615][T16344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1094.074653][ T5949] usb 5-1: USB2VGA dongle found at address 94 [ 1094.092905][ T5949] usb 5-1: Allocated 8 output buffers [ 1094.098464][ T23] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1094.122499][ T5949] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 1094.162505][ T5949] usb 2-1: USB disconnect, device number 94 [ 1094.283990][T16344] usb 5-1: Device not attached to USB 2.0 hub [ 1094.475802][T15186] usb 5-1: USB disconnect, device number 94 [ 1094.867328][ T5949] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1095.043807][T16378] xt_bpf: check failed: parse error [ 1095.047554][ T5949] usb 3-1: Using ep0 maxpacket: 8 [ 1095.075151][ T5949] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1095.103932][ T5949] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1095.143273][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1095.162005][ T5949] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1095.190621][ T5949] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1095.250658][ T5949] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1095.296322][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.392899][T16383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'. [ 1095.572900][ T5949] usb 3-1: usb_control_msg returned -32 [ 1095.589366][ T5949] usbtmc 3-1:16.0: can't read capabilities [ 1095.634319][ T5949] usb 3-1: USB disconnect, device number 103 [ 1095.884045][T15203] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 1096.116340][ T5936] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1096.297226][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 1096.312097][ T5936] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1096.323903][ T5936] usb 5-1: config 0 has no interface number 0 [ 1096.331346][T16408] xt_bpf: check failed: parse error [ 1096.350712][ T5936] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1096.365167][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.381668][ T5936] usb 5-1: Product: syz [ 1096.386072][ T5936] usb 5-1: Manufacturer: syz [ 1096.394010][ T5936] usb 5-1: SerialNumber: syz [ 1096.411759][ T5936] usb 5-1: config 0 descriptor?? [ 1096.428167][ T5936] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1096.507962][ T23] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1096.709019][ T23] usb 2-1: not running at top speed; connect to a high speed hub [ 1096.725702][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1096.737700][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1096.759101][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1096.790617][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1096.813456][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1096.824772][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1096.846696][ T23] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1096.860148][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.868790][ T23] usb 2-1: Product: syz [ 1096.873186][ T23] usb 2-1: Manufacturer: syz [ 1096.878331][ T23] usb 2-1: SerialNumber: syz [ 1096.896488][T16403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1096.912725][T16403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1096.931240][T16403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1096.939193][T16403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1096.946877][T16403] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1096.959907][ T23] usb 2-1: USB2VGA dongle found at address 95 [ 1096.970118][ T23] usb 2-1: Allocated 8 output buffers [ 1096.975648][ T23] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1097.166465][T16403] usb 2-1: Device not attached to USB 2.0 hub [ 1097.262624][ T5936] gspca_spca1528: reg_w err -71 [ 1097.297484][ T5936] spca1528: probe of 5-1:0.1 failed with error -71 [ 1097.316676][ T5936] usb 5-1: USB disconnect, device number 95 [ 1097.356600][ T23] usb 2-1: USB disconnect, device number 95 [ 1097.867263][ T5936] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1098.063837][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 1098.170164][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.244635][ T5936] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.315430][ T5936] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1098.379574][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.641136][ T5936] usb 6-1: config 0 descriptor?? [ 1098.684645][T13853] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1098.964838][T16435] xt_bpf: check failed: parse error [ 1098.977347][T13853] usb 2-1: Using ep0 maxpacket: 16 [ 1099.202702][T16433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2724'. [ 1099.227730][T16433] cgroup: fork rejected by pids controller in /syz1 [ 1099.247744][T13853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1099.263877][T13853] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1099.271967][T13853] usb 2-1: can't read configurations, error -71 [ 1099.737893][ T23] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1099.900372][T15203] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1099.912534][T15203] Bluetooth: hci0: Injecting HCI hardware error event [ 1099.924443][T14697] Bluetooth: hci0: hardware error 0x00 [ 1099.956600][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 1100.043454][ T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.203278][T16449] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2730'. [ 1100.230421][ T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.251204][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1100.264462][ T23] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1100.279274][ T23] usb 5-1: can't read configurations, error -71 [ 1100.393218][ T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.518754][ T146] bridge0: port 3(netdevsim0) entered disabled state [ 1100.586099][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1100.611946][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1100.631302][ T146] bridge0: port 3(netdevsim0) entered disabled state [ 1100.652215][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.715657][ T5907] usb 6-1: USB disconnect, device number 88 [ 1100.918910][T13853] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1101.148964][T13853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1101.165258][T13853] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1101.175238][T13853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.202567][T13853] usb 3-1: config 0 descriptor?? [ 1101.235314][T13853] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1101.355518][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1101.366835][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1101.395570][ T5099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1101.407707][ T5099] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1101.422744][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1101.436523][ T5099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1101.591048][T16473] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.058683][T14697] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1102.434806][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.446152][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.455295][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.464225][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.472684][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1102.483033][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1102.636887][T16492] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.761953][T16473] chnl_net:caif_netlink_parms(): no params data found [ 1102.782074][ T5099] Bluetooth: hci2: command 0x0406 tx timeout [ 1103.233288][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.241203][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.249055][T16473] bridge_slave_0: entered allmulticast mode [ 1103.256998][T16473] bridge_slave_0: entered promiscuous mode [ 1103.268512][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.275869][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.286328][T16473] bridge_slave_1: entered allmulticast mode [ 1103.296964][T16473] bridge_slave_1: entered promiscuous mode [ 1103.333111][ T146] hsr_slave_0: left promiscuous mode [ 1103.340057][ T146] hsr_slave_1: left promiscuous mode [ 1103.346844][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1103.355412][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1103.366441][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1103.377729][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1103.387533][ T146] bridge_slave_1: left allmulticast mode [ 1103.393392][ T146] bridge_slave_1: left promiscuous mode [ 1103.399698][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.414029][ T146] bridge_slave_0: left allmulticast mode [ 1103.427308][ T146] bridge_slave_0: left promiscuous mode [ 1103.435517][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.483982][ T146] veth1_macvtap: left promiscuous mode [ 1103.495145][ T146] veth0_macvtap: left promiscuous mode [ 1103.501818][ T146] veth1_vlan: left promiscuous mode [ 1103.511273][ T146] veth0_vlan: left promiscuous mode [ 1103.577556][T15203] Bluetooth: hci1: command tx timeout [ 1103.679004][ T5949] usb 3-1: USB disconnect, device number 104 [ 1104.317256][ T5936] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1104.507222][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 1104.515101][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.526085][ T5936] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.539049][ T5936] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1104.557968][T15203] Bluetooth: hci3: command tx timeout [ 1104.565898][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.577859][ T5936] usb 3-1: config 0 descriptor?? [ 1104.845596][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1104.909067][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1104.975701][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.045549][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.515848][ T146] bond0 (unregistering): Released all slaves [ 1105.657197][T15203] Bluetooth: hci1: command tx timeout [ 1105.855141][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.906664][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.971704][T16473] team0: Port device team_slave_0 added [ 1106.012533][T16473] team0: Port device team_slave_1 added [ 1106.095764][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.112515][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.144049][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.176894][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.200893][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.238951][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.251663][T16492] chnl_net:caif_netlink_parms(): no params data found [ 1106.407524][ T5948] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1106.548454][T16473] hsr_slave_0: entered promiscuous mode [ 1106.562933][T16473] hsr_slave_1: entered promiscuous mode [ 1106.569688][T16473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.579793][T16473] Cannot create hsr debugfs directory [ 1106.607398][ T5948] usb 6-1: Using ep0 maxpacket: 16 [ 1106.617351][T15203] Bluetooth: hci3: command tx timeout [ 1106.657516][ T5948] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1106.681087][ T5948] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1106.717249][ T5948] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1106.726403][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.762477][ T5948] usb 6-1: Product: syz [ 1106.766766][ T5948] usb 6-1: Manufacturer: syz [ 1106.790721][T16492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.804357][ T5948] usb 6-1: SerialNumber: syz [ 1106.810711][T16492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.819309][ T5948] usb 6-1: config 0 descriptor?? [ 1106.837857][T16492] bridge_slave_0: entered allmulticast mode [ 1106.846102][T16492] bridge_slave_0: entered promiscuous mode [ 1106.874577][T16492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.886877][T16492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.898690][T16492] bridge_slave_1: entered allmulticast mode [ 1106.906857][T16492] bridge_slave_1: entered promiscuous mode [ 1107.056154][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1107.094036][ T5948] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input76 [ 1107.118058][ T1124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.140093][ T5949] usb 3-1: USB disconnect, device number 105 [ 1107.210827][ T5948] imon:send_packet: packet tx failed (-71) [ 1107.234648][T16492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.254928][ T5948] imon 6-1:0.0: panel buttons/knobs setup failed [ 1107.366287][ T1124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.421227][T16492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.427548][ T5948] rc_core: IR keymap rc-imon-pad not found [ 1107.445991][ T5948] Registered IR keymap rc-empty [ 1107.454447][ T5948] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1107.472180][ T5948] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1107.484964][ T5948] imon:send_packet: packet tx failed (-71) [ 1107.512398][ T5948] imon 6-1:0.0: remote input dev register failed [ 1107.526640][ T5948] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1107.542640][ T1124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.595650][ T5948] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1107.623277][ T5948] imon:imon_probe: failed to initialize context! [ 1107.646458][ T5948] imon 6-1:0.0: unable to register, err -19 [ 1107.672046][T16492] team0: Port device team_slave_0 added [ 1107.678234][ T5948] usb 6-1: USB disconnect, device number 89 [ 1107.694829][T16492] team0: Port device team_slave_1 added [ 1107.700802][ T5936] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1107.725175][ T1124] bridge0: port 3(netdevsim0) entered disabled state [ 1107.737304][T15203] Bluetooth: hci1: command tx timeout [ 1107.763293][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1107.772115][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1107.781388][ T1124] bridge0: port 3(netdevsim0) entered disabled state [ 1107.792252][ T1124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.915540][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 1107.926286][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.951308][ T5936] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1107.977893][ T5936] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1107.998027][T16492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.005042][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.023067][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.043842][T16492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.073262][ T5948] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1108.077511][ T5936] usb 3-1: Product: syz [ 1108.102268][ T5936] usb 3-1: Manufacturer: syz [ 1108.106981][ T5936] usb 3-1: SerialNumber: syz [ 1108.129612][ T5936] usb 3-1: config 0 descriptor?? [ 1108.209562][T16492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.227161][T16492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1108.254470][T16492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.307296][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.327245][ T5948] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1108.347241][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.383017][ T5948] usb 6-1: config 0 descriptor?? [ 1108.405910][ T5948] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1108.697485][T15203] Bluetooth: hci3: command tx timeout [ 1108.714524][T16492] hsr_slave_0: entered promiscuous mode [ 1108.740823][T16492] hsr_slave_1: entered promiscuous mode [ 1108.747978][T16492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1108.755603][T16492] Cannot create hsr debugfs directory [ 1108.985093][ T5948] usb 3-1: USB disconnect, device number 106 [ 1109.191979][T16587] input: syz0 as /devices/virtual/input/input78 [ 