last executing test programs: 12.050062765s ago: executing program 3 (id=2819): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) shutdown(r1, 0x1) 9.211191871s ago: executing program 2 (id=2828): unshare(0x62040200) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e978ee000000000000000a00000000000000040004003e696b6eccece596f2331bef7f9f0425db85ea00840bf30772eb710750778058c70e2e8e40676087887660e562a47ea0a3f01f1d3b24c0f3d61d948aff909dd78bfde0e1ff2de9f7fefe880b8574281accb7ee4baa6c77e0457db646b1e595cf234a9f0e4f9b0cd7e71c4610708e16d1a76d893804f1dddc86abae2890c35fa3b1a94ebef6f6f26492121ac5751487"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8.461485095s ago: executing program 3 (id=2832): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xfdef) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r5, 0x0, 0x78) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c) 7.218931269s ago: executing program 3 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) rt_sigpending(&(0x7f0000000280), 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 7.156805591s ago: executing program 2 (id=2835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000000)=0x3, 0x40, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4008014) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37]}}}, 0x4e}]}) 6.978814994s ago: executing program 1 (id=2837): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000000000018000000180000000200000000000000000000030000000002000000ffffffff000000000000"], 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) syz_open_dev$dri(0x0, 0x5, 0x200000) r1 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000011c0)='./file0\x00', 0x21f) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f696e74722c00daf24d4ede11483257f671497a20957223be3291146acb0364c507047dfca45ce3458240e5e5c0303e31f2a07b"]) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x2000008, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000909000/0x2000)=nil, 0x2000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100005ff0000ffffffff00000000004a26a29a549b10cda8531dfc5aad50eed40bae2a11a73161ea1828c660581711ee1aa95de656d4cef98979008dbe0a00008a48", @ANYRES32=0x0, @ANYBLOB="000000009180000024001280090001007866726d00000000fbfe0280080001000100000008000200040000000a000100aaaaaaaaaabb0000"], 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYRESOCT=r0], 0x5c}}, 0x0) 6.957193574s ago: executing program 3 (id=2838): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x1, 'J'}, 0xa, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) 6.825842547s ago: executing program 0 (id=2839): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 4.989352883s ago: executing program 3 (id=2840): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) shutdown(r1, 0x1) 4.974797003s ago: executing program 2 (id=2841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x56100) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 4.969065253s ago: executing program 1 (id=2842): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r5, 0x0, 0x78) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c) 3.928802944s ago: executing program 1 (id=2843): unshare(0x62040200) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e978ee000000000000000a00000000000000040004003e696b6eccece596f2331bef7f9f0425db85ea00840bf30772eb710750778058c70e2e8e40676087887660e562a47ea0a3f01f1d3b24c0f3d61d948aff909dd78bfde0e1ff2de9f7fefe880b8574281accb7ee4baa6c77e0457db646b1e595cf234a9f0e4f9b0cd7e71c4610708e16d1a76d893804f1dddc86abae2890c35fa3b1a94ebef6f6f26492121ac5751487"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.857984735s ago: executing program 0 (id=2844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup2(r3, r3) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) flock(0xffffffffffffffff, 0x6) mprotect(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1000001) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 3.161227198s ago: executing program 2 (id=2845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x3ff, 0x20000008, 0x6, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 2.866624754s ago: executing program 2 (id=2846): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000034000)=""/102392, 0x18ff8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99e", 0xbc}, {&(0x7f00000002c0)="9c811ff500139d7d", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a", 0x2fb}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.809857205s ago: executing program 0 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)={0x14, 0xd, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x2) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdb", @ANYRES32=r10, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc26fc188c48b7a1b53083f5b6840022618e60f9d7b041b880f878e9932a0b004e2b69824a78a696fb3b3d3f51986983cad54fc1fabe806098e69cf65960d031b3e19520c6f11902719ae57ffa28999f4fdd1dd60861c18eecee54b27700d729"], 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) 2.742924496s ago: executing program 0 (id=2848): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.5722414s ago: executing program 1 (id=2849): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000000)=0x3, 0x40, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4008014) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37]}}}, 0x4e}]}) 2.55660521s ago: executing program 2 (id=2850): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f, 0x1, 'J'}, 0xa, 0x1) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) 2.423616433s ago: executing program 0 (id=2851): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000280)={0x10, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r6, 0x0, 0xc000) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.188199377s ago: executing program 0 (id=2852): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 798.368544ms ago: executing program 1 (id=2853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x56100) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 697.174647ms ago: executing program 3 (id=2854): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r5, 0x0, 0x78) sendto$inet6(r5, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c740a6ed126", 0x17, 0x48c5, &(0x7f00000001c0)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c) 0s ago: executing program 1 (id=2855): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00004f4000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) kernel console output (not intermixed with test programs): D 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 724.094868][ T5822] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 724.952192][T12345] fuse: Invalid rootmode [ 724.978161][ T5822] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 724.998930][ T5822] usb 3-1: USB disconnect, device number 37 [ 725.093407][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1758'. [ 725.116952][T12346] IPVS: Error connecting to the multicast addr [ 725.422530][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 727.180891][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 727.190626][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 727.200154][T12369] netlink: 'syz.1.1765': attribute type 12 has an invalid length. [ 727.208703][T12369] netlink: 'syz.1.1765': attribute type 11 has an invalid length. [ 728.076696][T12376] fuse: Bad value for 'rootmode' [ 728.552727][ T5867] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 728.734344][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.759437][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.771899][ T5867] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 728.783964][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.798054][ T5867] usb 3-1: config 0 descriptor?? [ 729.236399][ T5867] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 729.276049][ T5867] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 729.419706][ T5867] cp2112 0003:10C4:EA90.0022: Part Number: 0x82 Device Version: 0xFE [ 729.572475][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 729.827808][T12401] nfs: Deprecated parameter 'nointr' [ 730.180060][ T5867] cp2112 0003:10C4:EA90.0022: error reading lock byte: -71 [ 730.228758][ T5867] usb 3-1: USB disconnect, device number 38 [ 730.525267][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 730.534262][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1777'. [ 730.543783][T12409] netlink: 'syz.1.1777': attribute type 12 has an invalid length. [ 730.551599][T12409] netlink: 'syz.1.1777': attribute type 11 has an invalid length. [ 731.247409][T12421] fuse: Bad value for 'rootmode' [ 733.821343][ T9966] Bluetooth: hci3: command 0x0406 tx timeout [ 734.028299][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1786'. [ 734.037509][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1786'. [ 734.046846][T12447] netlink: 'syz.2.1786': attribute type 12 has an invalid length. [ 734.055055][T12447] netlink: 'syz.2.1786': attribute type 11 has an invalid length. [ 734.275544][ T5867] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 734.488440][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.046223][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.066843][ T5867] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 735.089782][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.620595][ T5867] usb 4-1: config 0 descriptor?? [ 736.059272][T12461] binder: 12460:12461 ioctl c0306201 0 returned -14 [ 736.696912][ T5867] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 736.749416][ T5867] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 736.827722][ T5867] cp2112 0003:10C4:EA90.0023: Part Number: 0x82 Device Version: 0xFE [ 737.467143][ T5867] cp2112 0003:10C4:EA90.0023: error reading lock byte: -71 [ 737.480079][ T5867] usb 4-1: USB disconnect, device number 38 [ 738.693710][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'. [ 738.703226][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 738.712836][T12484] netlink: 'syz.3.1797': attribute type 12 has an invalid length. [ 738.720708][T12484] netlink: 'syz.3.1797': attribute type 11 has an invalid length. [ 740.422758][T12510] tipc: Enabling of bearer rejected, already enabled [ 740.869509][T12514] nfs: Deprecated parameter 'nointr' [ 740.889855][T12514] ntfs3: loop2: try to read out of volume at offset 0x0 [ 741.065000][T12515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'. [ 741.086097][T12515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 741.427617][T12517] binder: 12516:12517 ioctl c0306201 0 returned -14 [ 742.005936][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 742.015553][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 742.024716][T12530] netlink: 'syz.2.1807': attribute type 12 has an invalid length. [ 742.032849][T12530] netlink: 'syz.2.1807': attribute type 11 has an invalid length. [ 744.899443][T12561] nfs: Deprecated parameter 'nointr' [ 745.056704][T12562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1817'. [ 745.079723][T12562] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1817'. [ 746.045184][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 746.054356][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 746.063633][T12571] netlink: 'syz.0.1819': attribute type 12 has an invalid length. [ 746.071421][T12571] netlink: 'syz.0.1819': attribute type 11 has an invalid length. [ 746.233298][ T5846] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 746.412737][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 746.419826][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.438472][ T5846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.455737][ T5846] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 746.465536][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.474082][ T5846] usb 4-1: Product: syz [ 746.478379][ T5846] usb 4-1: Manufacturer: syz [ 746.488465][ T5846] usb 4-1: SerialNumber: syz [ 746.499643][ T5846] usb 4-1: config 0 descriptor?? [ 746.719803][ T8] usb 4-1: USB disconnect, device number 39 [ 746.792977][ T5846] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 747.263134][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 747.287259][ T5846] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 747.305476][ T5846] usb 3-1: config 0 has no interface number 0 [ 747.316485][ T5846] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 747.328000][ T5846] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 747.343653][ T5846] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 747.346392][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.367353][ T5846] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 747.369270][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.424081][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.440114][ T5846] usb 3-1: config 0 descriptor?? [ 747.480307][ T5846] ldusb 3-1:0.55: Interrupt in endpoint not found [ 747.508894][T12589] fuse: Unknown parameter 'use00000000000000000000' [ 747.997075][T12593] nfs: Deprecated parameter 'nointr' [ 748.474009][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 748.691493][T12591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1827'. [ 748.701107][T12591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1827'. [ 748.756611][ T54] usb 3-1: USB disconnect, device number 39 [ 748.763415][T12602] binder: 12601:12602 ioctl c0306201 0 returned -14 [ 750.801499][T12627] fuse: Unknown parameter 'user_i00000000000000000000' [ 752.084204][T12641] nfs: Deprecated parameter 'nointr' [ 752.389324][T12642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1839'. [ 752.695500][ T9966] Bluetooth: hci3: command 0x0406 tx timeout [ 753.147419][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'. [ 753.157072][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 753.166623][T12653] netlink: 'syz.1.1844': attribute type 12 has an invalid length. [ 753.175458][T12653] netlink: 'syz.1.1844': attribute type 11 has an invalid length. [ 753.715976][T12655] fuse: Unknown parameter 'user_i00000000000000000000' [ 754.884772][T12662] tipc: Enabling of bearer rejected, already enabled [ 757.176395][T12687] fuse: Unknown parameter 'user_i00000000000000000000' [ 760.133910][T12715] tmpfs: Bad value for 'mpol' [ 760.559312][T12717] tipc: Enabling of bearer rejected, already enabled [ 761.693605][T12724] fuse: Unknown parameter 'user_id00000000000000000000' [ 762.002864][ T5822] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 762.183405][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 762.198225][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.222090][ T5822] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 762.269866][ T5822] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 762.301275][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.344131][ T5822] usb 2-1: Product: syz [ 762.368042][ T5822] usb 2-1: Manufacturer: syz [ 762.400759][ T5822] usb 2-1: SerialNumber: syz [ 762.443706][ T5822] usb 2-1: config 0 descriptor?? [ 762.715529][ T5822] usb 2-1: USB disconnect, device number 36 [ 764.678909][T12757] tmpfs: Bad value for 'mpol' [ 767.768069][T12775] tipc: Enabling of bearer rejected, already enabled [ 768.044365][T12782] autofs4:pid:12782:autofs_fill_super: called with bogus options [ 