last executing test programs: 14m36.105896804s ago: executing program 2 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 14m31.18464273s ago: executing program 2 (id=734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() write(0xffffffffffffffff, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14m30.941617224s ago: executing program 2 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) r1 = syz_io_uring_setup(0xf04, &(0x7f00000000c0)={0x0, 0x2595f, 0x10000, 0x0, 0x10000055}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x40201, 0xa, 0x4, 0x0, 0xbd}) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x1, 0x4, {0x8, @pix_mp={0x0, 0xfffffffd, 0x33565348, 0x6, 0x7, [{0x0, 0x3}, {0x0, 0x4}, {0x0, 0xbc1}, {}, {0x0, 0x5}, {0xb, 0x20000000}, {0x40}], 0x2, 0x0, 0x0, 0x2}}}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd, 0x0, 0x0, 0x1, {0x6410}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400"/167], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x80, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}]}, 0x80}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000480)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100300000008990409154000010203010902750003017a60030904000000010100000a2401ffff0a000201020904010000010200000904010101010200000e2402010604fc02715eb9483414072401ff0902100905010920000801810725010e000800090402000001f1ff00090402010101"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) syz_emit_ethernet(0x12e, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0xf8, 0x3a, 0x1, @remote, @mcast2, {[@hopopts={0x5c, 0x16, '\x00', [@enc_lim={0x4, 0x1, 0x83}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x6}, @generic={0x1, 0x97, "8d3850cf74c186b4b43574d33ea0ffa61528cbbbc54a7fb1d5b2ca5b9a9696c82e746a91b2dc2c16d489749def28185adca6d1e32f7742c5e9acbf7e4a0ecf68b96d6549f93b572b0c091714ab7a9c432abf7166d00e3e4648e1a8e58082acb0760a03abf392575f601670c794621ec814bdb29f1a9bc7104de0e8d66d50ecb7e08a051394ec126f3f13637d04b7d81050013b9202aa50"}]}], @param_prob={0x4, 0x0, 0x0, 0x800006, {0xc, 0x6, "f6cd53", 0x200, 0x3c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [@routing={0x2f, 0x0, 0x1, 0x1}], "13d86558da0a7f6b"}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) 14m26.684679941s ago: executing program 2 (id=746): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f9500009078"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 14m22.696875968s ago: executing program 2 (id=752): timer_create(0x1, 0x0, &(0x7f0000000100)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) lseek(0xffffffffffffffff, 0x54, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x2400c040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80, 0x143) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 14m20.882037419s ago: executing program 2 (id=754): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007903000000000000630000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0x7, 0x24, 0xf, 0x1, 0x1, 0x3, 0x8, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x2, 0xfc}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0xf7, 0x40, 0x4, 0x8, 0x6}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 14m5.122733338s ago: executing program 32 (id=754): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007903000000000000630000c2000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0x7, 0x24, 0xf, 0x1, 0x1, 0x3, 0x8, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x2, 0xfc}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0xf7, 0x40, 0x4, 0x8, 0x6}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10m25.030019589s ago: executing program 0 (id=1498): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x12, 0x5, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x9}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xa8, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0x7, 0x24, 0xf, 0x1, 0x1, 0x3, 0x8, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x10, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7, 0x2, 0xfc}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0xf7, 0x40, 0x4, 0x8, 0x6}, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10m24.664601483s ago: executing program 0 (id=1501): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x48, 0x0, &(0x7f0000000200), 0x0, 0x0) dup2(r2, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0x6, 0x8, 0x6) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_int(r7, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) 10m24.248208527s ago: executing program 0 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(r0, 0x0, 0x0, 0x0) 10m24.027854727s ago: executing program 0 (id=1507): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x5f0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 10m23.394325047s ago: executing program 0 (id=1510): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0xffffffff, 0xe7030000, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 10m22.968390476s ago: executing program 0 (id=1512): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="26df"], 0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) 14.053805116s ago: executing program 5 (id=3247): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) 14.034545351s ago: executing program 3 (id=3248): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400000002000000270041"], 0x20, 0x4048800}, 0x0) 12.41961172s ago: executing program 5 (id=3254): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 12.24976385s ago: executing program 3 (id=3256): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x80005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 10.994334687s ago: executing program 5 (id=3259): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904", @ANYRES16], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 10.988402414s ago: executing program 3 (id=3260): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) 10.581444722s ago: executing program 3 (id=3262): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r2, 0x0, 0x20040000) brk(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 9.892298228s ago: executing program 3 (id=3265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0xc000002, 0x0, 0x0, 0x2, 0xa}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) gettid() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9.528588467s ago: executing program 4 (id=3267): socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x60a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002500)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000000)={0x14, "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"}) 8.5822694s ago: executing program 4 (id=3270): openat$uinput(0xffffffffffffff9c, &(0x7f00000035c0), 0x802, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000009f40)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000009f00)=0x1}}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) futex(0x0, 0x189, 0x0, 0x0, 0x0, 0x1) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 8.464419554s ago: executing program 5 (id=3272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) file_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x80, 0xd2, 0xa, 0x4, 0x1ff}, 0x18, 0x400) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x975, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x114}}}, &(0x7f0000000340)) 4.524255574s ago: executing program 4 (id=3278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 3.836028156s ago: executing program 5 (id=3281): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904", @ANYRES16], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.493573224s ago: executing program 4 (id=3283): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xa2, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1c, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x56, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x2}, {0x6, 0x8, "000000000080"}, {0x1, 0xd, "01ed733a3d63f08339aeaa"}]}, @cipso={0x86, 0x6, 0x20}]}}, "ef58c836"}}}}}, 0x0) 3.239764093s ago: executing program 4 (id=3285): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x44080) 2.955291585s ago: executing program 1 (id=3286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000b40)={0x0, "bad880691ed7c7ca0a5e557e1b88d176"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001b40)={r2, 0x4, 0x0, [0x5, 0x13, 0xa, 0x101, 0xf3d], [0x81, 0x8, 0x0, 0x5, 0x31c, 0x3, 0xf6bb, 0x40, 0x8, 0xfff, 0x8, 0xffff, 0x0, 0x328, 0x6, 0x400, 0xb04, 0x3, 0xffffffffffff2870, 0x1, 0x4, 0xffff, 0x1, 0x9, 0xf6, 0xf, 0xe8, 0xda, 0x1, 0x0, 0x5, 0x0, 0x7b, 0x6, 0x0, 0xfffffffffffffffa, 0x8, 0x3, 0x2, 0xc, 0xc2f, 0x7ff, 0x9, 0x3, 0x0, 0x200, 0xe569, 0x101, 0x2, 0xffff, 0x9, 0x6, 0x3, 0x7, 0x70757c94, 0x5, 0x2, 0x100, 0x1, 0x6, 0x5, 0x8000, 0x7, 0x6, 0x9, 0x5, 0xfff, 0x5, 0x1, 0x0, 0x2, 0x9, 0x100, 0x2, 0x6, 0x5, 0x8, 0x1, 0x42c5, 0x4, 0x14bc, 0x8, 0x4, 0x5, 0x1, 0x8b8, 0x18e, 0x9, 0x27b7, 0x7, 0x8, 0xfffffffffffffffa, 0x6, 0x58, 0x6, 0x5, 0xffffffff, 0x9, 0x101, 0x6, 0x1, 0x7, 0xfffffffffffffff8, 0x0, 0xebc8, 0x5, 0x100, 0x101, 0x5, 0x10000, 0x63cb, 0x8, 0x5, 0xc, 0x876, 0x9, 0x8, 0x9, 0x100000001, 0x6, 0x9ef]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000180)=@ethtool_stats}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') r6 = socket(0x9, 0x803, 0x8000ff) sendmmsg$inet(r6, &(0x7f0000003000)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f00000000c0)="68420c6bf7b2e30cc33bb1b8e8aa9ffbef7c235f9dba3d976b0f29248a811009763f65e4a6ebf57f8ddfa72e41d1a542baf86b39b142d9d623c510b9f8baed7e3d2768a57a060dc79e01b21882c5bb5d5bf2892e32c9f262f2224c40a3e92491fb01f394f4768b0e150b642eb0ec4c18e0db056a0515ce3e08051dafbceec2fbc3c8b259bbe33fdd6a43522e7ecd16fa2cbcc3c01e7afb79830cdf33fc0f3b66a8ed4abfffa0326cec79a27437ecf92b83a706859836942174919300c43791b0c4b628aaa77c27e30dc5e5fe377757c1bcb79afc8b0423bb22efd776a5c6fea73647dab18fa26b2779470cb067818cc810", 0xf1}, {&(0x7f0000000200)="618a3e096ace2f51c6144ed782", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001bc0)}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="ae0630df3d3a5ccd211af9372673df144a83a7183a7d7fb18818db1edc354e3ef9ecd2e04d497b0374687756445134e96ae132b6436d37a50ae2cdaab87ae24190", 0x41}], 0x4, &(0x7f0000001d80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100000}}], 0x30}}, {{&(0x7f0000001dc0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000001e00)="7510af267ac9f8eae8cfe57cd9ad8c614f320ee4a6165909a689a9f95e5926b0e80bb44a03d8bdba573dd4d5e62bdb31c7494405302bf441d29446ae1ba42e0c19a123f630848314df8f84aff628a5a418b268c7da11fb8ff90fa7a2907ee89ec5985912b33457847f6b89ff74536604c8e30e32a898ef73918f9464388eeb2f81ea74c638e4436adbffc04df3ef37216e84e8eb73f4a37b49536f2864f6ae11b2b8f1c873515779414d9d6dde4c2febfb9d0abef20e480425be842e96baa9f87776908d657426c31f9c0351ec", 0xcd}, {&(0x7f0000001f00)="b5bb2e00df7a5dffe974b06af54059e9038b505c6ca6b896373ef4313ca56468f39fa8a7f6c0b553b4813ff726b41854a3920ed355a21ca8498c27fdc2ad7968cc2d342274e8cf98a1262991999808648533312a8874f254d42547a5bd6ef1fe0e8a3e0aae17a9a30298865570f005bb5469eb5a970d66f4960ebdcacbe6990349015600e11a698dfd29e3a729c852af5a790d563a77229d71a57a5c883052abe6ae8302d98b1c0f1d56ca333c8c4e407b4a746909dfd11d26fde7bcc3954264356d0b49c29e7c7b7fa135bd54b44e1e71f67fae1bebd272df7d7955c005d0c1ee5e14f2ef5d5624ca0752dcacee55b8566367d5cdbbc916f653a09f59004490b258c89a35efc65b22217ef5f67b10c53bbceb0e3e1ad72a20046ee89068206e3386326897e926691f501a130d71f4a261df7188f53f3cb9c71df9953c77e901be85c4c516c3dac2b22b59d2b63d90bbf8227cee754955bcefa4794910fadf60d425a3e84515deb5b37913d03de0d7122b3ec2a7f7a183a42cadde83426ea323a523234dd9a77a3a69a7bee44594de83ec18e7d2d98fa7cadc3037c84d3f215c56e32207b4949dd3857c5ac56060ed0c02248359e904664dd6669acf6467808f130f902285ae0dde36c720dded47195644c5f1bb3fea4320933209fd9766afde18819e213f9ad3703778d68b09f55d55415ae7136642c35aedad16848544dec849e5f8cb0e5ca6f998e0c767d73e43ae6bb219158e2427e7c9a70a6968ea1f8b0e8e2b137235c8e9ddd9f5365ce1bf9aaf8023a047e3181165bc5bd8051cb9f8c82064a01fafe835313dad86fbb09dac215a8815b1e739b82433c8ba3a24ca467627235c69d2493f319f0e6e8a69e3e2ec24820f8efeab16f3a8aa4f75a149cbb1d3e6b968adf438256ca504375bc247b5b3f779f0f650c3c691a48092bffdaab0213b5cbba82748f105c1d06055a4a790870eaa7ba7e872f8cd221733515efc96402e317092a869e65dbc0abf6923d5f8fe6a2830eba2a4edf492ecc4864b62589bc5d3d6a977414977d933c5e9160a5725d7d99961374516b1d55ebb5ca04404c45dc09f8352e1b0b7e05210d3855913be4f02aae07accf67f9d8afc1aa3791c77fbdbb30a9fa689fe645e1eb70990818d3c47ff44a7a866562fb63c2ca3aef8c47312fd9d08e218b89807c75ad4105c2ff6325be9c6de88d1dd07863f415005e9f5bd0578435cdaa329bf354ae905026235617641fd69449f889fd7abd717691e8d19f8b468ca660ebbb8c16a44abab235cdbf8a467bb551e02e27c205d80cd7a790e3ccab803ef1f635abe227af5cd2d0fb0a5106516ed6a4fd1cb40b579cd337053c05a5d9beb0b9d5ff80b648a3a59e726d3f436d416c4e0fe78638dc8f81c4c43d0aa250c4babd8d781a20a377b3f6e9e627d745471803f2672e7466ced792c8c6d3734bdc1707735bfa968a268871d47c505d128474a8745ba91639869a4e1d4b0b8beb194175d8ad21670e83e0d323bc6f72b33d992fcfbc5ce95211220af7be1d3b5de213ce238ab9981e409e0d8da55c1f7f58f2e3c1d4ca5231ef555fa048e01e25ebf5038b446caeeac021ffe83e22c600c04e40d92a955d6f7932e76a7963f2ada4239d6e480974687988dbfd4fd11c5ce87c1e6c1d57b630ccb0fc37c8be0d998f903a5fd9319cd7edb55902bf57682dd37b7da9e7f8868f11df1897883ef5096b6fcd9da3baf23a19e4f43fe526c705143965b120141d7165d21124fd3c72c5c41bcc9175a3bab437cf0953c3a206dec9df02c6b967e4dba59b69b294789c6665a3251a07b178ed6f4fc24a83456a92d8ae488aa871ea5ffe397b98ed96d6eb886045547afde665b97d4cc12c0535caba5260322111d79c98304e108e53e3875aab2c5c1e5dbd8ec46e9f949dd1918cb90f79b9e944bdd85a867a1775da7a2a7ad70814df1d1ff37dd4458a5e409ced8de5dda35cfe9430a24fefbb28e82d3e90b68432b49b3e65885d07576ec3de7903171ef121124463f4b0b9fbc7205f3de861fc9ae1caa8bbf3bc1411f6551bf6169d60b2c3cd46ad267d11395a438d35c80607710e9688e6b53525200b9815894363e9bb18513c68cc02b693cb3ba37d75fff4f1c7c45ec8239bafc0bf43a83827b439f4538b7bc79bdf6fed206f2235d0c014bea8d10741be86867413aada0b3d0a9041de031905b0a6450e50291f29539274381b6eca8e059cbbd8d821042857d6603ceaa3ca65f78e3189cbce65fa8577efe84c41b55f408f1a343865992a9f6e9d938a82c48c6667376668012d6da3c072c5a48fdee460dc6ae677d2fd0eaf234b63bde546a69dbbe19085ea3ba63f03ce8ac4b3fd182185639c1a9bab5ac7c076408fadfd4f878344c5749a11c09cc14aa9bab9308501f24e6f57d69fb830cc33d16533fc9801536c6d02147b07fb1a28b51f72a816cf16655f6c10445d7418df22165bf602199caf9e93fe35b9bce0c221c49cb9a5f197fff664d7989be9945c02498df52b891fd3688eccdd27d862040325f053597cf4e21f44989cf5b15e69fca73f601910c71e1eb308a4456afaa843fcc03d32eab4e63a25173e2352c943a44c28d0206016c1a9154af6c8442467d5d09567f23500e2052bd2ad2fd9983e9950312d6aeaba41aeacc4cbfecdc488a554f36033cc38b1baabd2a4061bfc5b2b478edfdd2dec75487d5ebe756ee487b651945b0013da8d0d95cbb4f5f8af35ef9cac5085586f95f1fffe22f5f5f42c84ae3d3cc1be1717d2a70626dad0067b33ee78919b1b7c19b439c1f11a8f48d102ee85377a6c56ddcabdaf0208fdd8cd85a3a3a35a56aec18e47895ee504084b83cd44b17e5f20e40e62727748d0dbe1f33408f0ae66bb93c716c41570fde63f3ddce239f8d7ad31c9bdaab2f3c54914d7d07c9d79d68e2e3c52c1ce64fbb8cf68933016155e35f729b6c891f7a944b5c095293909359148a165d894b41357bb1b78aaf103cc0fe770fcbd832e8c7e28cb515c5cf3d194ee12744e187defee56e77a5772dbe1712e654976cff9096e0656a86df920ea013701e3bafc07989024669a120ce569d9c55d798177164bcf11626a1c0a528e456458dc0bb63a6de8878231520b91146293ce578918b2649397a71762b99328f58d8fe3d473daab42dc2fb3cd6d02678652818736d0904ddaac9ef8252bd5265df763a4e945310cbc539249a0cbd4dfca3aec29e2d416a58a58db21ba943901a3e658a87443040a1b759cac649df2a0a51aebadb67c564d21b79471d97a4b5c440a43de38a2be1dfdfe344a78836c903bed9a5ca72f427dcaead5c489423fa1fdd49b17fc724ed87b767a5d5ecf2a913597bd890e647e487f6a04997dc67a239f68663dc9e55b9080814ecba4a5d9e8c3a422ab0133c9cc59eb0e16da7083a30f9fd16dfdbc3af3b1a1f316e5a0e3d5c04b6c2911ee5ec0dc34709f7a327cfc3b82da987059bb4ab3a4e207d21e3f53605a802b892b9fd2ac71d7c35ebcf65b561140931387e686ed38ecaa87a685cbeab0295287da8fc6f67e13ae939a8aeeecdedfd045ac3f84c5810e2353353fafa36b8d2f59ef4dd042abf03e9a36144465bc3ada4ce8da1ac20ef7185e7c525019869d6edf4f131a854f64054dffb97eba5954bd9ed10baf1e34a629b943e6922a0eb7e