1109.335249][T16473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1109.427411][T16473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1109.460809][T16473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1109.535702][T16473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1109.828215][T15203] Bluetooth: hci1: command tx timeout [ 1110.213134][T16473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.260495][T16473] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.316093][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.323400][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.337973][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.345338][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.437837][ T5949] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1110.637383][ T5949] usb 3-1: Using ep0 maxpacket: 16 [ 1110.666020][T16473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1110.713511][T16473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1110.751684][T15186] usb 6-1: USB disconnect, device number 90 [ 1110.777296][T15203] Bluetooth: hci3: command tx timeout [ 1110.914024][T16604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2753'. [ 1110.962113][T16604] cgroup: fork rejected by pids controller in /syz2 [ 1111.091641][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1111.119954][ T5949] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1111.134739][ T5949] usb 3-1: can't read configurations, error -71 [ 1111.180157][ T1124] hsr_slave_0: left promiscuous mode [ 1111.206278][ T1124] hsr_slave_1: left promiscuous mode [ 1111.223643][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1111.232393][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1111.241080][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1111.249132][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1111.259170][ T1124] bridge_slave_1: left allmulticast mode [ 1111.264882][ T1124] bridge_slave_1: left promiscuous mode [ 1111.271702][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.287949][ T1124] bridge_slave_0: left allmulticast mode [ 1111.293709][ T1124] bridge_slave_0: left promiscuous mode [ 1111.300902][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.331955][ T1124] veth1_macvtap: left promiscuous mode [ 1111.338784][ T1124] veth0_macvtap: left promiscuous mode [ 1111.344888][ T1124] veth1_vlan: left promiscuous mode [ 1111.350566][ T1124] veth0_vlan: left promiscuous mode [ 1111.467219][T13853] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 1111.699196][T13853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.729755][T13853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.741027][T13853] usb 6-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 1111.764181][T13853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1111.774483][T13853] usb 6-1: SerialNumber: syz [ 1112.032682][T13853] usb 6-1: 0:2 : does not exist [ 1112.064669][T13853] usb 6-1: USB disconnect, device number 91 [ 1112.136508][T15521] udevd[15521]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1112.479266][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 1112.543441][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 1112.638587][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.700669][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.904188][ T5950] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1113.091848][ T5950] usb 6-1: Using ep0 maxpacket: 16 [ 1113.100229][ T5950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.112419][ T5950] usb 6-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.137989][ T5950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.144732][ T5950] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1113.158744][ T1124] bond0 (unregistering): Released all slaves [ 1113.160127][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.207363][ T5950] usb 6-1: config 0 descriptor?? [ 1113.224835][ T5950] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1113.535841][T16473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.568291][T16492] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1113.591327][T16492] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1113.631304][T16492] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1113.704996][T16492] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1113.866286][T16473] veth0_vlan: entered promiscuous mode [ 1113.921385][T16473] veth1_vlan: entered promiscuous mode [ 1114.079928][T16473] veth0_macvtap: entered promiscuous mode [ 1114.164460][ T1124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.221106][T16473] veth1_macvtap: entered promiscuous mode [ 1114.306950][ T1124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.363471][T16492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.463966][ T1124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.541433][T16492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.564988][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.587526][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.600778][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.638149][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1114.649769][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1114.658980][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1114.669483][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1114.679739][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1114.691034][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.691404][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1114.739129][T16473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.761416][ T1124] bridge0: port 3(netdevsim0) entered disabled state [ 1114.795944][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1114.805423][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1114.818571][ T1124] bridge0: port 3(netdevsim0) entered disabled state [ 1114.832555][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.862059][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.874020][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.885202][T16473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.902982][T16473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.914837][T16473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.940066][ T2918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.947340][ T2918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.002261][T16644] rxe_eth0 speed is unknown, defaulting to 1000 [ 1115.031976][ T2918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.039244][ T2918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.066180][T16473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.090895][T16473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.108630][T16473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.121910][T16473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.605886][T10933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.632896][T10933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.684165][ T5936] usb 6-1: USB disconnect, device number 92 [ 1115.927880][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.966547][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.063285][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.777420][T15203] Bluetooth: hci2: command tx timeout [ 1117.453735][T16492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.577929][T16644] chnl_net:caif_netlink_parms(): no params data found [ 1117.757855][T13853] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1117.967170][T13853] usb 2-1: Using ep0 maxpacket: 8 [ 1117.985980][T13853] usb 2-1: too many endpoints for config 0 interface 0 altsetting 253: 141, using maximum allowed: 30 [ 1117.997596][T13853] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 1118.015073][T13853] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1118.023316][T13853] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1118.032648][T13853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.053258][T13853] usb 2-1: config 0 descriptor?? [ 1118.066932][T16644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.087442][T16644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.094951][T16644] bridge_slave_0: entered allmulticast mode [ 