769.630169][ T23] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 769.912410][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 769.927310][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.947457][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 770.082940][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 770.096953][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.108637][ T23] usb 4-1: Product: syz [ 770.115274][ T23] usb 4-1: Manufacturer: syz [ 770.119899][ T23] usb 4-1: SerialNumber: syz [ 770.132789][ T23] usb 4-1: config 0 descriptor?? [ 771.003662][ T9757] usb 4-1: USB disconnect, device number 40 [ 772.294324][T12819] autofs4:pid:12819:autofs_fill_super: called with bogus options [ 774.622236][T12835] nfs: Deprecated parameter 'nointr' [ 777.289699][T12859] autofs4:pid:12859:autofs_fill_super: called with bogus options [ 777.987521][T12867] binder: 12862:12867 unknown command 1074553619 [ 777.994478][T12867] binder: 12862:12867 ioctl c0306201 200000000040 returned -22 [ 779.252613][ T8] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 779.454995][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.498157][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.555882][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.887713][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 780.133735][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.146536][ T8] usb 1-1: config 0 descriptor?? [ 780.767691][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 780.776456][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.006080][T12897] rtc_cmos 00:00: Alarms can be up to one day in the future [ 782.576733][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 782.583646][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.591080][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.599033][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.607236][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.615316][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.623274][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.630653][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.643167][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.651236][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.668820][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.681548][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.698257][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.706687][ T8] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 782.717335][ T8] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 782.733082][ T8] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 782.749606][ T8] usb 1-1: USB disconnect, device number 25 [ 782.838899][T12900] fido_id[12900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 782.854352][ T5846] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 783.065517][ T5846] usb 4-1: unable to get BOS descriptor or descriptor too short [ 783.080375][T12905] syz.1.1910: attempt to access beyond end of device [ 783.080375][T12905] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 783.797249][ T5846] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 783.807057][ T5846] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 783.951272][ T5846] usb 4-1: config 63 has no interface number 0 [ 784.025591][ T5846] usb 4-1: config 63 interface 66 has no altsetting 0 [ 784.193384][ T5846] usb 4-1: language id specifier not provided by device, defaulting to English [ 784.205719][T12909] binder: 12908:12909 ioctl c0306201 0 returned -14 [ 784.217231][ T5846] usb 4-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 784.290731][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.309551][ T5846] usb 4-1: SerialNumber: ₯⬒᥋녽ì¶á‡Žê·€ê¸ˆê´¢Ð“çž£ã„­ï—ƒï‘ [ 784.692664][T12896] binder: binder_mmap: 12894 200000ffb000-200000ffd000 bad vm_flags failed -1 [ 785.326394][ T5822] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 785.564162][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 785.583704][ T5822] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 785.603927][ T5822] usb 2-1: config 0 has no interface number 0 [ 785.630221][ T5822] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 785.667527][ T5822] usb 2-1: config 0 interface 85 has no altsetting 0 [ 785.690378][ T5822] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 785.704820][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.816789][ T5822] usb 2-1: Product: syz [ 785.824881][ T5822] usb 2-1: Manufacturer: syz [ 785.829836][ T5822] usb 2-1: SerialNumber: syz [ 785.839070][ T5846] usb 4-1: USB disconnect, device number 41 [ 785.847723][ T5822] usb 2-1: config 0 descriptor?? [ 786.969564][ T5822] appletouch 2-1:0.85: Geyser mode initialized. [ 787.268006][ T5822] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 788.146577][ T9966] Bluetooth: hci3: command 0x0406 tx timeout [ 788.649900][ T9757] usb 2-1: USB disconnect, device number 37 [ 788.649983][ C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 788.697971][ T9757] appletouch 2-1:0.85: input: appletouch disconnected [ 788.833330][T12947] binder: 12946:12947 ioctl c0306201 0 returned -14 [ 788.951334][T12954] fuse: Unknown parameter '0x0000000000000006' [ 792.751041][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 792.810035][T12979] binder: 12978:12979 ioctl c0306201 0 returned -14 [ 792.932414][T12984] fuse: Unknown parameter '0x0000000000000006' [ 797.141116][T13000] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.251720][T13000] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.318073][T13000] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.371603][T13000] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.442954][T13000] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.457102][T13000] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.470061][T13000] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.484370][T13000] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.589720][T13013] nfs: Deprecated parameter 'nointr' [ 797.616122][T13013] ntfs3: loop2: try to read out of volume at offset 0x0 [ 798.144505][T13009] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1942'. [ 798.158271][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1942'. [ 798.235598][T13018] tmpfs: Bad value for 'mpol' [ 798.512085][T13022] fuse: Unknown parameter '0x0000000000000006' [ 798.900644][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 799.076920][T11089] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.104220][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 799.113312][T13032] Bluetooth: hci4: Frame reassembly failed (-84) [ 799.124879][ T8] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 799.137241][ T8] usb 3-1: config 0 has no interface number 0 [ 799.150908][ T8] usb 3-1: config 0 interface 110 has no altsetting 0 [ 799.168734][ T8] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=f6.56 [ 799.187326][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.198597][ T8] usb 3-1: Product: syz [ 799.205369][ T8] usb 3-1: Manufacturer: syz [ 799.210453][ T8] usb 3-1: SerialNumber: syz [ 799.227576][ T8] usb 3-1: config 0 descriptor?? [ 799.423708][T13011] Bluetooth: hci3: command 0x0406 tx timeout [ 799.755141][ T8] usb 3-1: USB disconnect, device number 40 [ 801.102902][T13046] Bluetooth: hci4: command 0x1003 tx timeout [ 801.113837][ T9966] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 801.240290][T13051] nfs: Deprecated parameter 'nointr' [ 801.250547][T13051] ntfs3: loop2: try to read out of volume at offset 0x0 [ 801.708458][T13053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1955'. [ 801.770345][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1955'. [ 802.017433][T13065] tmpfs: Bad value for 'mpol' [ 802.212542][ T9966] Bluetooth: hci3: command 0x0406 tx timeout [ 804.828030][T13093] rtc_cmos 00:00: Alarms can be up to one day in the future [ 804.837924][T13093] rtc_cmos 00:00: Alarms can be up to one day in the future [ 805.907984][T13108] batadv_slave_0: left promiscuous mode [ 805.924068][T13108] vlan2: left promiscuous mode [ 805.928875][T13108] bridge0: left promiscuous mode [ 805.940944][T13108] ip6erspan0: left promiscuous mode [ 805.951295][T13108] gtp0: left promiscuous mode [ 807.508010][T13110] nfs: Deprecated parameter 'nointr' [ 807.525426][T13114] syz.0.1970 uses obsolete (PF_INET,SOCK_PACKET) [ 808.235056][T13110] ntfs3: loop1: try to read out of volume at offset 0x0 [ 808.348048][T13111] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1969'. [ 808.364259][T13111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1969'. [ 808.819025][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.826029][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.372890][T13131] binder: 13129:13131 ioctl c0306201 0 returned -14 [ 811.546897][T13158] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 811.581477][T13158] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 812.067568][T13158] hsr0: entered promiscuous mode [ 812.534264][T13158] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 812.569353][T13158] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 812.581038][T13158] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 812.596577][T13158] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 813.142495][ T23] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 813.483081][ T5846] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 813.612491][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 813.621988][ T23] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 813.633380][ T23] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 813.642068][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 813.654163][ T23] usb 3-1: config 1 has no interface number 0 [ 813.660515][ T23] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 813.662788][ T5846] usb 1-1: Using ep0 maxpacket: 8 [ 813.680095][ T23] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 813.701595][ T23] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 813.711882][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.762790][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 813.866478][ T5846] usb 1-1: config 0 has no interfaces? [ 813.899898][ T5846] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 813.940373][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.962767][ T5846] usb 1-1: Product: syz [ 813.966972][ T5846] usb 1-1: Manufacturer: syz [ 813.971589][ T5846] usb 1-1: SerialNumber: syz [ 814.003930][ T5846] usb 1-1: config 0 descriptor?? [ 814.017246][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 814.255994][ T5822] usb 1-1: USB disconnect, device number 26 [ 814.495727][ T23] usb 3-1: USB disconnect, device number 41 [ 814.516809][ T23] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 816.348940][T13203] binder: 13202:13203 ioctl c0306201 0 returned -14 [ 818.072935][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 818.294539][ T8] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 818.306905][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.338755][ T8] usb 2-1: config 0 has no interface number 0 [ 818.379972][ T8] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 818.402942][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.419846][ T8] usb 2-1: Product: syz [ 818.430162][ T8] usb 2-1: Manufacturer: syz [ 818.455560][ T8] usb 2-1: SerialNumber: syz [ 818.473528][ T8] usb 2-1: config 0 descriptor?? [ 818.484961][ T8] HFC-S_USB: probe of 2-1:0.117 failed with error -5 [ 818.673791][T13233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2005'. [ 818.705522][ T8] usb 2-1: USB disconnect, device number 38 [ 820.189404][T13244] nfs: Deprecated parameter 'nointr' [ 820.607746][T13257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'. [ 821.355589][T13262] binder: 13261:13262 ioctl c0306201 0 returned -14 [ 822.842003][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2024'. [ 823.432851][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 823.613417][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 823.660259][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.695814][ T8] usb 4-1: config 0 has no interface number 0 [ 823.720146][ T8] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 823.767648][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.832901][ T8] usb 4-1: Product: syz [ 823.837640][ T8] usb 4-1: Manufacturer: syz [ 823.844188][ T8] usb 4-1: SerialNumber: syz [ 823.855550][ T8] usb 4-1: config 0 descriptor?? [ 823.868356][ T8] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 823.894328][ T8] usb 4-1: selecting invalid altsetting 1 [ 823.900239][ T8] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 823.921449][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 823.935734][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 824.054631][ T8] usb 4-1: media controller created [ 824.088238][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.281726][T13296] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 825.322953][ T8] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 825.329950][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 825.340283][ T8] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 825.423991][T13316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2034'. [ 825.442634][ T8] usb 4-1: USB disconnect, device number 42 [ 825.687020][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2037'. [ 825.697980][T13323] IPVS: Error connecting to the multicast addr [ 826.452768][ T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 826.648219][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.659584][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.672805][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 826.682052][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 826.690492][ T23] usb 4-1: SerialNumber: syz [ 827.589806][ T23] usb 4-1: 0:2 : does not exist [ 827.605083][ T23] usb 4-1: unit 5 not found! [ 828.084544][ T23] usb 4-1: USB disconnect, device number 43 [ 828.231053][T13317] udevd[13317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.366158][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2044'. [ 828.862656][ T23] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 829.042328][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 829.083183][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 829.091314][ T23] usb 3-1: config 0 has no interface number 0 [ 829.105463][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 829.115892][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.124234][ T23] usb 3-1: Product: syz [ 829.128714][ T23] usb 3-1: Manufacturer: syz [ 829.133723][ T23] usb 3-1: SerialNumber: syz [ 829.155643][ T23] usb 3-1: config 0 descriptor?? [ 829.170387][ T23] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 829.179320][ T23] usb 3-1: selecting invalid altsetting 1 [ 829.185728][ T23] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 829.224641][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 829.239283][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 829.248455][ T23] usb 3-1: media controller created [ 829.297299][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 