2e0319096eb83a1e7fdd2ea0b61ca2513ab8c335ac95eb82a7607a150960c370d9f35532aba6eba735e0d25e634fcbe719e7f526477bd36e6d376ae1755692610f0cdba94b56851cb692e8c68170006f479663f829bb28e3e2cffdec99a2946aa0fe5658fa972471c4feed6852e71a134bdc5f1a68bf7bd1b907e0e7ce3ac7f982baed639637f063e64c5ffc44172cede43f71b8e2983fc3f363a9e6789cb5ac7631c91448d33e15aa3a8809702ec93e44e9f631ffb6d0835bb790464b43a5851576bf80e9627fb1a3db5b38513fc4798e5944d2667d4dd423a3b5a86d83403b3f30f4d6da2792669d1f1a547dda96a61d2a9ea65e6b503316250673fc14be08b8e3f1ed64bbd2cdb458e6a34899db3a138114e5cea7dcd52a3c2a2a4464de407f7c221bda3948062cebf194546fea4ab50a34f7ea0471b2f0150addaf1209a74fdf4cc842c1c2f10611ec2e221a9475eb3beebb892e9a2da4ec5cec845b15cae13cbe3fa7d617707806c91dc9e2541432c5ecdd0f613df95eb6a700c1cdbfabfa93c1e611080913ae20a91ade549da498d773f66bab23aaae44ebeb378642dd0121dc36579279ac6bfc9ddae075b2958739e1052f6804ac6fb878e40d26f05b5c2ad604f547c0c726838653fe78ed2d8ab12a6aba3883fcd386d1923ef9427c0b47566f9a83f983bff3086a09828d7174bd9862aa68f13ae0057cd8008070bf23c6270e0d40a6396cbfd3f540e911c3637cdb3d46749e08000853e1da016bd1d8075f180f8eabc6788c8071850712830f0c1dcf3bcaabcdeef111f32dbd45d73fa63bdd4ce145c692ecacf682455de39460993eab8c235d85447b0fcf0d98c27905445c73c44c190ad38c120826ac5082a4716ad49259bfd1f21bd37d8c532e0787f79784fa0972da31150b508db5d993f0b90961e477764a18021f7071b6adb17481bf4cf0c7d93d970a6d5b37f58a74641a05f27f765c7b68e8377c75e05394de91db9c53dac9aa5d20cacc28393c38bb443ec4711979ce076a548dc6726fe77714c0a1aa9c6949328315aa6ae627bc7dff3807d947ede669da8007bf2e03a33ed2e136e87e9c74680fec06c9beb5a91af727c5ddc302f0fd051f39e66e263922fcc5a0c62641e35c41a4219e7af92b1dd9c5965d62cf692d34eef4c64351b303e2f8f6ce3048ed08468fcdc4636302de4c9a489c145beb995fa80a414e16c7854efef97d5ad8b66ce8c3a8ab47ac448deb13035099775534fdd177e7672bcda5bf4ca41c9885abc287704267d708383b7ee29cf6adfa87e40ec41d593405b8dfb8fbca24d57e873747243905e6a1e89f2f0aede61d6cc699838fc87101d7c632a4c1dc0af0ee624585b11ad089121880bca13dd94d3880525de2988bd334d0f9a25547cd84c79a782149a92b6b0a475b6e7f6cc5554bad351eba9bec48e74898b356cb8186b2e98343baf6b954b63d844302493b95ee54ed4d1c12f7241adf7f1eed6e85a5ea85775004972613f9d7648cb6fd24c2fac7b4ee7f9d641a8641828c74488fe022c272983e708137b80f4c668c60e808104e6ae1460f3d84872929ec59dbeed5811abf8ea0921b04b192a3c3957397855ae0094ec2c5147d1fb3a3a5fba1ae161204d5a583d8896a7637eb75fb164fea8777bdb5b42d883f17af7419cac3e1bc3fe634db910a7a3dc865521d6388ee825bc303471632d2c85f", 0xef4}], 0x2, &(0x7f0000002fc0)=ANY=[@ANYBLOB], 0x40}}], 0x5, 0x4800) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000080)=0x2, 0x4) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x2, 0xf, "ea4d77658e947860840aa9e3f4fa25b543bf6f"}) 2.742265017s ago: executing program 3 (id=3287): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc4, &(0x7f0000000800)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x0, 0x5}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1200"], 0x50) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) 2.051908894s ago: executing program 1 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 1.669148493s ago: executing program 1 (id=3289): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)={0x18, 0x14, 0x211, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x4, 0xfa}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) 1.66653922s ago: executing program 4 (id=3290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) file_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)={0x80, 0xd2, 0xa, 0x4, 0x1ff}, 0x18, 0x400) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x975, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x114}}}, &(0x7f0000000340)) 1.320844023s ago: executing program 1 (id=3291): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000003940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4040000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setfsuid(0xee00) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208800, 0x0) 572.11689ms ago: executing program 5 (id=3292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) 571.486501ms ago: executing program 1 (id=3293): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) 0s ago: executing program 1 (id=3294): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xa2, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0xfb, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1c, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x56, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x2}, {0x6, 0x8, "000000000080"}, {0x1, 0xd, "01ed733a3d63f08339aeaa"}]}, @cipso={0x86, 0x6, 0x20}]}}, "ef58c836"}}}}}, 0x0) kernel console output (not intermixed with test programs): 0][T11255] Cannot create hsr debugfs directory [ 822.131581][T11390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 822.131664][T11390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 822.132654][T11390] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 822.132702][T11390] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 822.989441][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.993218][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.458186][T11396] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.458265][T11396] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 823.459232][T11396] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 823.459279][T11396] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 825.199670][ T6549] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 826.384658][ T6549] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 826.384689][ T6549] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 826.384711][ T6549] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 826.384733][ T6549] usb 5-1: config 220 has no interface number 1 [ 826.384780][ T6549] usb 5-1: config 220 interface 0 has no altsetting 0 [ 826.384800][ T6549] usb 5-1: config 220 interface 76 has no altsetting 0 [ 826.392887][ T6549] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 826.392983][ T6549] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.393046][ T6549] usb 5-1: Product: syz [ 826.393081][ T6549] usb 5-1: Manufacturer: syz [ 826.393122][ T6549] usb 5-1: SerialNumber: syz [ 826.807407][ T6549] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 826.807445][ T6549] uvcvideo 5-1:220.0: No valid video chain found. [ 826.871519][ T6549] usb 5-1: USB disconnect, device number 65 [ 827.483677][ T3422] bridge_slave_1: left allmulticast mode [ 827.483728][ T3422] bridge_slave_1: left promiscuous mode [ 827.484015][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.983734][ T3422] bridge_slave_0: left allmulticast mode [ 828.983772][ T3422] bridge_slave_0: left promiscuous mode [ 828.984074][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.370290][ T5726] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 829.951168][T11430] Invalid ELF header magic: != ELF [ 830.563218][ T5726] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 830.563272][ T5726] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 830.563302][ T5726] usb 4-1: config 0 interface 0 has no altsetting 0 [ 830.563338][ T5726] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.00 [ 830.563363][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.657084][ T5726] usb 4-1: config 0 descriptor?? [ 832.240790][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 832.240925][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 832.318007][ T5726] usb 4-1: USB disconnect, device number 50 [ 833.301311][T11448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.649925][ T5726] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 835.411798][ T5726] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 835.411820][ T5726] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 835.411835][ T5726] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 835.411852][ T5726] usb 4-1: config 220 has no interface number 1 [ 835.411885][ T5726] usb 4-1: config 220 interface 0 has no altsetting 0 [ 835.411898][ T5726] usb 4-1: config 220 interface 76 has no altsetting 0 [ 835.419244][ T5726] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 835.419267][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.419282][ T5726] usb 4-1: Product: syz [ 835.419293][ T5726] usb 4-1: Manufacturer: syz [ 835.419303][ T5726] usb 4-1: SerialNumber: syz [ 835.709102][ T5726] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 835.709137][ T5726] uvcvideo 4-1:220.0: No valid video chain found. [ 835.743044][ T5726] usb 4-1: USB disconnect, device number 51 [ 836.929738][ T5816] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 837.070535][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.095130][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 837.097722][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.097779][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.097806][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 837.097822][ T5816] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 837.097839][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.102510][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 837.102595][ T5816] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 837.102652][ T5816] usb 4-1: Manufacturer: syz [ 837.149840][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.202014][ T3422] bond0 (unregistering): Released all slaves [ 837.226598][ T5816] usb 4-1: config 0 descriptor?? [ 838.899762][ T5816] rc_core: IR keymap rc-hauppauge not found [ 838.899784][ T5816] Registered IR keymap rc-empty [ 838.899940][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.919760][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 838.942130][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 838.945023][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27 [ 839.176271][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.189938][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.209904][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.230036][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.253019][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.279894][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.299787][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.329743][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.352896][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.369716][ T5816] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 839.651229][ T3422] hsr_slave_0: left promiscuous mode [ 839.720081][ T3422] hsr_slave_1: left promiscuous mode [ 839.771964][T10314] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 839.846011][ T5816] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 839.846100][ T5816] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 839.848160][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.895629][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.919732][T10314] usb 5-1: Using ep0 maxpacket: 16 [ 839.922590][T10314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.922648][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.922679][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.922703][T10314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.922729][T10314] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.924481][T10314] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.924511][T10314] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.924534][T10314] usb 5-1: Manufacturer: syz [ 840.031741][T10314] usb 5-1: config 0 descriptor?? [ 840.088114][ T5816] usb 4-1: USB disconnect, device number 52 [ 840.518382][T10314] rc_core: IR keymap rc-hauppauge not found [ 840.518411][T10314] Registered IR keymap rc-empty [ 840.518530][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.548735][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.561142][T10314] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 840.634226][T10314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input28 [ 840.654325][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.669811][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.690156][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.712490][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.729752][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.750412][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.769774][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.791922][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.810384][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.829737][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 840.901948][T10314] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 840.901976][T10314] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 840.955382][T10314] usb 5-1: USB disconnect, device number 66 [ 841.830001][T10314] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 842.030210][T10314] usb 5-1: Using ep0 maxpacket: 16 [ 842.038917][T10314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.038976][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.039008][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 842.039032][T10314] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 842.039062][T10314] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.086563][T10314] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 842.086587][T10314] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 842.086603][T10314] usb 5-1: Manufacturer: syz [ 842.695633][T10314] usb 5-1: config 0 descriptor?? [ 843.471722][T10314] rc_core: IR keymap rc-hauppauge not found [ 843.471743][T10314] Registered IR keymap rc-empty [ 843.471887][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 843.489814][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 843.527847][T10314] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 843.582907][T10314] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input29 [ 843.846546][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 843.860334][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 843.860795][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 843.881067][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 844.871150][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 844.940158][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 844.960078][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 844.979938][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 844.990911][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 845.202091][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 845.219938][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 845.240093][T10314] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 845.301805][T10314] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 845.301835][T10314] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 845.749140][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 848.067288][T10314] usb 5-1: USB disconnect, device number 67 [ 851.918430][T11562] vlan2: left allmulticast mode [ 851.918448][T11562] bond0: left allmulticast mode [ 851.918459][T11562] bond_slave_0: left allmulticast mode [ 851.918476][T11562] bond_slave_1: left allmulticast mode [ 851.924860][ T5438] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 853.316250][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 853.316890][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 853.317250][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 853.317379][ T5438] usb 6-1: device descriptor read/all, error -32 [ 854.065206][T11573] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20264 [ 854.297049][T11576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.332998][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 854.333031][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 854.333666][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1824'. [ 855.967873][T11588] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1827'. [ 856.891297][ T37] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 857.081678][ T37] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.081737][ T37] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.086809][ T37] usb 2-1: string descriptor 0 read error: -22 [ 857.086965][ T37] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 857.086991][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.089254][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'. [ 857.207826][ T37] cdc_ether 2-1:1.0: missing cdc ether descriptor [ 858.775999][ T5726] usb 2-1: USB disconnect, device number 39 [ 859.389237][ T5726] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 859.608293][T11615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 860.514391][ T5726] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 860.514424][ T5726] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 860.514446][ T5726] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 860.514500][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 860.514530][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 860.648538][ T5726] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 860.648572][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 860.648595][ T5726] usb 2-1: Product: syz [ 860.648610][ T5726] usb 2-1: Manufacturer: syz [ 860.900160][ T5726] cdc_wdm 2-1:1.0: skipping garbage [ 860.900182][ T5726] cdc_wdm 2-1:1.0: skipping garbage [ 860.943077][ T5726] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 860.943102][ T5726] cdc_wdm 2-1:1.0: Unknown control protocol [ 861.059276][ T5726] usb 2-1: USB disconnect, device number 40 [ 863.005507][T11637] vlan2: entered allmulticast mode [ 863.005524][T11637] bond0: entered allmulticast mode [ 863.005534][T11637] bond_slave_0: entered allmulticast mode [ 863.005551][T11637] bond_slave_1: entered allmulticast mode [ 864.237482][ T37] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 864.611858][ T37] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 864.611892][ T37] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 864.611914][ T37] usb 4-1: config 220 has no interface number 2 [ 864.611987][ T37] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 864.612017][ T37] usb 4-1: config 220 interface 0 has no altsetting 0 [ 864.612037][ T37] usb 4-1: config 220 interface 76 has no altsetting 0 [ 864.612057][ T37] usb 4-1: config 220 interface 1 has no altsetting 0 [ 864.616131][ T37] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 864.616163][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.616184][ T37] usb 4-1: Product: syz [ 864.616200][ T37] usb 4-1: Manufacturer: syz [ 864.616216][ T37] usb 4-1: SerialNumber: syz [ 864.857603][ T37] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 864.857653][ T37] uvcvideo 4-1:220.0: No valid video chain found. [ 865.260639][ T37] usb 4-1: USB disconnect, device number 53 [ 869.432248][ T9179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 869.485861][ T9179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 869.520486][ T9179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 869.545333][ T9179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 869.547477][ T9179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.079191][T11702] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 870.079230][T11702] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 870.079378][T11702] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 870.079399][T11702] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 870.179745][ T5798] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 870.250567][ T822] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 870.329810][ T5798] usb 6-1: Using ep0 maxpacket: 8 [ 870.336750][ T5798] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 870.336781][ T5798] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 870.336803][ T5798] usb 6-1: config 0 has no interface number 0 [ 870.336849][ T5798] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 870.336878][ T5798] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 870.336906][ T5798] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 870.366182][ T5798] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 870.366217][ T5798] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 870.366240][ T5798] usb 6-1: Product: syz [ 870.366255][ T5798] usb 6-1: Manufacturer: syz [ 870.443131][ T5798] usb 6-1: config 0 descriptor?? [ 870.513396][ T822] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 870.513428][ T822] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 870.513508][ T822] usb 4-1: config 220 has no interface number 2 [ 870.513596][ T822] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 870.513703][ T822] usb 4-1: config 220 interface 0 has no altsetting 0 [ 870.513724][ T822] usb 4-1: config 220 interface 76 has no altsetting 0 [ 870.513907][ T822] usb 4-1: config 220 interface 1 has no altsetting 0 [ 870.520148][ T822] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 870.520254][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.520278][ T822] usb 4-1: Product: syz [ 870.520294][ T822] usb 4-1: Manufacturer: syz [ 870.520310][ T822] usb 4-1: SerialNumber: syz [ 870.835547][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.891099][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 870.913371][ T822] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 870.913405][ T822] uvcvideo 4-1:220.0: No valid video chain found. [ 870.972290][ T822] usb 4-1: USB disconnect, device number 54 [ 871.069741][ T5726] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 871.229749][ T5726] usb 5-1: Using ep0 maxpacket: 16 [ 871.232331][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.232391][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.232424][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 871.232449][ T5726] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 871.232474][ T5726] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 871.234154][ T5726] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 871.234197][ T5726] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 871.234219][ T5726] usb 5-1: Manufacturer: syz [ 871.285943][ T5726] usb 5-1: config 0 descriptor?? [ 871.659751][ T5616] Bluetooth: hci2: command tx timeout [ 872.050001][ T5726] rc_core: IR keymap rc-hauppauge not found [ 872.050024][ T5726] Registered IR keymap rc-empty [ 872.050185][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.070164][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.154675][ T5726] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 872.294105][ T5726] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 872.324090][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.345470][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.363329][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.381725][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.400595][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.426402][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.440157][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.460678][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.479840][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.499792][ T5726] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 872.627394][ T5726] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 872.627423][ T5726] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 872.687849][ T5726] usb 5-1: USB disconnect, device number 68 [ 872.992016][ T5798] usb 6-1: USB disconnect, device number 7 [ 873.741970][ T5616] Bluetooth: hci2: command tx timeout [ 875.819688][ T5616] Bluetooth: hci2: command tx timeout [ 878.713923][ T5616] Bluetooth: hci2: command tx timeout [ 879.389828][ T5726] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 879.594791][ T5726] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.594861][ T5726] usb 5-1: config 0 has no interface number 0 [ 879.594958][ T5726] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.595045][ T5726] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.595071][ T5726] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 879.595200][ T5726] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 879.595278][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.765843][ T5726] usb 5-1: config 0 descriptor?? [ 880.731555][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.734043][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.832254][T11777] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1871'. [ 880.849830][ T5798] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 880.906775][ T5726] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0001/input/input32 [ 881.009655][ T5798] usb 6-1: Using ep0 maxpacket: 8 [ 881.012021][ T5798] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 881.012049][ T5798] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 881.012071][ T5798] usb 6-1: config 0 has no interface number 0 [ 881.012116][ T5798] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 881.012144][ T5798] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 881.012170][ T5798] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 881.014779][ T5798] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 881.014809][ T5798] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 881.014830][ T5798] usb 6-1: Product: syz [ 881.014845][ T5798] usb 6-1: Manufacturer: syz [ 881.118016][ T5798] usb 6-1: config 0 descriptor?? [ 882.210181][T11785] JFS: discard option not supported on device [ 882.516337][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.553683][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.945773][T11785] Mount JFS Failure: -5 [ 882.945793][T11785] jfs_mount failed w/return code = -5 [ 883.692921][ T5726] uclogic 0003:28BD:0042.0001: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 883.753605][ T5726] usb 5-1: USB disconnect, device number 69 [ 883.802693][ T822] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 883.910424][T11797] fido_id[11797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 884.011817][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 884.026845][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.026928][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 884.026950][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 884.026966][ T822] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 884.026983][ T822] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 884.088502][ T822] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 884.088571][ T822] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 884.088587][ T822] usb 4-1: Manufacturer: syz [ 884.223763][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 884.223846][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.249931][ T822] usb 4-1: config 0 descriptor?? [ 884.351814][ T5798] usb 6-1: USB disconnect, device number 8 [ 885.861469][ T822] rc_core: IR keymap rc-hauppauge not found [ 885.861544][ T822] Registered IR keymap rc-empty [ 885.861706][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 885.879739][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 886.080562][ T822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 887.001376][T11826] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1882'. [ 887.259060][T11829] tmpfs: Bad value for 'mpol' [ 887.301574][ T822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input34 [ 887.353769][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.359006][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.359249][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.359451][T11669] bridge_slave_0: entered allmulticast mode [ 887.375789][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.395152][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.398466][T11669] bridge_slave_0: entered promiscuous mode [ 887.412795][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.427772][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.427989][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.428244][T11669] bridge_slave_1: entered allmulticast mode [ 887.429883][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.460455][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.465351][T11669] bridge_slave_1: entered promiscuous mode [ 887.490986][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.509853][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.540489][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 887.569736][ T822] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 889.245232][ T822] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 889.245261][ T822] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 889.294607][ T822] usb 4-1: USB disconnect, device number 55 [ 889.930926][T11848] JFS: discard option not supported on device [ 890.143189][T11848] Mount JFS Failure: -5 [ 890.143208][T11848] jfs_mount failed w/return code = -5 [ 890.889366][T11862] Invalid ELF header magic: != ELF [ 891.191906][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.945860][T11872] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1895'. [ 894.068998][T11875] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.1894'. [ 894.101815][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1894'. [ 894.295893][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.296158][T11870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1894'. [ 895.708303][T11669] team0: Port device team_slave_0 added [ 895.769245][T11669] team0: Port device team_slave_1 added [ 897.354954][T11908] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 897.423784][T11908] Config c/1 of g1 needs at least one function. [ 897.423948][T11908] udc dummy_udc.0: failed to start g1: -22 [ 897.423972][T11908] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 897.592873][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.592892][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.592924][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.405371][T11908] UDC core: g1: couldn't find an available UDC or it's busy [ 898.638912][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.638926][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.638948][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.833448][T11914] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1909'. [ 898.899835][ T67] bridge_slave_1: left allmulticast mode [ 898.899878][ T67] bridge_slave_1: left promiscuous mode [ 898.900188][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.037057][T11921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.119313][ T67] bridge_slave_0: left allmulticast mode [ 899.147735][ T67] bridge_slave_0: left promiscuous mode [ 899.148696][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.289084][ T5726] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 900.833906][ T5726] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.833937][ T5726] usb 4-1: config 0 has no interface number 0 [ 900.833982][ T5726] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.834002][ T5726] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.834018][ T5726] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.834060][ T5726] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 900.834078][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.843399][ T5726] usb 4-1: config 0 descriptor?? [ 901.718924][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.892687][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.255415][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.464101][ T5726] uclogic 0003:28BD:0042.0002: failed retrieving string descriptor #100: -71 [ 903.464158][ T5726] uclogic 0003:28BD:0042.0002: failed retrieving pen parameters: -71 [ 903.464171][ T5726] uclogic 0003:28BD:0042.0002: pen probing failed: -71 [ 903.464184][ T5726] uclogic 0003:28BD:0042.0002: failed probing parameters: -71 [ 903.464270][ T5726] uclogic 0003:28BD:0042.0002: probe with driver uclogic failed with error -71 [ 903.563441][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.626321][ T5726] usb 4-1: USB disconnect, device number 56 [ 903.646536][ T67] bond0 (unregistering): Released all slaves [ 903.763035][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 904.283942][T11669] hsr_slave_0: entered promiscuous mode [ 904.285357][T11669] hsr_slave_1: entered promiscuous mode [ 904.286385][T11669] debugfs: 'hsr0' already exists in 'hsr' [ 904.286412][T11669] Cannot create hsr debugfs directory [ 904.428785][T11969] binder: BINDER_SET_CONTEXT_MGR already set [ 904.428821][T11969] binder: 11966:11969 ioctl 4018620d 200000000100 returned -16 [ 904.863035][ T67] hsr_slave_0: left promiscuous mode [ 904.911235][ T67] hsr_slave_1: left promiscuous mode [ 904.912396][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.967661][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.980358][T11969] binder: BINDER_SET_CONTEXT_MGR already set [ 904.980368][T11969] binder: 11966:11969 ioctl 4018620d 200000001000 returned -16 [ 905.586379][T11985] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 905.586460][T11985] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 905.589467][T11985] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 905.589558][T11985] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 907.506336][T11996] 9pnet_fd: Insufficient options for proto=fd [ 907.784458][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 908.276718][ T67] team0 (unregistering): Port device team_slave_1 removed [ 908.458852][ T67] team0 (unregistering): Port device team_slave_0 removed [ 912.469675][ T1009] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 912.675535][T12037] Invalid ELF header magic: != ELF [ 913.749237][ T1009] usb 2-1: device descriptor read/64, error -71 [ 913.760721][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 913.931485][T12044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1944'. [ 914.087038][T12049] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1944'. [ 914.091398][ T1009] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 914.240839][ T1009] usb 2-1: device descriptor read/64, error -71 [ 914.358066][ T1009] usb usb2-port1: attempt power cycle [ 914.699662][ T1009] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 914.720511][ T1009] usb 2-1: device descriptor read/8, error -71 [ 916.179687][ T1009] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 916.200569][ T1009] usb 2-1: Using ep0 maxpacket: 8 [ 916.202944][ T1009] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 916.202974][ T1009] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 916.203004][ T1009] usb 2-1: config 0 has no interface number 0 [ 916.203055][ T1009] usb 2-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.205511][ T1009] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 916.205542][ T1009] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 916.205565][ T1009] usb 2-1: Product: syz [ 916.205580][ T1009] usb 2-1: Manufacturer: syz [ 916.287202][ T1009] usb 2-1: config 0 descriptor?? [ 917.708395][T12093] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.1956'. [ 917.942285][ T1009] usb 2-1: USB disconnect, device number 44 [ 918.319978][ T5816] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 918.488149][ T5816] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 918.488180][ T5816] usb 5-1: config 0 has no interface number 0 [ 918.488239][ T5816] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.488270][ T5816] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.488294][ T5816] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 918.488339][ T5816] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 918.488363][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.655178][ T5816] usb 5-1: config 0 descriptor?? [ 919.052209][ T5438] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 919.274955][ T5438] usb 2-1: Using ep0 maxpacket: 16 [ 919.286014][ T5438] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.286155][ T5438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.286232][ T5438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 919.286257][ T5438] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 919.286323][ T5438] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.541870][ T5438] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 919.541951][ T5438] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 919.541974][ T5438] usb 2-1: Manufacturer: syz [ 919.611982][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.641941][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.760222][ T5438] usb 2-1: config 0 descriptor?? [ 920.120616][ T5816] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0003/input/input36 [ 920.147126][ T5816] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 920.251368][ T5816] usb 5-1: USB disconnect, device number 71 [ 920.398584][T12122] fido_id[12122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 920.911213][ T5438] rc_core: IR keymap rc-hauppauge not found [ 920.911236][ T5438] Registered IR keymap rc-empty [ 920.911428][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 920.929807][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.172051][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.189035][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.198075][ T5438] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 921.228028][ T5438] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 921.268786][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.321035][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.663799][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.769661][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.799715][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.819655][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.843042][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.860690][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.889757][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.920935][ T5438] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 921.969019][ T5438] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 921.969047][ T5438] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 921.993955][T12137] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1969'. [ 924.312909][ T1009] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 924.439665][ T1009] usb 4-1: device descriptor read/64, error -71 [ 924.679641][ T1009] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 924.756625][T12156] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 924.756651][T12156] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 924.756796][T12156] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 924.756817][T12156] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 924.819818][ T1009] usb 4-1: device descriptor read/64, error -71 [ 924.930143][ T1009] usb usb4-port1: attempt power cycle [ 925.151300][ T5438] usb 2-1: USB disconnect, device number 45 [ 925.279696][ T1009] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 925.302441][ T1009] usb 4-1: device descriptor read/8, error -71 [ 925.732910][T12174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.611205][ T1009] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 926.649862][ T1009] usb 4-1: device descriptor read/8, error -71 [ 926.760230][ T1009] usb usb4-port1: unable to enumerate USB device [ 927.467951][T12190] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.1981'. [ 929.847760][ T9179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.895648][ T9179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.897298][ T9179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.934597][ T9179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.935508][ T9179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 930.928994][T12219] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 930.929023][T12219] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 930.929161][T12219] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 930.929181][T12219] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 931.661457][ T1009] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 931.790352][ T1009] usb 6-1: device descriptor read/64, error -71 [ 931.989339][T12253] overlayfs: failed to resolve './file0': -2 [ 933.161797][ T5616] Bluetooth: hci5: command tx timeout [ 933.628160][ T1009] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 933.782897][ T1009] usb 6-1: device descriptor read/64, error -71 [ 933.890172][ T1009] usb usb6-port1: attempt power cycle [ 934.279649][ T1009] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 935.314560][ T9179] Bluetooth: hci5: command tx timeout [ 935.365010][ T1009] usb 6-1: device descriptor read/8, error -71 [ 935.715209][T12281] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20264 [ 937.445417][ T9179] Bluetooth: hci5: command tx timeout [ 939.513597][ T9179] Bluetooth: hci5: command tx timeout [ 939.669637][ T1009] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 939.800052][ T1009] usb 4-1: device descriptor read/64, error -71 [ 940.039731][ T1009] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 940.180693][ T1009] usb 4-1: device descriptor read/64, error -71 [ 940.294606][ T1009] usb usb4-port1: attempt power cycle [ 940.643393][ T1009] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 940.660330][ T1009] usb 4-1: device descriptor read/8, error -71 [ 940.904989][ T1009] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 940.922240][ T1009] usb 4-1: device descriptor read/8, error -71 [ 941.033195][ T1009] usb usb4-port1: unable to enumerate USB device [ 945.663658][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 945.663709][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.281160][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.301683][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.301900][T12199] bridge_slave_0: entered allmulticast mode [ 950.323003][T12199] bridge_slave_0: entered promiscuous mode [ 951.743917][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.744049][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.744306][T12199] bridge_slave_1: entered allmulticast mode [ 951.747201][T12199] bridge_slave_1: entered promiscuous mode [ 951.922777][T12432] Can't find ip_set type [ 952.142849][ T1009] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 952.289743][ T1009] usb 6-1: Using ep0 maxpacket: 16 [ 952.292234][ T1009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.292270][ T1009] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.292295][ T1009] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 952.293815][ T1009] usb 6-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 952.293844][ T1009] usb 6-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 952.293866][ T1009] usb 6-1: Product: syz [ 952.373513][T12199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.445599][ T1009] usb 6-1: config 0 descriptor?? [ 952.451193][T12199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.872476][ T1009] usbhid 6-1:0.0: can't add hid device: -71 [ 952.872641][ T1009] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 952.922019][ T1009] usb 6-1: USB disconnect, device number 13 [ 953.568717][T12199] team0: Port device team_slave_0 added [ 953.615520][T12199] team0: Port device team_slave_1 added [ 954.597791][T12199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.597812][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.597842][T12199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.648429][T12199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.648448][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.648479][T12199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.951407][ T1467] bridge_slave_1: left allmulticast mode [ 954.951444][ T1467] bridge_slave_1: left promiscuous mode [ 954.951737][ T1467] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.104745][ T1467] bridge_slave_0: left allmulticast mode [ 955.104807][ T1467] bridge_slave_0: left promiscuous mode [ 955.123916][ T1467] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.337094][T12483] overlayfs: failed to resolve './file0': -2 [ 956.830589][ T1467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 956.950742][ T1467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.421147][ T1467] bond0 (unregistering): Released all slaves [ 958.762924][T12199] hsr_slave_0: entered promiscuous mode [ 958.765464][T12199] hsr_slave_1: entered promiscuous mode [ 958.767855][T12199] debugfs: 'hsr0' already exists in 'hsr' [ 958.767881][T12199] Cannot create hsr debugfs directory [ 959.061427][ T1467] hsr_slave_0: left promiscuous mode [ 959.100069][ T1467] hsr_slave_1: left promiscuous mode [ 959.101172][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.303196][ T37] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 959.312449][ T1467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.499100][T12531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 959.580897][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2086'. [ 959.580984][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2086'. [ 959.588064][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2086'. [ 960.056451][ T37] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 960.056486][ T37] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 960.056508][ T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 960.056559][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 960.056589][ T37] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 960.207701][ T37] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 960.207726][ T37] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 960.207741][ T37] usb 4-1: Product: syz [ 960.207751][ T37] usb 4-1: Manufacturer: syz [ 960.272889][ T37] cdc_wdm 4-1:1.0: skipping garbage [ 960.272911][ T37] cdc_wdm 4-1:1.0: skipping garbage [ 960.498864][ T37] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 960.498888][ T37] cdc_wdm 4-1:1.0: Unknown control protocol [ 960.594066][ T37] usb 4-1: USB disconnect, device number 65 [ 963.291417][ T1467] team0 (unregistering): Port device team_slave_1 removed [ 963.347986][ T1467] team0 (unregistering): Port device team_slave_0 removed [ 963.531261][ T5816] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 963.712317][ T5816] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.712376][ T5816] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.716520][ T5816] usb 5-1: string descriptor 0 read error: -22 [ 963.716683][ T5816] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.716710][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.805681][ T5816] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 964.322833][T12581] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 964.330811][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 964.403194][T12581] Config c/1 of g1 needs at least one function. [ 964.403346][T12581] udc dummy_udc.0: failed to start g1: -22 [ 964.403369][T12581] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 964.479839][T12581] UDC core: g1: couldn't find an available UDC or it's busy [ 965.167948][ T5816] usb 5-1: USB disconnect, device number 72 [ 966.799620][ T5726] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 966.963263][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 966.979319][ T5726] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 966.979359][ T5726] usb 4-1: can't read configurations, error -61 [ 967.109608][ T5726] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 967.261533][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 967.267261][ T5726] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 967.267302][ T5726] usb 4-1: can't read configurations, error -61 [ 967.267769][ T5726] usb usb4-port1: attempt power cycle [ 967.599671][ T5726] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 967.601697][T12632] binder: BINDER_SET_CONTEXT_MGR already set [ 967.601729][T12632] binder: 12627:12632 ioctl 4018620d 200000000100 returned -16 [ 967.659616][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 967.690521][ T5726] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 967.690563][ T5726] usb 4-1: can't read configurations, error -61 [ 967.789351][T12632] binder: BINDER_SET_CONTEXT_MGR already set [ 967.789695][T12632] binder: 12627:12632 ioctl 4018620d 200000001000 returned -16 [ 967.819650][ T5726] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 967.840469][ T5726] usb 4-1: Using ep0 maxpacket: 8 [ 967.844421][ T5726] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 967.844471][ T5726] usb 4-1: can't read configurations, error -61 [ 967.844846][ T5726] usb usb4-port1: unable to enumerate USB device [ 968.391666][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 971.583707][T12694] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 971.602714][T12694] Config c/1 of g1 needs at least one function. [ 971.602871][T12694] udc dummy_udc.0: failed to start g1: -22 [ 971.602897][T12694] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 971.668636][T12694] UDC core: g1: couldn't find an available UDC or it's busy [ 972.062908][T12699] overlayfs: failed to resolve './file0': -2 [ 977.725337][T12736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 977.725395][T12736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 977.729256][T12736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 977.729308][T12736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 979.009962][T12748] overlayfs: failed to resolve './file0': -2 [ 979.390976][ T5438] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 980.194573][ T5438] usb 4-1: Using ep0 maxpacket: 16 [ 980.197335][ T5438] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.197391][ T5438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.197423][ T5438] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 980.197447][ T5438] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 980.197481][ T5438] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.199091][ T5438] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 980.199125][ T5438] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 980.199148][ T5438] usb 4-1: Manufacturer: syz [ 980.313158][ T5438] usb 4-1: config 0 descriptor?? [ 980.849701][ T5438] rc_core: IR keymap rc-hauppauge not found [ 980.849724][ T5438] Registered IR keymap rc-empty [ 980.849896][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.880921][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 980.917990][ T5438] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 980.952074][ T5438] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input37 [ 980.982126][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.001861][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.020196][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.039906][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.059916][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.079848][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.100054][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.119946][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.149887][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.169857][ T5438] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 981.459268][ T5438] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 981.459297][ T5438] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 983.024337][T12773] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20264 [ 983.470704][ T5726] usb 4-1: USB disconnect, device number 70 [ 987.035889][T12829] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.035974][T12829] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 987.041032][T12829] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.041089][T12829] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 989.623457][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 989.718096][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 989.763670][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 989.765507][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 989.798961][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 991.546697][T12896] overlayfs: failed to resolve './file0': -2 [ 992.555714][ T9179] Bluetooth: hci2: command tx timeout [ 994.620330][ T9179] Bluetooth: hci2: command tx timeout [ 996.700120][ T9179] Bluetooth: hci2: command tx timeout [ 998.803497][ T9179] Bluetooth: hci2: command tx timeout [ 1002.857854][T12991] JFS: discard option not supported on device [ 1002.858446][T12991] Mount JFS Failure: -5 [ 1002.858458][T12991] jfs_mount failed w/return code = -5 [ 1007.540466][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.540556][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1010.170858][ T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1010.858841][T13072] overlayfs: overlapping lowerdir path [ 1012.070772][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1012.135857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.135909][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.135948][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.182969][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 1012.183012][ T10] usb 4-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 1012.183079][ T10] usb 4-1: Product: syz [ 1012.596255][ T10] usb 4-1: config 0 descriptor?? [ 1012.856737][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 1012.856878][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1012.886221][ T10] usb 4-1: USB disconnect, device number 71 [ 1013.472439][T13091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.557530][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1013.557617][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1013.559345][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2252'. [ 1014.293641][ T1436] bridge_slave_1: left allmulticast mode [ 1014.293671][ T1436] bridge_slave_1: left promiscuous mode [ 1014.293909][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.037736][ T1436] bridge_slave_0: left allmulticast mode [ 1015.037772][ T1436] bridge_slave_0: left promiscuous mode [ 1015.038051][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.162676][T13139] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.162759][T13139] binder: 13136:13139 ioctl 4018620d 200000000100 returned -16 [ 1019.633287][T13137] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.633299][T13137] binder: 13136:13137 ioctl 4018620d 200000001000 returned -16 [ 1020.134466][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.256498][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.245198][ T1436] bond0 (unregistering): Released all slaves [ 1021.288349][T13155] input: syz1 as /devices/virtual/input/input38 [ 1022.107558][T13167] binder: BINDER_SET_CONTEXT_MGR already set [ 1022.107719][T13167] binder: 13162:13167 ioctl 4018620d 200000000100 returned -16 [ 1022.362948][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.363105][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.363369][T12861] bridge_slave_0: entered allmulticast mode [ 1022.444673][T12861] bridge_slave_0: entered promiscuous mode [ 1022.653039][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.653127][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.653329][T12861] bridge_slave_1: entered allmulticast mode [ 1022.707386][T12861] bridge_slave_1: entered promiscuous mode [ 1022.977359][T13165] binder: BINDER_SET_CONTEXT_MGR already set [ 1022.977371][T13165] binder: 13162:13165 ioctl 4018620d 200000001000 returned -16 [ 1023.084607][T13174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.100040][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2282'. [ 1023.100071][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2282'. [ 1023.100149][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2282'. [ 1024.041842][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.460452][ T1436] hsr_slave_0: left promiscuous mode [ 1024.504627][ T1436] hsr_slave_1: left promiscuous mode [ 1024.505737][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.552805][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.763545][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1029.080046][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1031.696707][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.892075][ T37] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 1032.303412][ T37] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.303453][ T37] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1032.306580][ T37] usb 5-1: string descriptor 0 read error: -22 [ 1032.306682][ T37] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1032.306700][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.377002][ T37] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1032.515576][T12861] team0: Port device team_slave_0 added [ 1032.579014][T12861] team0: Port device team_slave_1 added [ 1033.428733][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.428747][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.428768][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.507759][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.507777][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.507821][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.749063][ T5438] usb 5-1: USB disconnect, device number 73 [ 1036.801744][T12861] hsr_slave_0: entered promiscuous mode [ 1036.810355][T12861] hsr_slave_1: entered promiscuous mode [ 1036.820172][T12861] debugfs: 'hsr0' already exists in 'hsr' [ 1036.820196][T12861] Cannot create hsr debugfs directory [ 1038.889593][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1039.082996][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1039.083028][ T10] usb 4-1: config 0 has no interface number 0 [ 1039.083077][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.083106][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.083131][ T10] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.083175][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1039.083200][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.158826][ T10] usb 4-1: config 0 descriptor?? [ 1039.584745][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1039.816314][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.818473][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.951273][ T10] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0004/input/input39 [ 1040.039656][T10314] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1040.132114][ T10] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1040.166815][ T10] usb 4-1: USB disconnect, device number 72 [ 1040.196095][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.196129][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.196151][T10314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.196189][T10314] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1040.196219][T10314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.291896][T10314] usb 5-1: config 0 descriptor?? [ 1040.309582][ T5726] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1040.459620][ T5726] usb 6-1: Using ep0 maxpacket: 16 [ 1040.475860][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.475954][ T5726] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.475981][ T5726] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.573091][ T5726] usb 6-1: New USB device found, idVendor=045e, idProduct=10da, bcdDevice= 0.00 [ 1040.573126][ T5726] usb 6-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 1040.573235][ T5726] usb 6-1: Product: syz [ 1040.667828][ T5726] usb 6-1: config 0 descriptor?? [ 1040.792421][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1040.792933][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1040.793491][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1040.793776][T10314] usbhid 5-1:0.0: can't add hid device: -32 [ 1040.793985][T10314] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1040.901507][T10314] usb 5-1: USB disconnect, device number 74 [ 1041.068175][T13336] fido_id[13336]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1041.141202][ T5726] hid-generic 0003:045E:10DA.0005: ignoring exceeding usage max [ 1041.146872][ T5726] hid-generic 0003:045E:10DA.0005: ignoring exceeding usage max [ 1041.169766][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169818][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169851][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169883][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169913][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169948][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.169978][ T5726] hid-generic 0003:045E:10DA.0005: unknown main item tag 0x0 [ 1041.170045][ T5726] hid-generic 0003:045E:10DA.0005: unbalanced collection at end of report description [ 1041.171013][ T5726] hid-generic 0003:045E:10DA.0005: probe with driver hid-generic failed with error -22 [ 1042.006262][ T37] usb 6-1: USB disconnect, device number 14 [ 1045.324554][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1046.616625][T13439] overlayfs: failed to resolve './file0': -2 [ 1050.637590][ T9179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1051.134158][ T9179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1051.493597][ T9179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1051.668574][ T9179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1051.686396][ T9179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1054.802192][T13503] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.2395'. [ 1054.947303][T12864] Bluetooth: hci5: command tx timeout [ 1057.020367][T13506] vlan2: entered allmulticast mode [ 1057.020385][T13506] bond0: entered allmulticast mode [ 1057.020397][T13506] bond_slave_0: entered allmulticast mode [ 1057.020415][T13506] bond_slave_1: entered allmulticast mode [ 1057.037034][T12864] Bluetooth: hci5: command tx timeout [ 1059.099561][T12864] Bluetooth: hci5: command tx timeout [ 1061.286262][T12864] Bluetooth: hci5: command tx timeout [ 1062.821407][T13565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1062.821439][T13565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1062.826053][T13565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1062.826093][T13565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1066.451184][ T1436] bridge_slave_1: left allmulticast mode [ 1066.451234][ T1436] bridge_slave_1: left promiscuous mode [ 1066.451513][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.681347][ T1436] bridge_slave_0: left allmulticast mode [ 1066.681385][ T1436] bridge_slave_0: left promiscuous mode [ 1066.681671][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.374084][T13616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1067.388788][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2421'. [ 1067.388818][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2421'. [ 1067.388898][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2421'. [ 1068.542991][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.543067][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.815912][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.477698][T13636] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.2429'. [ 1069.482998][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.574231][ T1436] bond0 (unregistering): Released all slaves [ 1069.998117][T13643] vlan2: left allmulticast mode [ 1069.998139][T13643] bond0: left allmulticast mode [ 1069.998153][T13643] bond_slave_0: left allmulticast mode [ 1069.998173][T13643] bond_slave_1: left allmulticast mode [ 1070.379627][ T10] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 