1118.103149][T16644] bridge_slave_0: entered promiscuous mode [ 1118.136668][T16644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.162364][T16644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.173905][T16644] bridge_slave_1: entered allmulticast mode [ 1118.184794][T16644] bridge_slave_1: entered promiscuous mode [ 1118.340745][T16644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.373211][T16644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.523026][T13853] usbhid 2-1:0.0: can't add hid device: -71 [ 1118.547571][T13853] usbhid: probe of 2-1:0.0 failed with error -71 [ 1118.557844][ T1124] hsr_slave_0: left promiscuous mode [ 1118.576142][ T1124] hsr_slave_1: left promiscuous mode [ 1118.586854][T13853] usb 2-1: USB disconnect, device number 98 [ 1118.597467][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1118.615228][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1118.654659][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1118.679420][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1118.694579][ T1124] bridge_slave_1: left allmulticast mode [ 1118.722717][ T1124] bridge_slave_1: left promiscuous mode [ 1118.742560][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.763385][ T1124] bridge_slave_0: left allmulticast mode [ 1118.773327][ T1124] bridge_slave_0: left promiscuous mode [ 1118.780600][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.832142][ T1124] veth1_macvtap: left promiscuous mode [ 1118.838015][ T1124] veth0_macvtap: left promiscuous mode [ 1118.843824][ T1124] veth1_vlan: left promiscuous mode [ 1118.852433][ T1124] veth0_vlan: left promiscuous mode [ 1118.858670][T15203] Bluetooth: hci2: command tx timeout [ 1119.002281][ T5936] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1119.197194][ T5936] usb 6-1: Using ep0 maxpacket: 16 [ 1119.448224][T13853] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1119.451566][T16711] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2764'. [ 1119.556593][ T5936] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1119.579120][ T5936] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1119.586958][ T5936] usb 6-1: can't read configurations, error -71 [ 1119.685590][T13853] usb 2-1: not running at top speed; connect to a high speed hub [ 1119.703043][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1119.714517][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1119.731568][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1119.743564][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1119.754470][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1119.765466][T13853] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1119.779538][T13853] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1119.796456][T13853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.804662][T13853] usb 2-1: Product: syz [ 1119.808956][T13853] usb 2-1: Manufacturer: syz [ 1119.813653][T13853] usb 2-1: SerialNumber: syz [ 1119.838886][T16720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.846577][T16720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.864834][T16720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.879998][T16720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.888257][T16720] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.899497][T13853] usb 2-1: USB2VGA dongle found at address 99 [ 1119.920737][T13853] usb 2-1: Allocated 8 output buffers [ 1119.926254][T13853] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1120.117382][T16720] usb 2-1: Device not attached to USB 2.0 hub [ 1120.354080][T13853] usb 2-1: USB disconnect, device number 99 [ 1120.503795][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 1120.574111][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 1120.636536][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.702853][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.937413][T15203] Bluetooth: hci2: command tx timeout [ 1121.155876][ T1124] bond0 (unregistering): Released all slaves [ 1121.257176][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1121.305852][T16644] team0: Port device team_slave_0 added [ 1121.436443][T16644] team0: Port device team_slave_1 added [ 1121.467588][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1121.488391][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.506863][ T9] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1121.537408][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1121.544131][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1121.567126][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.588450][ T9] usb 2-1: config 0 descriptor?? [ 1121.620580][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1121.702462][T16644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.728885][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.794975][T16644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1121.820827][T16644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.837325][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1121.920338][T16644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.014789][T16492] veth0_vlan: entered promiscuous mode [ 1122.087926][T16644] hsr_slave_0: entered promiscuous mode [ 1122.129012][T16644] hsr_slave_1: entered promiscuous mode [ 1122.193946][T16492] veth1_vlan: entered promiscuous mode [ 1122.544898][T16492] veth0_macvtap: entered promiscuous mode [ 1122.623054][T16492] veth1_macvtap: entered promiscuous mode [ 1122.801173][ T2913] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.920553][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.957190][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1122.985192][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1122.994809][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1123.013171][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.013271][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1123.030701][T14697] Bluetooth: hci2: command tx timeout [ 1123.044361][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1123.046975][T16492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.069058][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1123.097560][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1123.105149][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1123.139266][ T2913] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.194823][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.221629][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.234252][T16492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.251995][T16492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.264642][T16492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.319802][ T2913] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.495863][ T2913] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.522205][T16492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.531871][T16492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.542746][T16492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.552965][T16492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.616330][T16748] rxe_eth0 speed is unknown, defaulting to 1000 [ 1124.015110][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.050539][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.068611][ T5936] usb 2-1: USB disconnect, device number 100 [ 1124.320047][T16644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1124.336584][T16644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1124.359992][T16644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1124.396737][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.405479][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.448314][T16644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1124.621688][ T5936] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1124.849890][ T5936] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.871681][ T5936] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1124.919830][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1124.932373][ T5936] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1124.945626][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.974860][ T5936] usb 2-1: config 0 descriptor?? [ 1125.178283][T15203] Bluetooth: hci0: command tx timeout [ 1125.241950][T16644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.324285][T16748] chnl_net:caif_netlink_parms(): no params data found [ 1125.352661][T16644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.493459][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.500735][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.604598][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.611903][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.666658][ T5936] sony 0003:054C:0268.001D: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 1125.695437][T16748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.716247][T16748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.724668][T16748] bridge_slave_0: entered allmulticast mode [ 1125.734058][ T5936] sony 0003:054C:0268.001D: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 1125.734091][T16748] bridge_slave_0: entered promiscuous mode [ 1125.793056][T16748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.806977][ T5936] sony 0003:054C:0268.001D: failed to claim input [ 1125.814398][T16748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.835622][T16748] bridge_slave_1: entered allmulticast mode [ 1125.855239][ T5936] usb 2-1: USB disconnect, device number 101 [ 1125.864850][T16748] bridge_slave_1: entered promiscuous mode [ 1125.966545][T16799] fido_id[16799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1126.069793][T16748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.205547][T16748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.482228][ T2913] hsr_slave_0: left promiscuous mode [ 1126.507540][ T2913] hsr_slave_1: left promiscuous mode [ 1126.525239][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.542742][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.568275][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.584719][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.627663][ T2913] bridge_slave_1: left allmulticast mode [ 1126.633404][ T2913] bridge_slave_1: left promiscuous mode [ 1126.656111][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.720195][ T2913] bridge_slave_0: left allmulticast mode [ 1126.725933][ T2913] bridge_slave_0: left promiscuous mode [ 1126.765584][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.866191][ T2913] veth1_macvtap: left promiscuous mode [ 1126.879585][ T2913] veth0_macvtap: left promiscuous mode [ 1126.891533][ T2913] veth1_vlan: left promiscuous mode [ 1126.917307][ T2913] veth0_vlan: left promiscuous mode [ 1127.257244][T15203] Bluetooth: hci0: command tx timeout [ 1127.915245][T13853] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1128.117322][T13853] usb 5-1: Using ep0 maxpacket: 16 [ 1128.124847][T13853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.147706][T13853] usb 5-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1128.193787][T13853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1128.201278][T13853] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1128.238324][T13853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.272984][T13853] usb 5-1: config 0 descriptor?? [ 1128.286434][T13853] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1129.070877][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1129.215931][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1129.327202][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.337576][T15203] Bluetooth: hci0: command tx timeout [ 1129.450059][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.344627][ T2913] bond0 (unregistering): Released all slaves [ 1130.483109][T16748] team0: Port device team_slave_0 added [ 1130.526730][T16748] team0: Port device team_slave_1 added [ 1130.546666][T16818] rxe_eth0 speed is unknown, defaulting to 1000 [ 1130.601915][T16748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.637578][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.690588][T16748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.713245][ T5949] usb 5-1: USB disconnect, device number 98 [ 1130.781842][T16748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.797458][T16748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.893591][T16748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.108769][T16748] hsr_slave_0: entered promiscuous mode [ 1131.128138][T16748] hsr_slave_1: entered promiscuous mode [ 1131.135766][T16748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.157269][T16748] Cannot create hsr debugfs directory [ 1131.221827][T16644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.417459][T15203] Bluetooth: hci0: command tx timeout [ 1131.444434][T16644] veth0_vlan: entered promiscuous mode [ 1131.467470][T16835] netlink: 'syz.4.2778': attribute type 1 has an invalid length. [ 1131.591673][T16644] veth1_vlan: entered promiscuous mode [ 1131.895060][T16644] veth0_macvtap: entered promiscuous mode [ 1132.019675][T16644] veth1_macvtap: entered promiscuous mode [ 1132.139984][T16644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.172207][T16644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.184649][T16644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.196979][T16644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.216090][T16644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.329206][T16644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.351291][T16644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.362038][T16644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.387679][T16644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.419206][T16644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.473853][T16644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.507151][T16644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.515977][T16644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.537214][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1132.557570][T16644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.729208][ T9] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 1132.745941][T16748] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1132.752924][ T9] usb 5-1: config 6 has no interface number 0 [ 1132.782372][ T9] usb 5-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1132.807162][ T9] usb 5-1: config 6 interface 14 has no altsetting 0 [ 1132.819664][ T9] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 1132.837601][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.845728][ T9] usb 5-1: Product: syz [ 1132.867194][T16748] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1132.887171][ T9] usb 5-1: Manufacturer: syz [ 1132.892112][ T9] usb 5-1: SerialNumber: syz [ 1132.902604][T16748] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1132.965943][T16748] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1133.078617][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.089655][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.154301][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 1133.248301][ T9] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 1133.254881][ T9] command write [95] error -8 [ 1133.325799][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.360942][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.380983][ T9] usb 5-1: USB disconnect, device number 99 [ 1133.388301][T16860] input: syz0 as /devices/virtual/input/input80 [ 1133.556045][T16748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.659910][T16748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.725964][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.733329][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.794002][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.801349][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.651250][T16748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1134.821469][T16898] Cannot find del_set index 4 as target [ 1134.870418][T16898] vivid-004: ================= START STATUS ================= [ 1134.907366][T16898] vivid-004: Radio HW Seek Mode: Bounded [ 1134.935597][T16898] vivid-004: Radio Programmable HW Seek: false [ 1134.967157][T16898] vivid-004: RDS Rx I/O Mode: Block I/O [ 1134.993398][T16898] vivid-004: Generate RBDS Instead of RDS: false [ 1135.048466][T16898] vivid-004: RDS Reception: true [ 1135.053549][T16898] vivid-004: RDS Program Type: 0 inactive [ 1135.107195][T16898] vivid-004: RDS PS Name: inactive [ 1135.112531][T16898] vivid-004: RDS Radio Text: inactive [ 1135.146587][T16898] vivid-004: RDS Traffic Announcement: false inactive [ 1135.172539][T16898] vivid-004: RDS Traffic Program: false inactive [ 1135.197124][T16898] vivid-004: RDS Music: false inactive [ 1135.200606][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1135.228426][T16898] vivid-004: ================== END STATUS ================== [ 1135.288730][T16909] rxe_eth0 speed is unknown, defaulting to 1000 [ 1135.443677][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.494069][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1135.533431][ T9] usb 5-1: config 1 has no interface number 0 [ 1135.558174][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.620302][ T9] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1135.652307][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1135.680971][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.699490][ T9] usb 5-1: Product: syz [ 1135.712945][ T9] usb 5-1: Manufacturer: syz [ 1135.732007][ T9] usb 5-1: SerialNumber: syz [ 1135.764083][ T9] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 1135.803975][ T9] cdc_ncm 5-1:1.1: bind() failure [ 1136.040119][T16748] veth0_vlan: entered promiscuous mode [ 1136.052922][T13853] usb 5-1: USB disconnect, device number 100 [ 1136.100409][T16748] veth1_vlan: entered promiscuous mode [ 1136.157543][ T5936] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1136.314434][T16748] veth0_macvtap: entered promiscuous mode [ 1136.357411][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1136.380459][T16748] veth1_macvtap: entered promiscuous mode [ 1136.419470][ T5936] usb 3-1: too many endpoints for config 0 interface 0 altsetting 253: 141, using maximum allowed: 30 [ 1136.470944][ T5936] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 1136.502056][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.515957][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1136.541890][ T5936] usb 3-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1136.558251][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.567247][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.590423][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.613386][ T5936] usb 3-1: config 0 descriptor?? [ 1136.613397][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.613424][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.677525][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.715831][T16748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.775115][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.827278][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.867151][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.911657][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.963034][T16748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.002912][T16748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.046876][T16748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.093968][ T5936] kye 0003:0458:501B.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1137.149944][T16748] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.153658][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.166257][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.190913][T16748] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.195593][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.227341][T16748] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.262429][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.269681][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.276453][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.279433][T16748] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.285885][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x0 [ 1137.320904][ T5936] kye 0003:0458:501B.001E: unknown main item tag 0x4 [ 1137.329550][ T5936] kye 0003:0458:501B.001E: item fetching failed at offset 32/40 [ 1137.355565][ T5936] kye 0003:0458:501B.001E: parse failed [ 1137.426329][ T5936] kye: probe of 0003:0458:501B.001E failed with error -22 [ 1137.477562][ T5936] usb 3-1: USB disconnect, device number 109 [ 1137.802422][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.845865][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.009539][T10933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.038852][T10933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.909212][T13853] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1140.124446][T13853] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1140.143147][T13853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.184840][T13853] usb 6-1: config 0 descriptor?? [ 1140.207246][T13853] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1140.419424][T13853] usb 6-1: USB disconnect, device number 95 [ 1140.450085][T15186] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1140.657599][T15186] usb 3-1: Using ep0 maxpacket: 32 [ 1140.665395][T15186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.683453][T15186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1140.695070][T15186] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1140.710671][T15186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.719116][ T9] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1140.741541][T15186] usb 3-1: config 0 descriptor?? [ 1140.877205][T13853] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1140.933049][ T9] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1140.942569][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.951318][ T9] usb 2-1: Product: syz [ 1140.955778][ T9] usb 2-1: Manufacturer: syz [ 1140.963910][ T9] usb 2-1: SerialNumber: syz [ 1140.974619][ T9] usb 2-1: config 0 descriptor?? [ 1140.987580][ T5884] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1141.081995][T13853] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1141.094053][T13853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.105962][T13853] usb 6-1: config 0 descriptor?? [ 1141.116313][T13853] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1141.186871][T15186] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1141.190810][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 1141.239334][ T5884] usb 5-1: too many endpoints for config 0 interface 0 altsetting 253: 141, using maximum allowed: 30 [ 1141.241980][ T9] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 102 [ 1141.263124][ T5884] usb 5-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 1141.313192][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1141.341152][ T5884] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1141.353250][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.368295][ T5884] usb 5-1: config 0 descriptor?? [ 1141.479626][T15186] usb 3-1: USB disconnect, device number 110 [ 1141.797435][ T5884] kye 0003:0458:501B.