830.374752][ T23] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 830.440431][ T23] zl10353_read_register: readreg error (reg=127, ret==-110) [ 830.464223][T13358] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 830.560422][ T23] usb 3-1: USB disconnect, device number 42 [ 835.500213][ T23] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 835.742419][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 835.800221][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 835.809424][ T23] usb 4-1: config 0 has no interface number 0 [ 835.866586][ T23] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 835.884740][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.894229][ T23] usb 4-1: Product: syz [ 835.898574][ T23] usb 4-1: Manufacturer: syz [ 835.904040][ T23] usb 4-1: SerialNumber: syz [ 835.919976][ T23] usb 4-1: config 0 descriptor?? [ 835.938259][ T23] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 835.955738][ T23] usb 4-1: selecting invalid altsetting 1 [ 835.967266][ T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 836.020470][ T23] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 836.054270][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 836.064994][ T23] usb 4-1: media controller created [ 836.087608][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.237430][T13414] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 837.333357][ T23] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 837.361979][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 837.375644][ T23] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 837.421998][ T23] usb 4-1: USB disconnect, device number 44 [ 838.922507][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'. [ 841.894375][ T5846] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 842.113866][T13493] fuse: Bad value for 'fd' [ 843.121305][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 843.316335][ T5846] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 843.417795][ T5846] usb 3-1: config 0 has no interface number 0 [ 843.526441][ T5846] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 843.708173][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.846159][ T5846] usb 3-1: Product: syz [ 843.881905][ T5846] usb 3-1: Manufacturer: syz [ 844.029198][ T5846] usb 3-1: SerialNumber: syz [ 844.060196][ T5846] usb 3-1: config 0 descriptor?? [ 844.112588][ T5846] usb 3-1: can't set config #0, error -71 [ 844.124625][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'. [ 844.145599][T13500] IPVS: Error connecting to the multicast addr [ 844.157727][ T5846] usb 3-1: USB disconnect, device number 43 [ 847.719371][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2100'. [ 847.761904][T13553] IPVS: Error connecting to the multicast addr [ 849.438643][ T28] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 851.282313][ T28] usb 2-1: device not accepting address 39, error -71 [ 851.585892][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2112'. [ 851.600888][T13589] IPVS: Error connecting to the multicast addr [ 853.842923][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 854.635386][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.708951][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 854.742896][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 854.766511][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 854.795351][ T8] usb 4-1: SerialNumber: syz [ 855.847195][ T8] usb 4-1: 0:2 : does not exist [ 855.892975][ T8] usb 4-1: unit 5 not found! [ 856.004459][ T8] usb 4-1: USB disconnect, device number 45 [ 856.116076][T13547] udevd[13547]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.724114][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2127'. [ 857.767346][T13646] IPVS: Error connecting to the multicast addr [ 857.780945][T13649] tmpfs: Bad value for 'mpol' [ 859.206125][ T5846] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 859.414934][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.425982][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 859.444375][ T5846] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 859.458010][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 859.483673][ T5846] usb 3-1: SerialNumber: syz [ 860.338242][T13684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2136'. [ 860.578038][T13684] IPVS: Error connecting to the multicast addr [ 860.769300][ T5846] usb 3-1: 0:2 : does not exist [ 860.803838][ T5846] usb 3-1: unit 5 not found! [ 860.843038][ T5846] usb 3-1: USB disconnect, device number 44 [ 860.911834][T13547] udevd[13547]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.508638][T13728] tmpfs: Bad value for 'mpol' [ 864.785575][T13731] Bluetooth: MGMT ver 1.22 [ 864.915487][ T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 865.204494][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.216940][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.237593][ T23] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 865.256953][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 865.277050][ T23] usb 1-1: SerialNumber: syz [ 865.286860][T13737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2148'. [ 865.325147][T13737] IPVS: Error connecting to the multicast addr [ 865.560576][ T23] usb 1-1: 0:2 : does not exist [ 865.635754][ T23] usb 1-1: unit 5 not found! [ 865.774172][ T23] usb 1-1: USB disconnect, device number 27 [ 866.033944][T13730] udevd[13730]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.168844][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 869.257009][T13785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2158'. [ 869.478366][T13785] IPVS: Error connecting to the multicast addr [ 869.918620][T13790] tmpfs: Bad value for 'mpol' [ 870.323326][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.329669][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.215597][T13807] program syz.3.2166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.563510][ T23] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 872.847690][ T23] usb 4-1: not running at top speed; connect to a high speed hub [ 872.866559][ T23] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.883104][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 872.896226][ T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 872.943875][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.952087][ T23] usb 4-1: Product: syz [ 872.957813][ T23] usb 4-1: SerialNumber: syz [ 873.232355][ T23] usbhid 4-1:1.0: can't add hid device: -71 [ 873.242864][ T23] usbhid: probe of 4-1:1.0 failed with error -71 [ 873.265138][ T23] usb 4-1: USB disconnect, device number 46 [ 873.529489][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 873.818830][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'. [ 873.828543][T13828] IPVS: Error connecting to the multicast addr [ 873.894105][ T8] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 873.910256][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 873.921845][ T8] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.170477][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 874.180261][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.196369][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 874.204841][ T8] usb 3-1: invalid MIDI out EP 0 [ 874.279868][ T8] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 874.357806][T13837] udevd[13837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 874.430872][ T8] usb 3-1: USB disconnect, device number 45 [ 876.848313][T13849] nfs: Deprecated parameter 'nointr' [ 876.936237][T13849] ntfs3: loop3: try to read out of volume at offset 0x0 [ 877.152662][T13854] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2176'. [ 877.163412][T13854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2176'. [ 880.237088][T13893] netlink: 'syz.3.2187': attribute type 4 has an invalid length. [ 880.520809][T13893] syz.3.2187 (13893) used greatest stack depth: 20904 bytes left [ 881.474355][T13915] nfs: Deprecated parameter 'nointr' [ 881.565916][T13915] ntfs3: loop1: try to read out of volume at offset 0x0 [ 881.733701][T13912] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2191'. [ 881.743603][T13912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2191'. [ 885.134719][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2199'. [ 887.340177][T13980] netlink: 'syz.2.2206': attribute type 10 has an invalid length. [ 887.350454][T13980] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 887.365100][T13980] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 887.415864][T13980] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 887.431205][T13980] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 887.903391][T13979] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 890.647445][T14028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2217'. [ 894.406530][T14060] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2226'. [ 896.723194][T14092] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2236'. [ 900.616106][T14137] bridge1: entered promiscuous mode [ 900.990429][ T7224] kworker/dying (7224) used greatest stack depth: 20200 bytes left [ 901.402903][ T5846] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 902.013249][ T5846] usb 4-1: Using ep0 maxpacket: 32 [ 902.049632][ T5846] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 902.130294][ T5846] usb 4-1: config 0 has no interface number 0 [ 902.146013][ T5846] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 902.164089][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.172111][ T5846] usb 4-1: Product: syz [ 902.177444][ T5846] usb 4-1: Manufacturer: syz [ 902.182057][ T5846] usb 4-1: SerialNumber: syz [ 902.198377][ T5846] usb 4-1: config 0 descriptor?? [ 902.714361][ T5846] radio-si470x 4-1:0.35: this is not a si470x device. [ 902.868967][ T5846] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 903.020921][ T5846] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 903.327413][ T5846] usb 4-1: USB disconnect, device number 47 [ 903.390509][ T5846] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 908.241597][T14208] sg_write: process 1930 (syz.3.2266) changed security contexts after opening file descriptor, this is not allowed. [ 909.882548][T14226] kvm: pic: non byte write [ 910.010512][T14220] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 914.462365][ T28] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 914.783018][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 914.827329][ T28] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 914.835915][ T28] usb 4-1: config 0 has no interface number 0 [ 914.868388][ T28] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 914.877709][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.895170][ T28] usb 4-1: Product: syz [ 914.899370][ T28] usb 4-1: Manufacturer: syz [ 914.949306][ T28] usb 4-1: SerialNumber: syz [ 914.975923][ T28] usb 4-1: config 0 descriptor?? [ 915.297977][ T28] radio-si470x 4-1:0.35: this is not a si470x device. [ 915.972075][ T28] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 916.173783][ T28] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 916.207568][ T28] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 917.027753][ T28] usb 4-1: USB disconnect, device number 48 [ 917.034832][ T28] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 919.572378][ T5846] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 919.764510][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 919.775936][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 919.792068][ T5846] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 919.802939][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 919.819594][ T5846] usb 2-1: SerialNumber: syz [ 919.999241][T14343] nfs: Deprecated parameter 'nointr' [ 920.021415][T14343] ntfs3: loop2: try to read out of volume at offset 0x0 [ 920.137031][T14344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2295'. [ 920.393913][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2295'. [ 920.408279][ T5846] usb 2-1: 0:2 : does not exist [ 920.419691][ T5846] usb 2-1: unit 5 not found! [ 920.469933][ T5846] usb 2-1: USB disconnect, device number 41 [ 920.590133][T14269] udevd[14269]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 923.494966][T14367] binder: 14366:14367 ioctl c0306201 0 returned -14 [ 923.812390][ T9966] Bluetooth: hci3: command 0x0406 tx timeout [ 924.692541][ T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 924.893634][T14380] nfs: Deprecated parameter 'nointr' [ 924.906896][T14380] ntfs3: loop2: try to read out of volume at offset 0x0 [ 924.988984][ T23] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 925.248985][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.280150][ T23] usb 2-1: Product: syz [ 925.294989][T14378] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2305'. [ 925.322313][ T23] usb 2-1: Manufacturer: syz [ 925.366214][ T23] usb 2-1: SerialNumber: syz [ 925.435548][ T23] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 925.546191][ T28] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 926.612687][ T28] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 926.640838][ T28] ath9k_htc: Failed to initialize the device [ 926.709426][ T28] usb 2-1: ath9k_htc: USB layer deinitialized [ 926.958276][ T5846] usb 2-1: USB disconnect, device number 42 [ 929.508296][T14417] binder: 14416:14417 ioctl c0306201 0 returned -14 [ 930.392709][T14429] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 930.400490][T14429] netlink: 'syz.0.2318': attribute type 10 has an invalid length. [ 930.416121][T14429] hsr0: entered promiscuous mode [ 930.424107][T14429] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 930.436269][T14429] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 930.446483][T14429] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 930.458864][T14429] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 930.568041][T14433] nfs: Deprecated parameter 'nointr' [ 930.621213][T14433] ntfs3: loop1: try to read out of volume at offset 0x0 [ 930.873462][T14436] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2317'. [ 930.888958][T14436] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'. [ 931.827011][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.852758][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.926135][T14458] overlayfs: failed to resolve './file0': -2 [ 934.497630][T14472] binder: 14471:14472 ioctl c0306201 0 returned -14 [ 935.902428][T14488] nfs: Deprecated parameter 'nointr' [ 935.945253][T14488] ntfs3: loop3: try to read out of volume at offset 0x0 [ 936.326272][T14484] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2332'. [ 936.336728][T14484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2332'. [ 936.582565][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 936.738526][T14495] program syz.3.2336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 936.764792][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.797965][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 936.845348][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 936.875907][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 936.910068][ T8] usb 1-1: SerialNumber: syz [ 937.158061][ T8] usb 1-1: 0:2 : does not exist [ 937.181090][ T8] usb 1-1: unit 5 not found! [ 937.246813][ T8] usb 1-1: USB disconnect, device number 28 [ 937.899390][T14504] overlayfs: failed to resolve './file0': -2 [ 938.194579][T14512] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 938.209725][T14512] netlink: 'syz.1.2342': attribute type 10 has an invalid length. [ 938.219977][T14512] hsr0: entered promiscuous mode [ 938.226683][T14512] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 938.238855][T14512] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 938.249013][T14512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 938.261378][T14512] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 938.808596][ T9966] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 938.865417][T13046] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 938.879322][T13046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 938.902310][T13046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 938.912061][T13046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 938.930535][T13046] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 938.941057][T13046] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 938.959474][T14525] binder: 14524:14525 ioctl c0306201 0 returned -14 [ 939.858688][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 939.868315][T14528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2345'. [ 940.987661][T14520] chnl_net:caif_netlink_parms(): no params data found [ 941.013410][ T9966] Bluetooth: hci3: command tx timeout [ 941.231567][T14546] overlayfs: failed to resolve './file0': -2 [ 941.627569][T14520] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.636145][T14520] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.658410][T14520] bridge_slave_0: entered allmulticast mode [ 941.680905][T14520] bridge_slave_0: entered promiscuous mode [ 941.707045][T14550] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 941.721053][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.739024][T14520] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.750160][T14520] bridge_slave_1: entered allmulticast mode [ 941.769286][T14520] bridge_slave_1: entered promiscuous mode [ 941.787737][T14550] netlink: 'syz.1.2350': attribute type 10 has an invalid length. [ 941.796374][T14550] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 941.808525][T14550] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 941.818693][T14550] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 941.831047][T14550] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 942.014178][T14520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.033595][T14520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.127427][T14520] team0: Port device team_slave_0 added [ 942.153874][T14520] team0: Port device team_slave_1 added [ 942.232857][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.253785][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.284118][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.301912][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.309982][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.752574][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.898156][T14520] hsr_slave_0: entered promiscuous mode [ 942.920115][T14520] hsr_slave_1: entered promiscuous mode [ 942.937863][T14520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.947832][T14520] Cannot create hsr debugfs directory [ 943.202712][ T9966] Bluetooth: hci3: command tx timeout [ 943.549128][T14566] netlink: set zone limit has 8 unknown bytes [ 943.643362][T14520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.700356][T14566] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2356'. [ 943.902277][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 944.102289][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 944.118563][ T23] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 944.130472][ T23] usb 1-1: config 0 has no interface number 0 [ 944.143766][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 944.153710][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.172674][ T23] usb 1-1: Product: syz [ 944.176938][ T23] usb 1-1: Manufacturer: syz [ 944.181544][ T23] usb 1-1: SerialNumber: syz [ 944.188664][ T23] usb 1-1: config 0 descriptor?? [ 944.401296][ T23] radio-si470x 1-1:0.35: this is not a si470x device. [ 944.458050][ T23] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 944.484245][ T23] usb 1-1: USB disconnect, device number 29 [ 944.932778][T14520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.966918][T14573] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 944.999055][T14573] netlink: 'syz.2.2358': attribute type 10 has an invalid length. [ 945.006932][T14573] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 945.019045][T14573] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 945.029241][T14573] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 945.041640][T14573] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 945.269509][ T9966] Bluetooth: hci3: command tx timeout [ 945.526949][T14520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.627480][T14568] syz.1.2356 (14568): drop_caches: 2 [ 945.635040][T14577] overlayfs: failed to resolve './file0': -2 [ 945.761575][T14520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.835191][T14581] binder: 14580:14581 ioctl c0306201 0 returned -14 [ 945.893144][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 946.076754][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 946.097001][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.105907][ T8] usb 3-1: Product: syz [ 946.109856][T14520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.110216][ T8] usb 3-1: Manufacturer: syz [ 946.135932][ T8] usb 3-1: SerialNumber: syz [ 946.156321][T14520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.167593][ T5822] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 946.178227][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 946.181689][T14520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 946.240034][T14520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.495269][ T5846] usb 3-1: USB disconnect, device number 46 [ 947.253891][ T5822] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 947.271877][ T5822] ath9k_htc: Failed to initialize the device [ 947.282773][ T5846] usb 3-1: ath9k_htc: USB layer deinitialized [ 947.332856][ T9966] Bluetooth: hci3: command tx timeout [ 947.344989][T14520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.370403][T14520] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.393680][T11113] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.400844][T11113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.416632][T11113] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.424005][T11113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.389366][T14520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.462835][ T5846] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 948.480474][T14520] veth0_vlan: entered promiscuous mode [ 948.494978][T14520] veth1_vlan: entered promiscuous mode [ 948.585030][T14520] veth0_macvtap: entered promiscuous mode [ 948.626396][T14520] veth1_macvtap: entered promiscuous mode [ 948.654089][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 948.665707][T14520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.677190][ T5846] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 948.699071][ T5846] usb 1-1: config 0 has no interface number 0 [ 948.709862][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.722893][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.735389][ T5846] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 948.745237][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.757660][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.766565][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.766620][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.766635][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.768212][T14520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.805023][ T5846] usb 1-1: Product: syz [ 948.805042][ T5846] usb 1-1: Manufacturer: syz [ 948.817280][ T5846] usb 1-1: SerialNumber: syz [ 948.825457][ T5846] usb 1-1: config 0 descriptor?? [ 948.834364][T14520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.844965][T14520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.854675][T14520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.865044][T14520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.168616][T14616] overlayfs: failed to resolve './file0': -2 [ 949.240927][ T5846] radio-si470x 1-1:0.35: this is not a si470x device. [ 949.509525][ T5846] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 949.563130][ T5846] usb 1-1: USB disconnect, device number 30 [ 949.568565][T11089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.609317][T11089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.651651][T11089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.660201][T11089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.863159][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 950.081480][ T8] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 950.481617][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 950.507982][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 950.525219][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 950.540908][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 950.628722][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.717104][ T8] usb 2-1: config 0 descriptor?? [ 950.748482][T14619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 950.770825][T14628] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 951.118769][ T5846] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 951.290183][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 951.312155][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 951.351003][ T8] usb 2-1: USB disconnect, device number 43 [ 951.388684][T14633] block device autoloading is deprecated and will be removed. [ 951.397450][T14634] block device autoloading is deprecated and will be removed. [ 951.478274][ T5846] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 951.498230][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.508375][ T5846] usb 4-1: Product: syz [ 951.514110][ T5846] usb 4-1: Manufacturer: syz [ 951.525737][ T5846] usb 4-1: SerialNumber: syz [ 951.544429][ T5846] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 951.571396][ T965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 951.793388][ T5846] usb 4-1: USB disconnect, device number 49 [ 952.380520][T14649] binder: 14648:14649 ioctl c0306201 0 returned -14 [ 952.760797][ T965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 952.771231][ T965] ath9k_htc: Failed to initialize the device [ 952.780537][ T5846] usb 4-1: ath9k_htc: USB layer deinitialized [ 954.044034][T14656] overlayfs: failed to resolve './file0': -2 [ 955.628364][T14672] netlink: 'syz.3.2385': attribute type 1 has an invalid length. [ 955.669657][T14672] netlink: 396 bytes leftover after parsing attributes in process `syz.3.2385'. [ 955.748045][ T5867] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 956.044558][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 956.151966][ T5867] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 956.207448][ T5867] usb 1-1: config 0 has no interface number 0 [ 956.311785][ T5867] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 956.372959][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.410532][ T5867] usb 1-1: Product: syz [ 956.429330][ T5867] usb 1-1: Manufacturer: syz [ 956.436394][ T5867] usb 1-1: SerialNumber: syz [ 956.480454][ T5867] usb 1-1: config 0 descriptor?? [ 957.255082][ T5867] radio-si470x 1-1:0.35: this is not a si470x device. [ 957.355114][ T5867] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 957.775718][ T5867] usb 1-1: USB disconnect, device number 31 [ 958.195308][T14694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.377483][T14694] batadv_slave_0: entered promiscuous mode [ 963.024030][ T54] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 963.262875][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 963.283261][ T54] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 963.291377][ T54] usb 3-1: config 0 has no interface number 0 [ 963.324912][ T54] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 963.342816][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.357720][ T54] usb 3-1: Product: syz [ 963.373754][ T54] usb 3-1: Manufacturer: syz [ 963.485311][ T54] usb 3-1: SerialNumber: syz [ 963.507458][ T54] usb 3-1: config 0 descriptor?? [ 964.331704][ T54] radio-si470x 3-1:0.35: this is not a si470x device. [ 964.385803][ T54] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 964.409880][ T54] usb 3-1: USB disconnect, device number 47 [ 965.243620][T14762] nfs: Deprecated parameter 'nointr' [ 965.465265][T14762] ntfs3: loop1: try to read out of volume at offset 0x0 [ 965.753424][T13046] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.764860][T13046] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.775254][T13046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.811833][T13046] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.820231][T13046] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 965.833707][T13046] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 966.436017][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.451465][ T54] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 966.499161][T14768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2405'. [ 966.546426][T14771] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2405'. [ 966.651161][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.727968][ T54] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 966.753138][ T54] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 966.772610][ T54] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 966.789246][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 966.811516][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.848088][ T54] usb 4-1: SerialNumber: syz [ 967.258188][ T54] usb 4-1: 0:2 : does not exist [ 967.266033][ T54] usb 4-1: unit 5 not found! [ 967.346838][ T54] usb 4-1: USB disconnect, device number 50 [ 967.458954][T14499] udevd[14499]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 967.528887][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.778564][T14775] chnl_net:caif_netlink_parms(): no params data found [ 968.344299][ T9966] Bluetooth: hci4: command tx timeout [ 969.954988][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.124539][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.142029][T14775] bridge_slave_0: entered allmulticast mode [ 970.212958][T14775] bridge_slave_0: entered promiscuous mode [ 970.276411][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.303957][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.311354][T14775] bridge_slave_1: entered allmulticast mode [ 970.326173][T14775] bridge_slave_1: entered promiscuous mode [ 970.344558][ T11] tipc: Disabling bearer [ 970.351825][ T11] tipc: Left network mode [ 970.373242][ T9966] Bluetooth: hci4: command tx timeout [ 970.514119][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 970.707411][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 970.709994][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.726409][ T8] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 970.736056][ T8] usb 2-1: config 0 has no interface number 0 [ 970.763373][ T8] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 970.781099][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.790233][ T8] usb 2-1: Product: syz [ 970.808558][ T8] usb 2-1: Manufacturer: syz [ 970.816299][ T8] usb 2-1: SerialNumber: syz [ 970.847585][ T8] usb 2-1: config 0 descriptor?? [ 971.169825][T14837] nfs: Deprecated parameter 'nointr' [ 971.189233][T14837] ntfs3: loop2: try to read out of volume at offset 0x0 [ 971.391134][ T8] radio-si470x 2-1:0.35: this is not a si470x device. [ 971.467543][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.508005][T14835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2417'. [ 971.554157][ T8] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 971.575113][ T8] usb 2-1: USB disconnect, device number 44 [ 971.669837][T14835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2417'. [ 971.822855][T14775] team0: Port device team_slave_0 added [ 971.891865][T14775] team0: Port device team_slave_1 added [ 972.047136][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.067678][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.150939][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.264390][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.271339][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.369227][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.452899][ T9966] Bluetooth: hci4: command tx timeout [ 972.698870][T14859] tmpfs: Bad value for 'mpol' [ 973.890720][T14775] hsr_slave_0: entered promiscuous mode [ 974.190095][T14775] hsr_slave_1: entered promiscuous mode [ 974.279212][T14775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.372909][T14775] Cannot create hsr debugfs directory [ 974.533292][ T9966] Bluetooth: hci4: command tx timeout [ 975.226554][T14884] nfs: Deprecated parameter 'nointr' [ 975.272014][T14884] ntfs3: loop3: try to read out of volume at offset 0x0 [ 975.725188][T14880] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2425'. [ 975.760299][T14880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2425'. [ 975.972860][ T11] hsr_slave_0: left promiscuous mode [ 976.006025][ T11] hsr_slave_1: left promiscuous mode [ 976.022945][ T11] bridge_slave_1: left allmulticast mode [ 976.035644][ T11] bridge_slave_1: left promiscuous mode [ 976.053252][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.105382][ T11] bridge_slave_0: left allmulticast mode [ 976.120797][ T11] bridge_slave_0: left promiscuous mode [ 976.132463][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.214495][ T11] veth1_macvtap: left promiscuous mode [ 976.220680][ T11] veth0_macvtap: left promiscuous mode [ 976.242517][ T11] veth1_vlan: left promiscuous mode [ 976.248179][ T11] veth0_vlan: left promiscuous mode [ 977.935475][ T11] team0 (unregistering): Port device team_slave_1 removed [ 978.039829][ T11] team0 (unregistering): Port device team_slave_0 removed [ 978.115734][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.213572][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.823098][ T11] bond0 (unregistering): Released all slaves [ 979.882906][ T5846] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 980.107562][ T5846] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 980.133960][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.144932][ T5846] usb 3-1: Product: syz [ 980.149124][ T5846] usb 3-1: Manufacturer: syz [ 980.176569][ T5846] usb 3-1: SerialNumber: syz [ 980.215450][ T5846] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 980.266334][ T5867] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 980.771057][ T11] IPVS: stop unused estimator thread 0... [ 981.332886][ T5867] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 981.362812][ T5867] ath9k_htc: Failed to initialize the device [ 981.489758][ T5867] usb 3-1: ath9k_htc: USB layer deinitialized [ 981.550913][T14775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.633210][T14775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.653932][T14775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 981.674139][T14775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 981.721091][ T5867] usb 3-1: USB disconnect, device number 48 [ 982.021936][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.069364][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.110046][T11088] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.117233][T11088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.203922][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.211348][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.466887][T14775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.698106][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.840306][T14775] veth0_vlan: entered promiscuous mode [ 983.958122][T14775] veth1_vlan: entered promiscuous mode [ 984.135850][T14775] veth0_macvtap: entered promiscuous mode [ 984.162132][T14775] veth1_macvtap: entered promiscuous mode [ 984.327351][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.409688][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.473106][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.488369][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.510966][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.551544][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.594737][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.621050][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.658672][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.796455][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.857739][T14775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.877511][T14775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.892704][T14775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.906065][T14775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.105582][T15001] program syz.2.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.013561][T14995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 986.054294][T14995] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 986.116038][T14995] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 986.124545][T14995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 986.141920][T14995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 986.187081][T14995] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 986.208695][T14995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 986.217618][T14995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 986.233218][T14995] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 986.259563][T14995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 986.282890][T14995] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 986.304073][T14995] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 986.478080][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.524636][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.595280][T11102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.604036][ T5867] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 986.627814][T11102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.642678][ T5822] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 986.795542][ T5867] usb 3-1: not running at top speed; connect to a high speed hub [ 986.813830][ T5867] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 986.834049][ T5822] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 986.859859][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.872585][ T5867] usb 3-1: config 1 interface 0 has no altsetting 0 [ 986.880243][ T5822] usb 4-1: Product: syz [ 986.890197][ T5822] usb 4-1: Manufacturer: syz [ 986.898303][ T5822] usb 4-1: SerialNumber: syz [ 986.906574][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 986.923159][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.944195][ T5822] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 986.966852][ T5867] usb 3-1: Product: syz [ 986.985177][ T965] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 987.005688][ T5867] usb 3-1: SerialNumber: syz [ 987.092315][ T9966] Bluetooth: hci0: command 0x0406 tx timeout [ 987.145919][T15034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.187687][T15034] batadv_slave_0: entered promiscuous mode [ 987.300761][ T5867] usbhid 3-1:1.0: can't add hid device: -71 [ 987.343859][ T5867] usbhid: probe of 3-1:1.0 failed with error -71 [ 987.399853][ T5867] usb 3-1: USB disconnect, device number 49 [ 988.132554][ T9966] Bluetooth: hci1: command 0x0406 tx timeout [ 988.150163][ T965] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 988.222295][ T9966] Bluetooth: hci3: command 0x0c1a tx timeout [ 988.238444][ T965] ath9k_htc: Failed to initialize the device [ 988.292301][ T9966] Bluetooth: hci4: command 0x0c1a tx timeout [ 988.376302][ T965] usb 4-1: ath9k_htc: USB layer deinitialized [ 988.569750][T13046] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 988.593623][T13046] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 988.603945][T13046] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.614811][T13046] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.624917][T13046] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 988.632525][ T23] usb 4-1: USB disconnect, device number 51 [ 988.638511][T13046] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.831141][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.959843][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.511084][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.621236][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.684170][T15053] chnl_net:caif_netlink_parms(): no params data found [ 990.043506][T15079] binder: 15078:15079 ioctl c0306201 0 returned -14 [ 990.089813][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.097282][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.116758][T15053] bridge_slave_0: entered allmulticast mode [ 990.129821][T15053] bridge_slave_0: entered promiscuous mode [ 990.212817][ T9966] Bluetooth: hci1: command 0x0406 tx timeout [ 990.292717][ T9966] Bluetooth: hci3: command 0x0c1a tx timeout [ 990.372818][ T9966] Bluetooth: hci4: command 0x0c1a tx timeout [ 990.436013][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.524084][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.543157][T15053] bridge_slave_1: entered allmulticast mode [ 990.561319][T15053] bridge_slave_1: entered promiscuous mode [ 990.692750][ T9966] Bluetooth: hci0: command tx timeout [ 990.735493][T15053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.752109][T15053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.821193][T15053] team0: Port device team_slave_0 added [ 990.831107][ T11] tipc: Disabling bearer [ 990.846270][ T11] tipc: Left network mode [ 990.853974][T15053] team0: Port device team_slave_1 added [ 990.967158][T15053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.989972][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.067887][T15053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.164776][T15053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.185310][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.322686][T15053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.330815][ T9966] Bluetooth: hci1: command 0x0406 tx timeout [ 992.393771][ T9966] Bluetooth: hci3: command 0x0c1a tx timeout [ 992.447331][T15053] hsr_slave_0: entered promiscuous mode [ 992.453792][ T9966] Bluetooth: hci4: command 0x0c1a tx timeout [ 992.522722][T15053] hsr_slave_1: entered promiscuous mode [ 992.772723][ T9966] Bluetooth: hci0: command tx timeout [ 993.095919][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.852512][ T9966] Bluetooth: hci0: command tx timeout [ 994.963335][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.163822][ T5846] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 996.426665][ T5846] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 996.521751][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.547881][ T5846] usb 3-1: Product: syz [ 996.558326][ T5846] usb 3-1: Manufacturer: syz [ 996.575730][ T5846] usb 3-1: SerialNumber: syz [ 996.593032][ T5846] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 996.610759][ T5867] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 996.680392][ T11] hsr_slave_0: left promiscuous mode [ 996.704149][ T11] hsr_slave_1: left promiscuous mode [ 996.741923][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.771134][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.791421][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.803259][ T11] bridge_slave_1: left allmulticast mode [ 996.810757][ T11] bridge_slave_1: left promiscuous mode [ 996.823469][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.841831][ T11] bridge_slave_0: left allmulticast mode [ 996.847922][ T11] bridge_slave_0: left promiscuous mode [ 996.857482][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.936616][ T9966] Bluetooth: hci0: command tx timeout [ 997.155973][ T11] veth1_macvtap: left promiscuous mode [ 997.217600][ T11] veth0_macvtap: left promiscuous mode [ 997.306525][ T11] veth1_vlan: left promiscuous mode [ 997.385093][ T11] veth0_vlan: left promiscuous mode [ 997.732587][ T5867] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 997.806620][ T5867] ath9k_htc: Failed to initialize the device [ 997.890124][ T5867] usb 3-1: ath9k_htc: USB layer deinitialized [ 998.142946][ T5867] usb 3-1: USB disconnect, device number 50 [ 998.773143][T15174] binder: 15173:15174 ioctl c0306201 0 returned -14 [ 999.279614][ T11] team0 (unregistering): Port device team_slave_1 removed [ 999.391426][ T11] team0 (unregistering): Port device team_slave_0 removed [ 999.463482][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.525764][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.255495][ T11] bond0 (unregistering): Released all slaves [ 1002.942621][ T5860] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1003.513390][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.523754][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1003.544016][ T5860] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1003.579111][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1003.607050][ T5860] usb 1-1: SerialNumber: syz [ 1003.664613][T15053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1003.699352][T15053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1003.724428][ T5860] usb 1-1: 0:2 : does not exist [ 1003.735510][T15053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1003.755783][T15053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1003.762830][ T5860] usb 1-1: unit 5 not found! [ 1004.103218][ T5860] usb 1-1: USB disconnect, device number 32 [ 1004.139826][ T11] IPVS: stop unused estimator thread 0... [ 1004.641439][T15193] udevd[15193]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.861132][T15053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1004.911004][T15053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.967531][T11089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.975406][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.991333][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.998449][T11114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.142674][ T5860] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1006.217760][ T5860] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1006.232314][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.240342][ T5860] usb 4-1: Product: syz [ 1006.270747][ T5860] usb 4-1: Manufacturer: syz [ 1006.304301][ T5860] usb 4-1: SerialNumber: syz [ 1006.331112][ T5860] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1006.369971][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1006.564811][T15053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.758217][T15053] veth0_vlan: entered promiscuous mode [ 1006.873898][T15053] veth1_vlan: entered promiscuous mode [ 1007.020143][T15053] veth0_macvtap: entered promiscuous mode [ 1007.093716][T15053] veth1_macvtap: entered promiscuous mode [ 1007.124401][T15053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.259127][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.281377][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.344587][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.383891][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.424073][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1007.439086][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.454047][ T23] ath9k_htc: Failed to initialize the device [ 1007.492791][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.518593][ T23] usb 4-1: ath9k_htc: USB layer deinitialized [ 1007.526140][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1007.602729][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1007.628060][T15053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.706691][T15053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.721188][T15053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.738564][ T23] usb 4-1: USB disconnect, device number 52 [ 1007.739722][T15053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.760172][T15053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.858314][T15259] binder: 15258:15259 ioctl c0306201 0 returned -14 [ 1008.325025][T11114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.370147][T11114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.419293][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.428988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.317874][T15289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.357490][T15289] batadv_slave_0: entered promiscuous mode [ 1011.472713][ T5846] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1011.637650][T13046] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1011.662061][T13046] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1011.663069][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 1011.683740][T13046] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1011.693464][ T5846] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1011.703777][ T5846] usb 1-1: config 0 has no interface number 0 [ 1011.713530][T13046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1011.722965][T13046] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1011.730695][ T5846] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1011.741215][T13046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1011.748861][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.758177][ T5846] usb 1-1: Product: syz [ 1011.763851][ T5846] usb 1-1: Manufacturer: syz [ 1011.768985][ T5846] usb 1-1: SerialNumber: syz [ 1011.782949][ T5846] usb 1-1: config 0 descriptor?? [ 1011.805985][ T5846] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1011.820896][T11113] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.832777][ T5846] usb 1-1: selecting invalid altsetting 1 [ 1011.832800][ T5846] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1011.835558][ T5846] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1011.858794][ T5846] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1011.867839][ T5846] usb 1-1: media controller created [ 1011.890719][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1011.922758][ T965] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1011.925900][T11113] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.945837][T15299] binder: 15298:15299 ioctl c0306201 0 returned -14 [ 1011.998882][T11113] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.049723][T11113] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.121022][ T965] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1012.141006][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.150283][ T965] usb 2-1: Product: syz [ 1012.159048][ T965] usb 2-1: Manufacturer: syz [ 1012.171177][ T965] usb 2-1: SerialNumber: syz [ 1012.226521][ T965] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1012.250006][ T5822] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1012.501832][T15292] chnl_net:caif_netlink_parms(): no params data found [ 1012.597795][T11113] tipc: Disabling bearer [ 1012.615970][T11113] tipc: Left network mode [ 1013.012938][ T5846] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1013.045486][ T5846] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1013.083277][T15302] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1013.122867][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.144879][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.169663][T15292] bridge_slave_0: entered allmulticast mode [ 1013.204916][ T5846] usb 1-1: USB disconnect, device number 33 [ 1013.234574][T15292] bridge_slave_0: entered promiscuous mode [ 1013.314863][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.332537][ T5822] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1013.344643][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.355366][ T5822] ath9k_htc: Failed to initialize the device [ 1013.373106][T15292] bridge_slave_1: entered allmulticast mode [ 1013.390133][T15292] bridge_slave_1: entered promiscuous mode [ 1013.403990][ T5822] usb 2-1: ath9k_htc: USB layer deinitialized [ 1013.561636][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.630417][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.640260][ T5822] usb 2-1: USB disconnect, device number 45 [ 1013.814210][T13046] Bluetooth: hci1: command tx timeout [ 1014.064881][T15292] team0: Port device team_slave_0 added [ 1014.088451][T15327] Bluetooth: MGMT ver 1.22 [ 1014.105832][T15292] team0: Port device team_slave_1 added [ 1014.213514][T15292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.220505][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.303967][T15292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.817374][T15292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.900181][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.142806][T15292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.357191][T15292] hsr_slave_0: entered promiscuous mode [ 1015.395286][T15292] hsr_slave_1: entered promiscuous mode [ 1015.432515][T15292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1015.450312][T15292] Cannot create hsr debugfs directory [ 1015.861536][T11113] hsr_slave_0: left promiscuous mode [ 1015.893890][T13046] Bluetooth: hci1: command tx timeout [ 1015.893928][T11113] hsr_slave_1: left promiscuous mode [ 1015.962364][T11113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.009935][T11113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.030611][T11113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.059580][T11113] bridge_slave_1: left allmulticast mode [ 1016.072982][T11113] bridge_slave_1: left promiscuous mode [ 1016.087157][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.127254][T11113] bridge_slave_0: left allmulticast mode [ 1016.147138][T11113] bridge_slave_0: left promiscuous mode [ 1016.160420][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.257085][T11113] veth1_macvtap: left promiscuous mode [ 1016.270816][T11113] veth0_macvtap: left promiscuous mode [ 1016.282668][T11113] veth1_vlan: left promiscuous mode [ 1016.296510][T11113] veth0_vlan: left promiscuous mode [ 1016.561627][T15369] binder: 15368:15369 ioctl c0306201 0 returned -14 [ 1017.112279][ T5860] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1017.317426][ T5860] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1017.332616][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.352203][ T5860] usb 2-1: Product: syz [ 1017.367939][ T5860] usb 2-1: Manufacturer: syz [ 1017.377727][ T5860] usb 2-1: SerialNumber: syz [ 1017.433542][ T5860] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1017.489994][ T54] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1017.656534][T11113] team0 (unregistering): Port device team_slave_1 removed [ 1017.744644][T11113] team0 (unregistering): Port device team_slave_0 removed [ 1017.811294][T11113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.877943][T11113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.972792][T13046] Bluetooth: hci1: command tx timeout [ 1018.546233][ T54] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1018.563674][ T54] ath9k_htc: Failed to initialize the device [ 1018.594084][ T54] usb 2-1: ath9k_htc: USB layer deinitialized [ 1018.742025][T11113] bond0 (unregistering): Released all slaves [ 1018.835679][T15021] usb 2-1: USB disconnect, device number 46 [ 1020.060698][T11113] IPVS: stop unused estimator thread 0... [ 1020.113025][T13046] Bluetooth: hci1: command tx timeout [ 1023.005544][T15422] binder: 15421:15422 ioctl c0306201 0 returned -14 [ 1023.289160][T15292] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1023.321644][T15292] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1023.340332][T15292] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1023.375209][T15292] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1023.382854][ T5822] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1023.611333][ T5822] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1023.630174][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.661810][ T5822] usb 2-1: Product: syz [ 1023.668363][ T5822] usb 2-1: Manufacturer: syz [ 1023.683776][ T5822] usb 2-1: SerialNumber: syz [ 1023.710434][ T5822] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1023.739149][T15021] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1023.759116][T15292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.804701][T15439] tipc: Started in network mode [ 1023.823392][T15439] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1023.857154][T15439] tipc: Enabled bearer , priority 0 [ 1023.932452][T15292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.991761][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.998918][T11114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.051310][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.058508][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.857509][T15021] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1024.896636][T15021] ath9k_htc: Failed to initialize the device [ 1024.967377][T15021] usb 2-1: ath9k_htc: USB layer deinitialized [ 1024.982294][ T5860] tipc: Node number set to 11578026 [ 1025.072945][T15292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.197188][ T54] usb 2-1: USB disconnect, device number 47 [ 1025.225970][T15292] veth0_vlan: entered promiscuous mode [ 1025.268090][T15292] veth1_vlan: entered promiscuous mode [ 1025.327276][T15464] program syz.3.2512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1025.608135][T15292] veth0_macvtap: entered promiscuous mode [ 1025.767505][T15292] veth1_macvtap: entered promiscuous mode [ 1025.861951][T15292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.895744][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.937669][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.966999][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.987777][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.009678][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.032910][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.053436][T15292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1026.074099][T15472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1026.081804][T15292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1026.098659][T15292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.112436][ T5860] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1026.129013][T15472] netlink: 'syz.1.2514': attribute type 10 has an invalid length. [ 1026.144491][T15472] hsr0: entered promiscuous mode [ 1026.187919][T15472] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1026.204921][T15472] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1026.218282][T15472] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1026.235139][T15472] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1026.256277][T15292] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.303369][T15292] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.332520][T15292] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.337735][ T5860] usb 4-1: not running at top speed; connect to a high speed hub [ 1026.361203][T15292] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.378540][ T5860] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.414711][ T5860] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1026.448910][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1026.485655][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.499233][ T5860] usb 4-1: Product: syz [ 1026.504996][ T5860] usb 4-1: SerialNumber: syz [ 1026.793689][ T5860] usbhid 4-1:1.0: can't add hid device: -71 [ 1026.818046][ T5860] usbhid: probe of 4-1:1.0 failed with error -71 [ 1026.837517][T11088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.865941][ T5860] usb 4-1: USB disconnect, device number 53 [ 1026.872003][T11088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.034160][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.231236][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.242947][T15492] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1030.410062][T15540] program syz.0.2525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.473527][ T5867] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1030.504959][T15492] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1030.515872][T15492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.524434][T15492] usb 2-1: Product: syz [ 1030.528723][T15492] usb 2-1: Manufacturer: syz [ 1030.543043][T15492] usb 2-1: SerialNumber: syz [ 1030.580262][T15492] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1030.695156][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 1030.728435][ T28] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1030.827171][ T5867] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1030.902765][ T5867] usb 3-1: config 0 has no interface number 0 [ 1030.928017][ T5867] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1030.952907][ T5846] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1030.971572][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.009883][ T5867] usb 3-1: Product: syz [ 1031.027716][ T5867] usb 3-1: Manufacturer: syz [ 1031.045378][ T5867] usb 3-1: SerialNumber: syz [ 1031.122079][ T5867] usb 3-1: config 0 descriptor?? [ 1031.416592][T15552] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1031.918079][ T5867] radio-si470x 3-1:0.35: this is not a si470x device. [ 1032.054303][ T28] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1032.061516][ T28] ath9k_htc: Failed to initialize the device [ 1032.073209][ T5867] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1032.080479][ T5846] usb 1-1: not running at top speed; connect to a high speed hub [ 1032.095483][ T28] usb 2-1: ath9k_htc: USB layer deinitialized [ 1032.115325][ T5846] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1032.167735][ T5867] usb 3-1: USB disconnect, device number 51 [ 1032.195247][ T5846] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1032.220768][ T5846] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1032.237093][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.249404][ T5846] usb 1-1: Product: syz [ 1032.258203][ T5846] usb 1-1: SerialNumber: syz [ 1032.377765][ T965] usb 2-1: USB disconnect, device number 48 [ 1032.792066][ T5846] usbhid 1-1:1.0: can't add hid device: -71 [ 1032.799065][ T5846] usbhid: probe of 1-1:1.0 failed with error -71 [ 1032.836500][ T5846] usb 1-1: USB disconnect, device number 34 [ 1033.980032][T15582] tipc: Started in network mode [ 1033.985611][T15582] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1034.033054][T15582] tipc: Enabled bearer , priority 0 [ 1035.178788][ T5846] tipc: Node number set to 11578026 [ 1035.203401][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1035.812816][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1035.820073][ T8] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1035.850980][ T8] usb 1-1: config 0 has no interface number 0 [ 1035.896185][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1035.930860][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.949612][ T8] usb 1-1: Product: syz [ 1035.961688][ T8] usb 1-1: Manufacturer: syz [ 1035.983126][ T8] usb 1-1: SerialNumber: syz [ 1036.003106][ T8] usb 1-1: config 0 descriptor?? [ 1036.122964][ T5846] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1036.251139][ T8] radio-si470x 1-1:0.35: this is not a si470x device. [ 1036.309938][ T8] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1036.322719][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1036.343610][ T8] usb 1-1: USB disconnect, device number 35 [ 1036.360729][ T5846] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1036.399036][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.420400][ T5846] usb 2-1: config 0 has no interface number 0 [ 1036.431395][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 1036.441510][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 1036.450354][ T5846] usb 2-1: Product: syz [ 1036.455273][ T5846] usb 2-1: SerialNumber: syz [ 1036.462975][ T5846] usb 2-1: config 0 descriptor?? [ 1036.470544][ T5846] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1036.477444][ T5846] usb 2-1: No valid video chain found. [ 1038.463265][ T8] usb 2-1: USB disconnect, device number 49 [ 1038.543349][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2548'. [ 1038.585498][T15646] IPVS: Unknown mcast interface: vetN1_macvtap [ 1044.671394][T15712] program syz.1.2566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1045.252496][ T8] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1046.291896][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1046.446477][ T8] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1046.564202][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1046.590732][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1046.620640][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.638885][ T8] usb 2-1: Product: syz [ 1046.662861][ T8] usb 2-1: SerialNumber: syz [ 1046.796193][T15731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1046.814610][T15731] IPVS: Unknown mcast interface: vetN1_macvtap [ 1046.935132][ T8] usbhid 2-1:1.0: can't add hid device: -71 [ 1046.941110][ T8] usbhid: probe of 2-1:1.0 failed with error -71 [ 1047.008967][ T8] usb 2-1: USB disconnect, device number 50 [ 1049.709538][T15760] overlayfs: missing 'lowerdir' [ 1051.728594][T15779] program syz.2.2582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.654787][T11088] Bluetooth: hci2: Frame reassembly failed (-84) [ 1054.192265][ T54] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1054.538789][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.545966][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.820271][T15807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1054.829135][T15807] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1054.888238][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.971743][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.986213][ T54] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1054.996722][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1055.007193][ T54] usb 3-1: SerialNumber: syz [ 1055.552489][ T54] usb 3-1: 0:2 : does not exist [ 1055.613591][ T54] usb 3-1: unit 5 not found! [ 1055.643499][ T54] usb 3-1: USB disconnect, device number 52 [ 1055.652862][ T9966] Bluetooth: hci2: command 0x1003 tx timeout [ 1055.661894][T13046] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1056.475311][T15793] udevd[15793]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.605888][T15831] program syz.1.2594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.161790][T15836] ======================================================= [ 1058.161790][T15836] WARNING: The mand mount option has been deprecated and [ 1058.161790][T15836] and is ignored by this kernel. Remove the mand [ 1058.161790][T15836] option from the mount to silence this warning. [ 1058.161790][T15836] ======================================================= [ 1061.703801][T15866] tipc: Started in network mode [ 1061.740008][T15866] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1061.768552][T15866] tipc: Enabled bearer , priority 0 [ 1062.004907][T15873] program syz.0.2607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.312920][T15021] tipc: Node number set to 11578026 [ 1063.442847][T15880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.470689][T15880] batadv_slave_0: entered promiscuous mode [ 1065.870375][ T965] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1066.075560][ T965] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.075584][ T965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.193095][ T965] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1066.193122][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1066.193132][ T965] usb 2-1: SerialNumber: syz [ 1066.399174][T15926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2620'. [ 1066.448436][ T965] usb 2-1: 0:2 : does not exist [ 1066.482782][ T965] usb 2-1: unit 5 not found! [ 1066.623744][ T965] usb 2-1: USB disconnect, device number 51 [ 1066.651679][T11108] tipc: Disabling bearer [ 1066.701214][T15926] IPVS: Unknown mcast interface: ipvla [ 1066.710937][T11108] tipc: Left network mode [ 1066.757910][T15914] udevd[15914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1069.580355][T15964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2630'. [ 1069.643865][T15964] IPVS: Unknown mcast interface: ipvla [ 1069.748005][T11108] hsr_slave_0: left promiscuous mode [ 1069.826044][T11108] hsr_slave_1: left promiscuous mode [ 1069.872265][T11108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.888377][T11108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.938222][T11108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.050772][T11108] bridge_slave_1: left allmulticast mode [ 1070.792674][T11108] bridge_slave_1: left promiscuous mode [ 1070.809548][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.840767][T11108] bridge_slave_0: left allmulticast mode [ 1070.848333][T11108] bridge_slave_0: left promiscuous mode [ 1070.901366][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.942309][ T54] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1071.065115][T11108] veth1_macvtap: left promiscuous mode [ 1071.070679][T11108] veth0_macvtap: left allmulticast mode [ 1071.080057][T11108] veth0_macvtap: left promiscuous mode [ 1071.089523][T11108] veth1_vlan: left promiscuous mode [ 1071.095050][ T54] usb 1-1: device descriptor read/64, error -71 [ 1071.109309][T11108] veth0_vlan: left promiscuous mode [ 1071.324553][T15975] nfs: Deprecated parameter 'nointr' [ 1071.372491][ T54] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1071.402696][T15975] ntfs3: loop2: try to read out of volume at offset 0x0 [ 1071.562541][ T54] usb 1-1: device descriptor read/64, error -71 [ 1071.684591][ T54] usb usb1-port1: attempt power cycle [ 1072.112356][ T54] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1072.174038][ T54] usb 1-1: device descriptor read/8, error -71 [ 1072.472356][ T54] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1072.512971][ T54] usb 1-1: device descriptor read/8, error -71 [ 1072.643156][ T54] usb usb1-port1: unable to enumerate USB device [ 1074.818820][T15999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2639'. [ 1075.981223][T16015] program syz.3.2642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1076.435754][T11108] team0 (unregistering): Port device team_slave_1 removed [ 1076.493081][T11108] team0 (unregistering): Port device team_slave_0 removed [ 1076.541844][T11108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.592002][T11108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.702245][ T5846] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 1077.135333][ T5846] usb 4-1: not running at top speed; connect to a high speed hub [ 1077.294422][ T5846] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1077.307308][ T5846] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1077.329709][ T5846] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1077.338902][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.347328][ T5846] usb 4-1: Product: syz [ 1077.351578][ T5846] usb 4-1: SerialNumber: syz [ 1077.685116][T11108] bond0 (unregistering): Released all slaves [ 1077.772645][T15973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2633'. [ 1077.782311][T15980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2633'. [ 1077.795549][T15999] IPVS: Unknown mcast interface: ipvla [ 1077.871796][ T5846] usbhid 4-1:1.0: can't add hid device: -71 [ 1077.901407][ T5846] usbhid: probe of 4-1:1.0 failed with error -71 [ 1077.930333][ T5846] usb 4-1: USB disconnect, device number 54 [ 1079.568562][T11108] IPVS: stop unused estimator thread 0... [ 1082.846396][T16081] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1084.700391][T16101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2669'. [ 1084.723938][T16101] IPVS: Unknown mcast interface: ipvlan [ 1088.596496][T16130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2678'. [ 1088.606920][T16130] IPVS: Unknown mcast interface: ipvlan [ 1088.632419][ T965] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1089.492338][ T965] usb 4-1: Using ep0 maxpacket: 32 [ 1089.502003][ T965] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1089.565874][ T965] usb 4-1: config 0 has no interface number 0 [ 1089.580527][ T965] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1089.592524][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.600731][ T965] usb 4-1: Product: syz [ 1089.612188][ T965] usb 4-1: Manufacturer: syz [ 1089.617793][ T965] usb 4-1: SerialNumber: syz [ 1089.633232][ T965] usb 4-1: config 0 descriptor?? [ 1089.894446][ T965] radio-si470x 4-1:0.35: this is not a si470x device. [ 1090.665245][ T965] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 1090.895434][ T965] usb 4-1: USB disconnect, device number 55 [ 1094.120535][T16177] fuse: Bad value for 'group_id' [ 1094.542207][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2692'. [ 1094.824844][T16182] netlink: 'syz.3.2688': attribute type 21 has an invalid length. [ 1094.841924][T16182] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2688'. [ 1094.893461][T16182] netlink: 'syz.3.2688': attribute type 4 has an invalid length. [ 1094.901208][T16182] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2688'. [ 1094.990524][T16187] batadv1: entered promiscuous mode [ 1095.050157][T16187] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1097.551519][T16218] Bluetooth: MGMT ver 1.22 [ 1097.941414][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'. [ 1098.054459][T16226] program syz.3.2702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1098.582332][T15021] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1098.773656][T16233] 9pnet_fd: Insufficient options for proto=fd [ 1098.805215][T15021] usb 4-1: not running at top speed; connect to a high speed hub [ 1098.832459][T15021] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.865523][T15021] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1098.889120][T15021] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1098.907831][T15021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.925464][T15021] usb 4-1: Product: syz [ 1098.939037][T15021] usb 4-1: SerialNumber: syz [ 1099.315516][T15021] usbhid 4-1:1.0: can't add hid device: -71 [ 1099.322479][T15021] usbhid: probe of 4-1:1.0 failed with error -71 [ 1099.337859][T15021] usb 4-1: USB disconnect, device number 56 [ 1099.454352][T16238] tipc: Enabling of bearer rejected, already enabled [ 1103.797552][T16265] syz.3.2713: attempt to access beyond end of device [ 1103.797552][T16265] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1103.888069][T16265] FAT-fs (loop3): unable to read boot sector [ 1104.085606][T13046] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1104.472371][T15021] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1104.662243][T15021] usb 2-1: Using ep0 maxpacket: 32 [ 1104.844381][T15021] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1104.857150][T15021] usb 2-1: config 0 has no interface number 0 [ 1104.981895][T16281] overlayfs: missing 'workdir' [ 1105.675126][T15021] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1105.710531][T15021] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.867762][T15021] usb 2-1: Product: syz [ 1105.903352][T15021] usb 2-1: Manufacturer: syz [ 1105.973912][T15021] usb 2-1: SerialNumber: syz [ 1105.994806][T15021] usb 2-1: config 0 descriptor?? [ 1106.029116][T16289] tipc: Enabling of bearer rejected, already enabled [ 1106.086559][T16288] 9pnet_fd: Insufficient options for proto=fd [ 1106.289232][T15021] radio-si470x 2-1:0.35: this is not a si470x device. [ 1106.343002][T15021] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 1106.610616][T15021] usb 2-1: USB disconnect, device number 52 [ 1112.692352][T15492] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1113.018099][T16254] Bluetooth: hci0: command 0x0406 tx timeout [ 1113.181369][T15492] usb 3-1: Using ep0 maxpacket: 32 [ 1113.219953][T15492] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1113.253984][T15492] usb 