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1141.812336][ T5884] kye 0003:0458:501B.0020: unknown main item tag 0x0 [ 1141.819897][ T5884] kye 0003:0458:501B.0020: unknown main item tag 0x0 [ 1141.826933][ T5884] kye 0003:0458:501B.0020: item fetching failed at offset 32/40 [ 1141.836319][ T5884] kye 0003:0458:501B.0020: parse failed [ 1141.842197][ T5884] kye: probe of 0003:0458:501B.0020 failed with error -22 [ 1141.943482][T13853] gspca_stv06xx: I2C: Read error writing address: -71 [ 1141.957965][T13853] usb 6-1: USB disconnect, device number 96 [ 1142.011058][ T23] usb 5-1: USB disconnect, device number 101 [ 1143.338493][ T71] ------------[ cut here ]------------ [ 1143.339200][ T1124] ------------[ cut here ]------------ [ 1143.344657][ T71] WARNING: CPU: 1 PID: 71 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.350592][ T1124] WARNING: CPU: 0 PID: 1124 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.361257][ T71] Modules linked in: [ 1143.361279][ T71] CPU: 1 PID: 71 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1143.361304][ T71] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1143.361319][ T71] Workqueue: phy26 ieee80211_csa_finalize_work [ 1143.361407][ T71] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.372397][ T1124] Modules linked in: [ 1143.376297][ T71] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 1143.384140][ T1124] [ 1143.393827][ T71] RSP: 0018:ffffc900015c79b8 EFLAGS: 00010293 [ 1143.393854][ T71] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801f29bc00 [ 1143.393873][ T71] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1143.393889][ T71] RBP: dffffc0000000000 R08: ffff88804f34d60f R09: 1ffff11009e69ac1 [ 1143.393909][ T71] R10: dffffc0000000000 R11: ffffed1009e69ac2 R12: 0000000000000001 [ 1143.393926][ T71] R13: ffff8880277d2cd0 R14: ffff8880277d2d48 R15: ffff888030723830 [ 1143.393951][ T71] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1143.400671][ T1124] CPU: 0 PID: 1124 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 1143.407496][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.407518][ T71] CR2: 00007f63059fec7c CR3: 00000000691eb000 CR4: 00000000003526e0 [ 1143.407542][ T71] Call Trace: [ 1143.411464][ T1124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1143.432354][ T71] [ 1143.433607][ T1124] Workqueue: phy25 ieee80211_csa_finalize_work [ 1143.441365][ C1] ------------[ cut here ]------------ [ 1143.448613][ T1124] [ 1143.456620][ C1] WARNING: CPU: 1 PID: 71 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 1143.464889][ T1124] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.472684][ C1] Modules linked in: [ 1143.472701][ C1] CPU: 1 PID: 71 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1143.480742][ T1124] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 1143.489699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1143.489718][ C1] Workqueue: phy26 ieee80211_csa_finalize_work [ 1143.489750][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1143.497599][ T1124] RSP: 0018:ffffc90004d6f9b8 EFLAGS: 00010293 [ 1143.503914][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 1143.512031][ T1124] [ 1143.515233][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1143.525381][ T1124] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888024a5da00 [ 1143.528323][ C1] [ 1143.528332][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801f29bc00 [ 1143.528350][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.528368][ C1] RBP: 0000000000000000 R08: ffff88801f29bc00 R09: 0000000000000003 [ 1143.534514][ T1124] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1143.540016][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88804f34e420 [ 1143.543933][ T1124] RBP: dffffc0000000000 R08: ffff88806962160f R09: 1ffff1100d2c42c1 [ 1143.552246][ C1] R13: ffff8880639ad824 R14: ffff88804f34e910 R15: ffff8880639ad800 [ 1143.552275][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1143.552294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.552310][ C1] CR2: 00007f63059fec7c CR3: 00000000691eb000 CR4: 00000000003526e0 [ 1143.552329][ C1] Call Trace: [ 1143.552339][ C1] [ 1143.552350][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1143.552392][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1143.552422][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1143.559858][ T1124] R10: dffffc0000000000 R11: ffffed100d2c42c2 R12: 0000000000000001 [ 1143.563691][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1143.571160][ T1124] R13: ffff888073952cd0 R14: ffff888073952d48 R15: ffff888030723f30 [ 1143.590936][ C1] __iterate_interfaces+0x225/0x4c0 [ 1143.590977][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1143.591006][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.591037][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1143.591066][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1143.591101][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1143.591125][ C1] ? hw_scan_work+0xf10/0xf10 [ 1143.591148][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1143.591196][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1143.591219][ C1] ? read_tsc+0x9/0x20 [ 1143.591289][ C1] hrtimer_run_softirq+0x177/0x290 [ 1143.591324][ C1] handle_softirqs+0x27d/0x820 [ 1143.591348][ C1] ? read_tsc+0x9/0x20 [ 1143.591373][ C1] ? ktime_get+0x24b/0x280 [ 1143.591405][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1143.591435][ C1] ? do_softirq+0x1a0/0x1a0 [ 1143.591465][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1143.591499][ C1] __irq_exit_rcu+0xd3/0x190 [ 1143.591524][ C1] ? irq_exit_rcu+0x20/0x20 [ 1143.591559][ C1] irq_exit_rcu+0x9/0x20 [ 1143.591581][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1143.591619][ C1] [ 1143.591630][ C1] [ 1143.591641][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.591676][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1143.591708][ C1] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1143.591729][ C1] RSP: 0018:ffffc900015c7300 EFLAGS: 00000293 [ 1143.591754][ C1] RAX: ffffffff816c4df8 RBX: ffffc900015c747f RCX: ffff88801f29bc00 [ 1143.591773][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.591789][ C1] RBP: ffffc900015c7450 R08: ffffffff922235c7 R09: 1ffffffff24446b8 [ 1143.591815][ C1] R10: dffffc0000000000 R11: fffffbfff24446b9 R12: ffffffff8e8c2440 [ 1143.591833][ C1] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 1143.591861][ C1] ? console_flush_all+0x878/0xcf0 [ 1143.591904][ C1] ? console_flush_all+0x10b/0xcf0 [ 1143.591944][ C1] ? is_console_locked+0x20/0x20 [ 1143.591989][ C1] console_unlock+0xad/0x350 [ 1143.592018][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1143.592048][ C1] ? lock_chain_count+0x20/0x20 [ 1143.592078][ C1] ? vprintk_emit+0x40d/0x610 [ 1143.592105][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.592131][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.592162][ C1] vprintk_emit+0x497/0x610 [ 1143.592189][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.592221][ C1] ? printk_sprint+0x460/0x460 [ 1143.592249][ C1] ? __wake_up_klogd+0xd9/0x100 [ 1143.592278][ C1] ? vprintk_emit+0x53d/0x610 [ 1143.592310][ C1] ? printk_sprint+0x460/0x460 [ 1143.592348][ C1] _printk+0xde/0x130 [ 1143.592381][ C1] ? load_image+0x420/0x420 [ 1143.592410][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 1143.592452][ C1] __show_trace_log_lvl+0x5b9/0x6a0 [ 1143.592490][ C1] ? ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1143.592532][ C1] __warn+0x160/0x470 [ 1143.592553][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.592592][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.592627][ C1] report_bug+0x2be/0x4f0 [ 1143.592739][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.592777][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.592818][ C1] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 1143.592853][ C1] handle_bug+0xcf/0x120 [ 1143.592885][ C1] exc_invalid_op+0x1a/0x50 [ 1143.592916][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1143.592946][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.592982][ C1] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 1143.593002][ C1] RSP: 0018:ffffc900015c79b8 EFLAGS: 00010293 [ 1143.593025][ C1] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801f29bc00 [ 1143.593043][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1143.593059][ C1] RBP: dffffc0000000000 R08: ffff88804f34d60f R09: 1ffff11009e69ac1 [ 1143.593077][ C1] R10: dffffc0000000000 R11: ffffed1009e69ac2 R12: 0000000000000001 [ 1143.593095][ C1] R13: ffff8880277d2cd0 R14: ffff8880277d2d48 R15: ffff888030723830 [ 1143.593123][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 1143.593175][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 1143.593225][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1143.593267][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 1143.593293][ C1] ? mutex_lock_nested+0x20/0x20 [ 1143.593319][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1143.593346][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1143.593371][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1143.593409][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 1143.593432][ C1] ? process_scheduled_works+0x975/0x1600 [ 1143.593467][ C1] process_scheduled_works+0xa60/0x1600 [ 1143.593530][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1143.593569][ C1] ? assign_work+0x3cc/0x5d0 [ 1143.593607][ C1] worker_thread+0xa5e/0xfe0 [ 1143.593667][ C1] kthread+0x2fa/0x390 [ 1143.593690][ C1] ? pr_cont_work+0x550/0x550 [ 1143.593721][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1143.593746][ C1] ret_from_fork+0x48/0x80 [ 1143.593774][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1143.593807][ C1] ret_from_fork_asm+0x11/0x20 [ 1143.593864][ C1] [ 1143.593877][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1143.593889][ C1] CPU: 1 PID: 71 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1143.593911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1143.593925][ C1] Workqueue: phy26 ieee80211_csa_finalize_work [ 1143.593948][ C1] Call Trace: [ 1143.593956][ C1] [ 1143.593964][ C1] dump_stack_lvl+0x18c/0x250 [ 1143.593997][ C1] ? show_regs_print_info+0x20/0x20 [ 1143.594026][ C1] ? load_image+0x420/0x420 [ 1143.594064][ C1] panic+0x2ca/0x720 [ 1143.594092][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1143.594123][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1143.594158][ C1] __warn+0x2e0/0x470 [ 1143.594177][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594231][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594253][ C1] report_bug+0x2be/0x4f0 [ 1143.594282][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594305][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594327][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1143.594349][ C1] handle_bug+0xcf/0x120 [ 1143.594379][ C1] exc_invalid_op+0x1a/0x50 [ 1143.594408][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1143.594434][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1143.594456][ C1] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 1143.594474][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1143.594492][ C1] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88801f29bc00 [ 1143.594509][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.594523][ C1] RBP: 0000000000000000 R08: ffff88801f29bc00 R09: 0000000000000003 [ 1143.594537][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88804f34e420 [ 1143.594551][ C1] R13: ffff8880639ad824 R14: ffff88804f34e910 R15: ffff8880639ad800 [ 1143.594576][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594605][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1143.594626][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 1143.594659][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 1143.594686][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1143.594721][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1143.594756][ C1] __iterate_interfaces+0x225/0x4c0 [ 1143.594782][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1143.594814][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1143.594844][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1143.594869][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1143.594899][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1143.594921][ C1] ? hw_scan_work+0xf10/0xf10 [ 1143.594941][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1143.594983][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1143.595047][ C1] ? read_tsc+0x9/0x20 [ 1143.595165][ C1] hrtimer_run_softirq+0x177/0x290 [ 1143.595255][ C1] handle_softirqs+0x27d/0x820 [ 1143.595304][ C1] ? read_tsc+0x9/0x20 [ 1143.595368][ C1] ? ktime_get+0x24b/0x280 [ 1143.595435][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1143.595506][ C1] ? do_softirq+0x1a0/0x1a0 [ 1143.595579][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1143.595664][ C1] __irq_exit_rcu+0xd3/0x190 [ 1143.595724][ C1] ? irq_exit_rcu+0x20/0x20 [ 1143.595819][ C1] irq_exit_rcu+0x9/0x20 [ 1143.595871][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1143.595956][ C1] [ 1143.595976][ C1] [ 1143.595997][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.596097][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 1143.596172][ C1] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 1143.596222][ C1] RSP: 0018:ffffc900015c7300 EFLAGS: 00000293 [ 1143.596266][ C1] RAX: ffffffff816c4df8 RBX: ffffc900015c747f RCX: ffff88801f29bc00 [ 1143.596304][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1143.596337][ C1] RBP: ffffc900015c7450 R08: ffffffff922235c7 R09: 1ffffffff24446b8 [ 1143.596379][ C1] R10: dffffc0000000000 R11: fffffbfff24446b9 R12: ffffffff8e8c2440 [ 1143.596421][ C1] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 1143.596498][ C1] ? console_flush_all+0x878/0xcf0 [ 1143.596631][ C1] ? console_flush_all+0x10b/0xcf0 [ 1143.596758][ C1] ? is_console_locked+0x20/0x20 [ 1143.596905][ C1] console_unlock+0xad/0x350 [ 1143.596999][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 1143.597068][ C1] ? lock_chain_count+0x20/0x20 [ 1143.597172][ C1] ? vprintk_emit+0x40d/0x610 [ 1143.597236][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.597291][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.597375][ C1] vprintk_emit+0x497/0x610 [ 1143.597439][ C1] ? vprintk_emit+0x30b/0x610 [ 1143.597509][ C1] ? printk_sprint+0x460/0x460 [ 1143.597571][ C1] ? __wake_up_klogd+0xd9/0x100 [ 1143.597644][ C1] ? vprintk_emit+0x53d/0x610 [ 1143.597719][ C1] ? printk_sprint+0x460/0x460 [ 1143.597805][ C1] _printk+0xde/0x130 [ 1143.597901][ C1] ? load_image+0x420/0x420 [ 1143.598002][ C1] ? get_stack_info_noinstr+0x19/0x130 [ 1143.598081][ C1] __show_trace_log_lvl+0x5b9/0x6a0 [ 1143.598174][ C1] ? ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1143.598264][ C1] __warn+0x160/0x470 [ 1143.598303][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.598390][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.598473][ C1] report_bug+0x2be/0x4f0 [ 1143.598540][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.598623][ C1] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.598707][ C1] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 1143.598791][ C1] handle_bug+0xcf/0x120 [ 1143.598865][ C1] exc_invalid_op+0x1a/0x50 [ 1143.598948][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1143.599021][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1143.599105][ C1] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 1143.599155][ C1] RSP: 0018:ffffc900015c79b8 EFLAGS: 00010293 [ 1143.599198][ C1] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff88801f29bc00 [ 1143.599261][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1143.599299][ C1] RBP: dffffc0000000000 R08: ffff88804f34d60f R09: 1ffff11009e69ac1 [ 1143.599353][ C1] R10: dffffc0000000000 R11: ffffed1009e69ac2 R12: 0000000000000001 [ 1143.599400][ C1] R13: ffff8880277d2cd0 R14: ffff8880277d2d48 R15: ffff888030723830 [ 1143.599462][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 1143.599566][ C1] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 1143.599692][ C1] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 1143.599788][ C1] ieee80211_csa_finalize+0x571/0xeb0 [ 1143.599852][ C1] ? mutex_lock_nested+0x20/0x20 [ 1143.599912][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1143.599976][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 1143.600031][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1143.600116][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 1143.600175][ C1] ? process_scheduled_works+0x975/0x1600 [ 1143.600260][ C1] process_scheduled_works+0xa60/0x1600 [ 1143.600423][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1143.600508][ C1] ? assign_work+0x3cc/0x5d0 [ 1143.600597][ C1] worker_thread+0xa5e/0xfe0 [ 1143.600789][ C1] kthread+0x2fa/0x390 [ 1143.600852][ C1] ? pr_cont_work+0x550/0x550 [ 1143.600926][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1143.600987][ C1] ret_from_fork+0x48/0x80 [ 1143.601042][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1143.601103][ C1] ret_from_fork_asm+0x11/0x20 [ 1143.601218][ C1] [ 1143.605663][ C1] Kernel Offset: disabled