3-1: config 0 has no interface number 0 [ 1113.341246][T15492] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1113.407872][T15492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.480906][T15492] usb 3-1: Product: syz [ 1113.524044][T15492] usb 3-1: Manufacturer: syz [ 1113.572268][T15492] usb 3-1: SerialNumber: syz [ 1113.671762][T15492] usb 3-1: config 0 descriptor?? [ 1113.935108][T15492] radio-si470x 3-1:0.35: this is not a si470x device. [ 1113.987557][T15492] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 1114.249252][T15492] usb 3-1: USB disconnect, device number 53 [ 1114.850327][T16359] tipc: Enabling of bearer rejected, already enabled [ 1114.852806][T16362] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1116.219295][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.228918][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.162206][T16439] tipc: Enabling of bearer rejected, already enabled [ 1124.263917][T16449] nfs: Deprecated parameter 'nointr' [ 1124.303791][T16449] ntfs3: loop3: try to read out of volume at offset 0x0 [ 1124.753075][T16451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1124.786830][T16452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2764'. [ 1126.586699][T16471] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1127.464377][T16477] program syz.2.2773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.197866][ T8] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1128.437829][ T8] usb 3-1: not running at top speed; connect to a high speed hub [ 1128.455956][ T8] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1128.470403][ T8] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1128.481359][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1128.490953][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.499560][ T8] usb 3-1: Product: syz [ 1128.504396][ T8] usb 3-1: SerialNumber: syz [ 1128.795001][ T8] usbhid 3-1:1.0: can't add hid device: -71 [ 1128.801001][ T8] usbhid: probe of 3-1:1.0 failed with error -71 [ 1128.841052][ T8] usb 3-1: USB disconnect, device number 54 [ 1128.933118][T16494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 1132.216545][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 1133.229562][T16546] program syz.3.2791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1133.812434][ T28] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1134.093488][ T28] usb 4-1: not running at top speed; connect to a high speed hub [ 1134.117911][ T28] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1134.146826][ T28] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1134.177408][ T28] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 1134.199518][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.222504][ T28] usb 4-1: Product: syz [ 1134.226743][ T28] usb 4-1: SerialNumber: syz [ 1134.538996][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1134.757112][ T28] usbhid 4-1:1.0: can't add hid device: -71 [ 1134.782689][ T28] usbhid: probe of 4-1:1.0 failed with error -71 [ 1134.791561][ T28] usb 4-1: USB disconnect, device number 57 [ 1134.923819][T16568] syz.1.2798: attempt to access beyond end of device [ 1134.923819][T16568] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1134.937149][T16568] FAT-fs (loop1): unable to read boot sector [ 1136.658401][ C1] Unknown status report in ack skb [ 1137.041352][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 1138.105294][T16613] nfs: Deprecated parameter 'nointr' [ 1138.149285][T16613] ntfs3: loop3: try to read out of volume at offset 0x0 [ 1138.301993][T16619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1138.444897][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2813'. [ 1138.539960][T13046] Bluetooth: hci1: command 0x0406 tx timeout [ 1139.330022][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'. [ 1139.382602][T16639] tmpfs: Bad value for 'mpol' [ 1139.832320][ T28] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1140.127018][ T28] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1140.136983][ T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.148908][ T28] usb 4-1: Product: syz [ 1140.154514][ T28] usb 4-1: Manufacturer: syz [ 1140.159425][ T28] usb 4-1: SerialNumber: syz [ 1140.228671][ T28] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1140.408659][ T54] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1141.577713][ T54] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1141.627806][ T54] ath9k_htc: Failed to initialize the device [ 1141.681523][T16675] nfs: Deprecated parameter 'nointr' [ 1141.700765][T16675] ntfs3: loop1: try to read out of volume at offset 0x0 [ 1141.800687][ T54] usb 4-1: ath9k_htc: USB layer deinitialized [ 1142.047845][ T28] usb 4-1: USB disconnect, device number 58 [ 1142.201426][T16672] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1142.211133][T16672] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1142.248900][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 1144.581100][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1144.960042][T16717] nfs: Deprecated parameter 'nointr' [ 1145.004684][T16717] ntfs3: loop1: try to read out of volume at offset 0x0 [ 1145.297144][T16718] syz.3.2838: attempt to access beyond end of device [ 1145.297144][T16718] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1145.310251][T16718] FAT-fs (loop3): unable to read boot sector [ 1145.854466][T16725] tmpfs: Bad value for 'mpol' [ 1146.005998][T16724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1146.142489][T16711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1146.872828][T15021] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1147.275083][T15021] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1147.371640][T15021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.601769][T15021] usb 4-1: Product: syz [ 1147.610437][T15021] usb 4-1: Manufacturer: syz [ 1147.635836][T15021] usb 4-1: SerialNumber: syz [ 1147.712574][T15021] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1147.741861][ T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1148.716722][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1149.253003][ T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1149.280752][ T8] ath9k_htc: Failed to initialize the device [ 1149.324174][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 1150.270429][T15492] usb 4-1: USB disconnect, device number 59 [ 1150.401441][T16795] tmpfs: Bad value for 'mpol' [ 1150.674953][T16786] syz.2.2850: attempt to access beyond end of device [ 1150.674953][T16786] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1150.689384][T16786] FAT-fs (loop2): unable to read boot sector [ 1152.222053][ C1] ------------[ cut here ]------------ [ 1152.227596][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 1152.237414][ C1] Modules linked in: [ 1152.241589][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1152.248669][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1152.258773][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1152.265168][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 1152.284844][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1152.290937][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801ba73c00 [ 1152.298960][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1152.307001][ C1] RBP: 0000000000000000 R08: ffff88801ba73c00 R09: 0000000000000003 [ 1152.315039][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bd6a3c0 [ 1152.323064][ C1] R13: dffffc0000000000 R14: ffff88805bd6a8b0 R15: ffff888024379024 [ 1152.331064][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1152.340073][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1152.346702][ C1] CR2: 000000110c443e46 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1152.354808][ C1] Call Trace: [ 1152.358084][ C1] [ 1152.360919][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1152.366544][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 1152.372147][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1152.378934][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1152.384495][ C1] __iterate_interfaces+0x243/0x500 [ 1152.389686][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1152.395956][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1152.396549][ T7236] ------------[ cut here ]------------ [ 1152.403198][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1152.403246][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1152.403277][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1152.403302][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1152.403324][ C1] ? hw_scan_work+0xf40/0xf40 [ 1152.403349][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1152.409054][ T7236] WARNING: CPU: 0 PID: 7236 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 1152.415317][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1152.415352][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1152.415375][ C1] handle_softirqs+0x280/0x820 [ 1152.415398][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1152.415424][ C1] ? do_softirq+0x180/0x180 [ 1152.415447][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1152.422498][ T7236] Modules linked in: [ 1152.427639][ C1] __irq_exit_rcu+0xc7/0x190 [ 1152.427663][ C1] ? irq_exit_rcu+0x20/0x20 [ 1152.427689][ C1] irq_exit_rcu+0x9/0x20 [ 1152.427706][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1152.427732][ C1] [ 1152.427740][ C1] [ 1152.427749][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1152.427771][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1152.427797][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1152.427815][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1152.427836][ C1] RAX: 6036f6855e1b2600 RBX: ffffffff8161923b RCX: 6036f6855e1b2600 [ 1152.427850][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 1152.427866][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1152.427882][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8f28 [ 1152.427898][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374e780 [ 1152.427923][ C1] ? do_idle+0x1eb/0x510 [ 1152.427956][ C1] default_idle+0x13/0x20 [ 1152.427983][ C1] default_idle_call+0x6c/0xa0 [ 1152.428011][ C1] do_idle+0x1eb/0x510 [ 1152.428039][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1152.428061][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1152.428089][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1152.428124][ C1] cpu_startup_entry+0x43/0x60 [ 1152.428148][ C1] start_secondary+0xee/0xf0 [ 1152.428169][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1152.428211][ C1] [ 1152.428222][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1152.428233][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1152.428251][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1152.428262][ C1] Call Trace: [ 1152.428269][ C1] [ 1152.428276][ C1] dump_stack_lvl+0x16c/0x230 [ 1152.428302][ C1] ? show_regs_print_info+0x20/0x20 [ 1152.428325][ C1] ? load_image+0x3b0/0x3b0 [ 1152.428354][ C1] panic+0x2c0/0x710 [ 1152.428381][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1152.428414][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 1152.428444][ C1] __warn+0x2e0/0x470 [ 1152.428467][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428496][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428522][ C1] report_bug+0x2be/0x4f0 [ 1152.428544][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428571][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428598][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 1152.428625][ C1] handle_bug+0xcf/0x120 [ 1152.428647][ C1] exc_invalid_op+0x1a/0x50 [ 1152.428668][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1152.428693][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1152.428721][ C1] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 1152.428736][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 1152.428752][ C1] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88801ba73c00 [ 1152.428766][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1152.428777][ C1] RBP: 0000000000000000 R08: ffff88801ba73c00 R09: 0000000000000003 [ 1152.428789][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805bd6a3c0 [ 1152.428800][ C1] R13: dffffc0000000000 R14: ffff88805bd6a8b0 R15: ffff888024379024 [ 1152.428818][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1152.428846][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428878][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1152.428912][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 1152.428947][ C1] ieee80211_beacon_get_tim+0xb8/0x560 [ 1152.428978][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1152.429016][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1152.429045][ C1] __iterate_interfaces+0x243/0x500 [ 1152.429066][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1152.429088][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1152.429112][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1152.429134][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1152.429159][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1152.429181][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 1152.429207][ C1] ? hw_scan_work+0xf40/0xf40 [ 1152.429235][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1152.429253][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1152.429283][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1152.429307][ C1] handle_softirqs+0x280/0x820 [ 1152.429328][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1152.429351][ C1] ? do_softirq+0x180/0x180 [ 1152.429372][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1152.429397][ C1] __irq_exit_rcu+0xc7/0x190 [ 1152.429415][ C1] ? irq_exit_rcu+0x20/0x20 [ 1152.429440][ C1] irq_exit_rcu+0x9/0x20 [ 1152.429455][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1152.429479][ C1] [ 1152.429484][ C1] [ 1152.429492][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1152.429510][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1152.429534][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 36 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1152.429549][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1152.429563][ C1] RAX: 6036f6855e1b2600 RBX: ffffffff8161923b RCX: 6036f6855e1b2600 [ 1152.429576][ C1] RDX: 0000000000000001 RSI: ffffffff8aaaba20 RDI: ffffffff8afc7040 [ 1152.429589][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 1152.429603][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8f28 [ 1152.429617][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100374e780 [ 1152.429632][ C1] ? do_idle+0x1eb/0x510 [ 1152.429660][ C1] default_idle+0x13/0x20 [ 1152.429685][ C1] default_idle_call+0x6c/0xa0 [ 1152.429711][ C1] do_idle+0x1eb/0x510 [ 1152.429736][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1152.429755][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1152.429781][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1152.429813][ C1] cpu_startup_entry+0x43/0x60 [ 1152.429834][ C1] start_secondary+0xee/0xf0 [ 1152.429851][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1152.429889][ C1] [ 1152.433743][ C1] Kernel Offset: disabled