1070.591546][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.591611][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.667976][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1070.668137][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.668165][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.830754][ T10] cdc_ether 5-1:1.0: missing cdc ether descriptor [ 1071.679655][ T1436] hsr_slave_0: left promiscuous mode [ 1071.732130][ T1436] hsr_slave_1: left promiscuous mode [ 1071.735233][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.497067][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.121173][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1075.176992][ T10] usb 5-1: USB disconnect, device number 75 [ 1075.362106][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1076.486980][T13712] evm: overlay not supported [ 1079.599946][ T5798] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1079.634503][T13754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.772478][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.772508][ T5798] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1079.772562][ T5798] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1079.772586][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.824574][ T5798] usb 4-1: config 0 descriptor?? [ 1079.897628][ T5798] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1079.897729][ T5798] dvb-usb: bulk message failed: -22 (3/0) [ 1079.954639][ T5798] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1079.956678][ T5798] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1079.956730][ T5798] usb 4-1: media controller created [ 1080.262626][T13744] dvb-usb: bulk message failed: -22 (2/0) [ 1082.885314][T13482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.885551][T13482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.886235][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.887015][T13482] bridge_slave_0: entered allmulticast mode [ 1083.028039][T13482] bridge_slave_0: entered promiscuous mode [ 1083.056606][T13482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.056836][T13482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.057047][T13482] bridge_slave_1: entered allmulticast mode [ 1083.084246][T13482] bridge_slave_1: entered promiscuous mode [ 1083.155900][T13482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.169929][T13482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.432903][ T5798] dvb-usb: bulk message failed: -22 (6/0) [ 1083.432995][ T5798] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1083.439325][ T5798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 1083.456785][ T5798] dvb-usb: schedule remote query interval to 150 msecs. [ 1083.456824][ T5798] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1083.471441][ T5798] usb 4-1: USB disconnect, device number 73 [ 1083.535181][T13482] team0: Port device team_slave_0 added [ 1083.551448][T13482] team0: Port device team_slave_1 added [ 1085.301671][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1085.548797][T13792] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1085.621639][T13482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.621659][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.621692][T13482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.709057][T13482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.709085][T13482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.709214][T13482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.790426][T13792] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2489'. [ 1086.062890][T13482] hsr_slave_0: entered promiscuous mode [ 1086.084144][T13482] hsr_slave_1: entered promiscuous mode [ 1086.085324][T13482] debugfs: 'hsr0' already exists in 'hsr' [ 1086.085352][T13482] Cannot create hsr debugfs directory [ 1092.263366][T13482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1092.321435][T13482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.325199][T13482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1092.381763][T13482] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1092.387042][T13482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1092.534134][T13482] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1092.538822][T13482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1092.611367][T13482] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.787236][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2529'. [ 1097.320656][T13482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.334453][T13482] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.388069][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.388165][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.506456][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.508295][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.423854][T13977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.442514][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2554'. [ 1101.442588][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2554'. [ 1101.442796][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2554'. [ 1102.426262][T13985] JFS: discard option not supported on device [ 1102.426853][T13985] Mount JFS Failure: -5 [ 1102.426866][T13985] jfs_mount failed w/return code = -5 [ 1104.129636][T10314] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1104.304389][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1104.304428][T10314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.304452][T10314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1104.304498][T10314] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1104.304524][T10314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.376820][T10314] usb 5-1: config 0 descriptor?? [ 1104.604639][T13482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.914281][T10314] usbhid 5-1:0.0: can't add hid device: -71 [ 1104.914386][T10314] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1104.953708][T10314] usb 5-1: USB disconnect, device number 76 [ 1105.304599][T13482] veth0_vlan: entered promiscuous mode [ 1105.346203][T13482] veth1_vlan: entered promiscuous mode [ 1105.656161][T13482] veth0_macvtap: entered promiscuous mode [ 1105.748132][T13482] veth1_macvtap: entered promiscuous mode [ 1105.963684][T13482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.511643][T13482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.444818][ T1436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.744403][T11065] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.744604][T11065] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.924164][T11065] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.975295][ T9179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.050575][ T9179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.053102][ T9179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.086581][ T9179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.108088][ T9179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1115.183380][T12864] Bluetooth: hci2: command tx timeout [ 1117.405840][T12864] Bluetooth: hci2: command tx timeout [ 1119.419677][T12864] Bluetooth: hci2: command tx timeout [ 1120.655548][ T1436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.692155][T14150] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.2604'. [ 1121.369691][ T5726] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1121.524369][T12864] Bluetooth: hci2: command tx timeout [ 1121.777751][ T5726] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.777864][ T5726] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1121.987968][ T5726] usb 6-1: string descriptor 0 read error: -22 [ 1121.988072][ T5726] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.988092][ T5726] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.024119][ T5726] cdc_ether 6-1:1.0: missing cdc ether descriptor [ 1124.453463][ T1436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.277555][ T1009] usb 6-1: USB disconnect, device number 15 [ 1127.187731][ T1436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.456872][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1130.456946][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.592589][ T1436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.429086][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.437702][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.437961][T14072] bridge_slave_0: entered allmulticast mode [ 1136.479511][T14072] bridge_slave_0: entered promiscuous mode [ 1136.531022][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.548738][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.562873][T14072] bridge_slave_1: entered allmulticast mode [ 1136.589578][T14072] bridge_slave_1: entered promiscuous mode [ 1136.650559][T14305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1138.489947][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.532313][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.714286][ T1436] bridge_slave_1: left allmulticast mode [ 1138.714314][ T1436] bridge_slave_1: left promiscuous mode [ 1138.714522][ T1436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.211390][ T1436] bridge_slave_0: left allmulticast mode [ 1140.211428][ T1436] bridge_slave_0: left promiscuous mode [ 1140.212260][ T1436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.954978][T14401] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1143.955035][T14401] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1143.955890][T14401] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1143.955938][T14401] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1145.154569][ T1436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.744027][ T1436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.333194][ T1436] bond0 (unregistering): Released all slaves [ 1148.216416][T14072] team0: Port device team_slave_0 added [ 1148.220853][T14072] team0: Port device team_slave_1 added [ 1148.621872][ T5798] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1148.637212][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.637229][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.637259][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.735635][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.735656][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.735689][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.801789][ T5798] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1148.801810][ T5798] usb 6-1: config 0 has no interface number 0 [ 1148.801844][ T5798] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.801863][ T5798] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.801880][ T5798] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1148.801910][ T5798] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1148.801927][ T5798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.933292][ T5798] usb 6-1: config 0 descriptor?? [ 1149.469317][ T1436] hsr_slave_0: left promiscuous mode [ 1149.596329][ T1436] hsr_slave_1: left promiscuous mode [ 1149.597431][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.597457][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.643518][T14432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.660538][ T1436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.660568][ T1436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.662186][T14432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.816745][ T5798] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0006/input/input41 [ 1150.353038][ T1436] veth1_macvtap: left promiscuous mode [ 1150.353159][ T1436] veth0_macvtap: left promiscuous mode [ 1150.355276][ T1436] veth1_vlan: left promiscuous mode [ 1150.355507][ T1436] veth0_vlan: left promiscuous mode [ 1150.388094][ T5798] uclogic 0003:28BD:0042.0006: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 1150.448728][ T5798] usb 6-1: USB disconnect, device number 16 [ 1150.735460][T14469] fido_id[14469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1154.282333][ T5438] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 1154.482209][ T5438] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.482267][ T5438] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1154.486812][ T5438] usb 6-1: string descriptor 0 read error: -22 [ 1154.486944][ T5438] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.486962][ T5438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.085132][ T5438] usb 6-1: can't set config #1, error -71 [ 1156.100287][ T5438] usb 6-1: USB disconnect, device number 17 [ 1157.095827][T14541] JFS: discard option not supported on device [ 1157.109820][T14541] Mount JFS Failure: -5 [ 1157.109837][T14541] jfs_mount failed w/return code = -5 [ 1157.232920][ T1436] team0 (unregistering): Port device team_slave_1 removed [ 1157.362025][ T1436] team0 (unregistering): Port device team_slave_0 removed [ 1158.155146][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1158.898423][T14072] hsr_slave_0: entered promiscuous mode [ 1158.914348][T14072] hsr_slave_1: entered promiscuous mode [ 1158.917889][T14072] debugfs: 'hsr0' already exists in 'hsr' [ 1158.917932][T14072] Cannot create hsr debugfs directory [ 1161.496829][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1165.907065][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1166.874424][T14678] overlayfs: failed to resolve './file0': -2 [ 1176.193042][ T9179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1176.276541][ T9179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1176.291353][ T9179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1176.313411][ T9179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1176.314504][ T9179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1178.512685][ T9179] Bluetooth: hci5: command tx timeout [ 1179.702485][T14805] JFS: discard option not supported on device [ 1179.825584][T14805] Mount JFS Failure: -5 [ 1179.825617][T14805] jfs_mount failed w/return code = -5 [ 1180.540359][ T9179] Bluetooth: hci5: command tx timeout [ 1183.182069][ T9179] Bluetooth: hci5: command tx timeout [ 1184.263823][T14861] overlayfs: failed to resolve './file0': -2 [ 1185.262985][ T9179] Bluetooth: hci5: command tx timeout [ 1186.059268][T14872] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2850'. [ 1186.098866][T14872] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2850'. [ 1187.259671][ T10] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1187.461467][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1187.950956][ T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1187.950987][ T10] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1187.951009][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.951030][ T10] usb 4-1: config 0 has no interface number 0 [ 1187.951063][ T10] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1187.957113][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1187.957148][ T10] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1187.957172][ T10] usb 4-1: Product: syz [ 1187.957198][ T10] usb 4-1: Manufacturer: syz [ 1188.089855][ T10] usb 4-1: config 0 descriptor?? [ 1188.894572][T14735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.896266][T14735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.896543][T14735] bridge_slave_0: entered allmulticast mode [ 1188.937177][T14735] bridge_slave_0: entered promiscuous mode [ 1189.013216][T14735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.013807][T14735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.014824][T14735] bridge_slave_1: entered allmulticast mode [ 1189.086637][T14735] bridge_slave_1: entered promiscuous mode [ 1189.493955][ T10] usb 4-1: USB disconnect, device number 74 [ 1189.530532][ T3353] bridge_slave_1: left allmulticast mode [ 1189.530570][ T3353] bridge_slave_1: left promiscuous mode [ 1189.530844][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.769044][ T3353] bridge_slave_0: left allmulticast mode [ 1189.769073][ T3353] bridge_slave_0: left promiscuous mode [ 1189.769269][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.465053][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1191.465122][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.711690][T14952] binder: 14950:14952 ioctl 4018620d 0 returned -22 [ 1192.102537][T14951] binder: BINDER_SET_CONTEXT_MGR already set [ 1192.102550][T14951] binder: 14950:14951 ioctl 4018620d 200000001000 returned -16 [ 1192.239554][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1192.270620][ T3353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.391343][ T3353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.400085][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1192.407702][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1192.407785][ T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1192.407841][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.407902][ T9] usb 4-1: config 0 has no interface number 0 [ 1192.407987][ T9] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1192.458546][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1192.458580][ T9] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1192.458595][ T9] usb 4-1: Product: syz [ 1192.458606][ T9] usb 4-1: Manufacturer: syz [ 1192.508966][ T9] usb 4-1: config 0 descriptor?? [ 1192.547484][ T3353] bond0 (unregistering): Released all slaves [ 1192.657954][T14735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.794313][T14735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.076919][ T9] usb 4-1: USB disconnect, device number 75 [ 1193.452054][ T3353] hsr_slave_0: left promiscuous mode [ 1193.489841][ T3353] hsr_slave_1: left promiscuous mode [ 1193.494593][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.540763][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.650238][ T822] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1194.172374][ T822] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.172412][ T822] usb 4-1: config 0 has no interface number 0 [ 1194.172463][ T822] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.172493][ T822] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.172518][ T822] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.172562][ T822] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1194.172593][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.262091][ T822] usb 4-1: config 0 descriptor?? [ 1194.920755][T14986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.954958][T14986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.678821][ T822] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71 [ 1195.678898][ T822] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71 [ 1195.678917][ T822] uclogic 0003:28BD:0042.0007: pen probing failed: -71 [ 1195.678935][ T822] uclogic 0003:28BD:0042.0007: failed probing parameters: -71 [ 1195.679048][ T822] uclogic 0003:28BD:0042.0007: probe with driver uclogic failed with error -71 [ 1196.236832][ T822] usb 4-1: USB disconnect, device number 76 [ 1197.780111][ T3353] team0 (unregistering): Port device team_slave_1 removed [ 1197.903185][ T3353] team0 (unregistering): Port device team_slave_0 removed [ 1198.211047][T14735] team0: Port device team_slave_0 added [ 1198.230840][T14735] team0: Port device team_slave_1 added [ 1198.377121][T14735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.377135][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.377157][T14735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1198.437502][T14735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.437522][T14735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.437555][T14735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.828432][T14735] hsr_slave_0: entered promiscuous mode [ 1199.830962][T14735] hsr_slave_1: entered promiscuous mode [ 1199.842797][T14735] debugfs: 'hsr0' already exists in 'hsr' [ 1199.842820][T14735] Cannot create hsr debugfs directory [ 1200.901143][T15068] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1200.901218][T15068] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1200.902042][T15068] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1200.902087][T15068] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1202.389599][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1203.396153][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1203.396187][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1203.396213][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1203.396278][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1203.396363][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1203.396422][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.397185][ T9] usb 4-1: config 0 descriptor?? [ 1204.738993][ T9] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1204.739035][ T9] hdpvr 4-1:0.0: device init failed [ 1204.739139][ T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1204.762463][ T9] usb 4-1: USB disconnect, device number 77 [ 1205.139634][T15096] overlayfs: failed to resolve './file0': -2 [ 1207.106167][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1207.459802][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1207.459833][ T9] usb 5-1: config 0 has no interface number 0 [ 1207.459899][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.459929][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.459953][ T9] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1207.459999][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1207.460024][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.518444][ T9] usb 5-1: config 0 descriptor?? [ 1209.511853][T15107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.555649][T15107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.935034][ T9] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0008/input/input42 [ 1210.367808][ T9] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 1210.408968][ T9] usb 5-1: USB disconnect, device number 77 [ 1210.412149][T14735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1211.076682][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.096496][T14735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1211.725650][ T6925] udevd[6925]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1211.725836][ T6925] udevd[6925]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1211.774937][T15142] fido_id[15142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1211.850176][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.878107][T14735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1211.975011][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1212.261788][T14735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1212.971025][T14735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.331271][ T5438] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1214.711592][ T5438] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.711725][ T5438] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.838699][T15185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1215.389079][ T5438] usb 6-1: string descriptor 0 read error: -22 [ 1215.389234][ T5438] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1215.389261][ T5438] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.392171][T14735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.650906][ T5438] cdc_ether 6-1:1.0: missing cdc ether descriptor [ 1215.965928][ T9] usb 6-1: USB disconnect, device number 18 [ 1216.196833][T14735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.092301][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.136870][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.248476][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.248613][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.413231][T15279] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1224.549872][T14735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.769579][ T822] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1224.905571][T14735] veth0_vlan: entered promiscuous mode [ 1224.929548][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 1224.933387][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1224.935080][ T822] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1224.955714][ T822] usb 5-1: string descriptor 0 read error: -22 [ 1224.955981][ T822] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1224.956046][ T822] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1224.974828][T14735] veth1_vlan: entered promiscuous mode [ 1225.063363][ T822] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1225.232874][ T822] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1225.234671][ T822] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1225.234721][ T822] usb 5-1: media controller created [ 1225.330009][T14735] veth0_macvtap: entered promiscuous mode [ 1225.398431][T14735] veth1_macvtap: entered promiscuous mode [ 1225.554596][T14735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.587362][T14735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.695988][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.795921][ T822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.832871][T15280] process 'syz.4.2986' launched '/dev/fd/11' with NULL argv: empty string added [ 1226.258952][ T158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.259621][ T158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.287719][ T158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.024588][T15279] syz.4.2986 (15279) used greatest stack depth: 18880 bytes left [ 1228.209039][T11065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.209061][T11065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.506997][ T822] usb 5-1: USB disconnect, device number 78 [ 1230.312862][ T1560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.312879][ T1560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.351256][T15329] overlayfs: failed to resolve './file0': -2 [ 1235.848202][T12864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1235.904770][T12864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1235.922984][T12864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1235.928093][T12864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1235.956793][T12864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1236.952381][T15374] overlayfs: failed to resolve './file0': -2 [ 1238.219524][T12864] Bluetooth: hci2: command tx timeout [ 1238.449495][ T6549] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1239.056713][ T6549] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1239.056744][ T6549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.056769][ T6549] usb 6-1: Product: syz [ 1239.056780][ T6549] usb 6-1: Manufacturer: syz [ 1239.056791][ T6549] usb 6-1: SerialNumber: syz [ 1239.102097][ T6549] usb 6-1: config 0 descriptor?? [ 1239.374978][ T6549] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1239.713188][ T1560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.825550][T15400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3030'. [ 1240.159542][ T5816] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1240.299508][T12864] Bluetooth: hci2: command tx timeout [ 1240.359756][ T5816] usb 5-1: Using ep0 maxpacket: 8 [ 1240.368348][ T5816] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1240.374486][ T5816] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1240.405038][ T5816] usb 5-1: string descriptor 0 read error: -22 [ 1240.405144][ T5816] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1240.405171][ T5816] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1240.464823][ T5816] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1240.493133][ T5816] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1240.493576][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1240.493631][ T5816] usb 5-1: media controller created [ 1240.538821][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.127943][ T6549] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1241.159643][ T6549] usb 6-1: USB disconnect, device number 19 [ 1241.993165][ T5816] usb 5-1: USB disconnect, device number 79 [ 1242.095042][ T1560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.379574][T12864] Bluetooth: hci2: command tx timeout [ 1242.648557][T15432] netlink: 4588 bytes leftover after parsing attributes in process `syz.4.3043'. [ 1244.459556][T12864] Bluetooth: hci2: command tx timeout [ 1244.780542][T15462] overlayfs: failed to resolve './file0': -2 [ 1245.728500][ T1560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.182971][ T1560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.789564][ T5816] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1251.993538][T15545] netlink: 4576 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1252.009758][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 1252.219926][ T5816] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.219989][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1252.220018][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1252.220040][ T5816] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.335414][ T5816] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1252.335447][ T5816] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1252.335467][ T5816] usb 4-1: Manufacturer: syz [ 1252.896966][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.898258][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1253.221954][ T5816] usb 4-1: config 0 descriptor?? [ 1255.134288][ T9170] usb 4-1: USB disconnect, device number 78 [ 1255.242194][T15574] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3091'. [ 1255.569609][ T5726] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1255.719455][ T5726] usb 5-1: Using ep0 maxpacket: 8 [ 1255.722869][ T5726] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1255.725952][ T5726] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1255.783220][ T5726] usb 5-1: string descriptor 0 read error: -22 [ 1255.783340][ T5726] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1255.783365][ T5726] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1255.831468][ T5726] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1255.848658][ T5726] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1255.849025][ T5726] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1255.849078][ T5726] usb 5-1: media controller created [ 1255.853692][ T1560] bridge_slave_1: left allmulticast mode [ 1255.853784][ T1560] bridge_slave_1: left promiscuous mode [ 1255.869298][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.943020][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1256.045549][ T1560] bridge_slave_0: left allmulticast mode [ 1256.045588][ T1560] bridge_slave_0: left promiscuous mode [ 1256.046083][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.092774][ T9170] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1256.263201][ T9170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.263231][ T9170] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1256.263285][ T9170] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1256.263311][ T9170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.317254][ T9170] usb 4-1: config 0 descriptor?? [ 1256.364314][ T9170] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1256.364352][ T9170] dvb-usb: bulk message failed: -22 (3/0) [ 1256.470661][ T5816] usb 5-1: USB disconnect, device number 80 [ 1256.510611][ T9170] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1256.515975][ T9170] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1256.516033][ T9170] usb 4-1: media controller created [ 1256.570943][T15587] dvb-usb: bulk message failed: -22 (2/0) [ 1256.628083][ T9170] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.226707][ T9170] dvb-usb: bulk message failed: -22 (6/0) [ 1258.226805][ T9170] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1258.243901][ T9170] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 1258.272266][ T9170] dvb-usb: schedule remote query interval to 150 msecs. [ 1258.272298][ T9170] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1258.384989][ T9170] usb 4-1: USB disconnect, device number 79 [ 1259.236696][ T9170] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1261.554480][T15647] binder: BINDER_SET_CONTEXT_MGR already set [ 1261.554599][T15647] binder: 15643:15647 ioctl 4018620d 200000000100 returned -16 [ 1261.643529][T15647] binder: 15643:15647 ioctl c0306201 0 returned -14 [ 1262.364245][T15645] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.364258][T15645] binder: 15643:15645 ioctl 4018620d 200000001000 returned -16 [ 1263.358615][ T1560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1263.440289][ T1560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1263.521139][ T1560] bond0 (unregistering): Released all slaves [ 1266.599019][T15351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.599147][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.599592][T15351] bridge_slave_0: entered allmulticast mode [ 1266.604694][T15351] bridge_slave_0: entered promiscuous mode [ 1266.761442][T15351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.761591][T15351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.761845][T15351] bridge_slave_1: entered allmulticast mode [ 1266.765357][T15351] bridge_slave_1: entered promiscuous mode [ 1267.395391][T15351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.408460][T15351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.264282][T15351] team0: Port device team_slave_0 added [ 1270.380586][T15351] team0: Port device team_slave_1 added [ 1270.645941][ T1560] hsr_slave_0: left promiscuous mode [ 1271.097904][ T1560] hsr_slave_1: left promiscuous mode [ 1271.110343][ T1560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.110373][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.137505][ T1560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.137550][ T1560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.239681][ T1560] veth1_macvtap: left promiscuous mode [ 1271.239798][ T1560] veth0_macvtap: left promiscuous mode [ 1271.240069][ T1560] veth1_vlan: left promiscuous mode [ 1271.240276][ T1560] veth0_vlan: left promiscuous mode [ 1273.889583][ T9] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 1274.086794][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1274.086829][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.086852][ T9] usb 5-1: Product: syz [ 1274.086867][ T9] usb 5-1: Manufacturer: syz [ 1274.086883][ T9] usb 5-1: SerialNumber: syz [ 1274.130450][ T9] usb 5-1: config 0 descriptor?? [ 1274.149481][ T5816] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1274.311682][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 1274.316332][ T5816] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1274.316365][ T5816] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1274.316388][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.316409][ T5816] usb 6-1: config 0 has no interface number 0 [ 1274.316442][ T5816] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1274.385877][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1274.385963][ T5816] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1274.385990][ T5816] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1274.386011][ T5816] usb 6-1: Product: syz [ 1274.386027][ T5816] usb 6-1: Manufacturer: syz [ 1274.464628][ T5816] usb 6-1: config 0 descriptor?? [ 1274.958372][ T1009] usb 6-1: USB disconnect, device number 20 [ 1275.770572][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1275.770967][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1275.771344][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1275.772565][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1275.772716][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1275.856693][ T9] usb 5-1: USB disconnect, device number 81 [ 1276.608920][ T1560] team0 (unregistering): Port device team_slave_1 removed [ 1276.727960][ T1560] team0 (unregistering): Port device team_slave_0 removed [ 1278.689544][ T5798] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1278.866732][ T5798] usb 4-1: Using ep0 maxpacket: 8 [ 1278.880366][ T822] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 1278.934825][T15873] JFS: discard option not supported on device [ 1278.971056][T15873] Mount JFS Failure: -5 [ 1278.971129][T15873] jfs_mount failed w/return code = -5 [ 1279.403847][ T5798] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1279.403881][ T5798] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 1279.403903][ T5798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.403925][ T5798] usb 4-1: config 0 has no interface number 0 [ 1279.403959][ T5798] usb 4-1: config 0 interface 255 has no altsetting 0 [ 1279.432007][ T5798] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1279.432039][ T5798] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1279.442192][ T5798] usb 4-1: Product: syz [ 1279.442221][ T5798] usb 4-1: Manufacturer: syz [ 1279.451922][ T822] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1279.451956][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.451979][ T822] usb 5-1: Product: syz [ 1279.451995][ T822] usb 5-1: Manufacturer: syz [ 1279.452010][ T822] usb 5-1: SerialNumber: syz [ 1279.590414][ T822] usb 5-1: config 0 descriptor?? [ 1279.594270][ T5798] usb 4-1: config 0 descriptor?? [ 1279.821076][ T822] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1279.825634][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1279.851199][T15351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.851219][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.851251][T15351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.972071][T15351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.972091][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.972123][T15351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.055489][ T1009] usb 4-1: USB disconnect, device number 80 [ 1280.389759][T15351] hsr_slave_0: entered promiscuous mode [ 1280.394038][T15351] hsr_slave_1: entered promiscuous mode [ 1280.395219][T15351] debugfs: 'hsr0' already exists in 'hsr' [ 1280.395248][T15351] Cannot create hsr debugfs directory [ 1282.091490][ T822] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1282.143701][ T822] usb 5-1: USB disconnect, device number 82 [ 1282.791553][ T1009] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1283.184011][ T1009] usb 4-1: Using ep0 maxpacket: 8 [ 1283.434714][ T1009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.434753][ T1009] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1283.434800][ T1009] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1283.434825][ T1009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.470252][ T1009] usb 4-1: config 0 descriptor?? [ 1284.047500][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x2 [ 1284.047538][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047576][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047604][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047631][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047658][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047685][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047712][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047738][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.047764][ T1009] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 1284.202306][ T1009] ryos 0003:1E7D:3138.0009: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 1284.237479][ T1009] usb 4-1: USB disconnect, device number 81 [ 1284.529983][ T822] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1284.932092][ T822] usb 6-1: Using ep0 maxpacket: 8 [ 1284.934969][ T822] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1284.934999][ T822] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1284.935022][ T822] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.935043][ T822] usb 6-1: config 0 has no interface number 0 [ 1284.935076][ T822] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1284.937551][ T822] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1284.937582][ T822] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1284.937604][ T822] usb 6-1: Product: syz [ 1284.937634][ T822] usb 6-1: Manufacturer: syz [ 1285.003162][ T822] usb 6-1: config 0 descriptor?? [ 1285.704714][ T5438] usb 6-1: USB disconnect, device number 21 [ 1286.426831][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1287.277324][ T5816] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1287.699995][ T5816] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1287.700028][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.700050][ T5816] usb 6-1: Product: syz [ 1287.700066][ T5816] usb 6-1: Manufacturer: syz [ 1287.700081][ T5816] usb 6-1: SerialNumber: syz [ 1287.770804][ T5816] usb 6-1: config 0 descriptor?? [ 1289.248962][ T5816] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1290.022604][T15997] binder: BINDER_SET_CONTEXT_MGR already set [ 1290.022716][T15997] binder: 15992:15997 ioctl 4018620d 200000001000 returned -16 [ 1290.982261][ T5816] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1291.016122][ T5816] usb 6-1: USB disconnect, device number 22 [ 1295.519465][ T5816] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1295.699642][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 1295.816525][ T5816] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1295.816556][ T5816] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1295.816579][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.816599][ T5816] usb 6-1: config 0 has no interface number 0 [ 1295.816634][ T5816] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1296.140308][ T5816] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1296.140344][ T5816] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1296.140366][ T5816] usb 6-1: Product: syz [ 1296.140382][ T5816] usb 6-1: Manufacturer: syz [ 1296.149111][ T5816] usb 6-1: config 0 descriptor?? [ 1296.388581][ T9179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.448223][ T9179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.462593][ T9179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.498029][ T9179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.505083][ T9179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1296.795758][ T1009] usb 6-1: USB disconnect, device number 23 [ 1297.665557][ T3353] bridge_slave_1: left allmulticast mode [ 1297.665596][ T3353] bridge_slave_1: left promiscuous mode [ 1297.665870][ T3353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.883118][ T9179] Bluetooth: hci2: command tx timeout [ 1299.832042][ T3353] bridge_slave_0: left allmulticast mode [ 1299.832090][ T3353] bridge_slave_0: left promiscuous mode [ 1299.832353][ T3353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.940488][ T9179] Bluetooth: hci2: command tx timeout [ 1301.600145][ T3353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.890729][ T3353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.992295][ T3353] bond0 (unregistering): Released all slaves [ 1302.805122][ T5816] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1302.969508][ T5816] usb 6-1: Using ep0 maxpacket: 8 [ 1302.971735][ T5816] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1302.971764][ T5816] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1302.971792][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.971806][ T5816] usb 6-1: config 0 has no interface number 0 [ 1302.971830][ T5816] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1302.973607][ T5816] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1302.973635][ T5816] usb 6-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1302.973655][ T5816] usb 6-1: Product: syz [ 1302.973690][ T5816] usb 6-1: Manufacturer: syz [ 1302.978199][ T5816] usb 6-1: config 0 descriptor?? [ 1303.020463][ T9179] Bluetooth: hci2: command tx timeout [ 1304.113074][ T3353] hsr_slave_0: left promiscuous mode [ 1304.151223][ T3353] hsr_slave_1: left promiscuous mode [ 1304.152314][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.202570][ T3353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.203657][ T822] usb 6-1: USB disconnect, device number 24 [ 1305.696518][ T9179] Bluetooth: hci2: command tx timeout [ 1306.060468][ T3353] team0 (unregistering): Port device team_slave_1 removed [ 1306.126083][ T3353] team0 (unregistering): Port device team_slave_0 removed [ 1306.370147][T12864] ================================================================== [ 1306.370244][T12864] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.370376][T12864] Read of size 8 at addr ffffc90006751008 by task kworker/u9:3/12864 [ 1306.370397][T12864] [ 1306.370414][T12864] CPU: 1 UID: 0 PID: 12864 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1306.370441][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1306.370453][T12864] Workqueue: hci1 hci_rx_work [ 1306.370556][T12864] Call Trace: [ 1306.370566][T12864] [ 1306.370575][T12864] dump_stack_lvl+0xe8/0x150 [ 1306.370663][T12864] print_address_description+0x55/0x1e0 [ 1306.370696][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.370738][T12864] print_report+0x58/0x70 [ 1306.370763][T12864] kasan_report+0x117/0x150 [ 1306.370856][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.370879][T12864] __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.370899][T12864] kcov_remote_start+0x295/0x6f0 [ 1306.370989][T12864] hci_rx_work+0x10f/0x1020 [ 1306.371015][T12864] ? process_scheduled_works+0xa20/0x14e0 [ 1306.371152][T12864] process_scheduled_works+0xa8e/0x14e0 [ 1306.371187][T12864] ? __pfx_process_scheduled_works+0x10/0x10 [ 1306.371211][T12864] ? assign_work+0x3cf/0x5d0 [ 1306.371234][T12864] worker_thread+0xa47/0xfb0 [ 1306.371262][T12864] ? __kthread_parkme+0x71/0x1f0 [ 1306.371310][T12864] kthread+0x388/0x470 [ 1306.371337][T12864] ? __pfx_worker_thread+0x10/0x10 [ 1306.371359][T12864] ? __pfx_kthread+0x10/0x10 [ 1306.371385][T12864] ret_from_fork+0x514/0xb70 [ 1306.371443][T12864] ? __pfx_ret_from_fork+0x10/0x10 [ 1306.371471][T12864] ? __switch_to+0xc89/0x1420 [ 1306.371516][T12864] ? __pfx_kthread+0x10/0x10 [ 1306.371544][T12864] ret_from_fork_asm+0x1a/0x30 [ 1306.371568][T12864] [ 1306.371574][T12864] [ 1306.371579][T12864] The buggy address belongs to a vmalloc virtual mapping [ 1306.371596][T12864] Memory state around the buggy address: [ 1306.371612][T12864] ffffc90006750f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1306.371624][T12864] ffffc90006750f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1306.371636][T12864] >ffffc90006751000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1306.371645][T12864] ^ [ 1306.371654][T12864] ffffc90006751080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1306.371665][T12864] ffffc90006751100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1306.371675][T12864] ================================================================== [ 1306.371756][T12864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1306.371774][T12864] CPU: 1 UID: 0 PID: 12864 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1306.371799][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1306.371814][T12864] Workqueue: hci1 hci_rx_work [ 1306.371839][T12864] Call Trace: [ 1306.371845][T12864] [ 1306.371853][T12864] vpanic+0x56c/0xa60 [ 1306.371871][T12864] ? __pfx_vpanic+0x10/0x10 [ 1306.371888][T12864] ? __pfx___schedule+0x10/0x10 [ 1306.371979][T12864] panic+0xc5/0xd0 [ 1306.371995][T12864] ? __pfx_panic+0x10/0x10 [ 1306.372013][T12864] ? preempt_schedule_common+0x82/0xd0 [ 1306.372038][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.372057][T12864] check_panic_on_warn+0x89/0xb0 [ 1306.372101][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.372121][T12864] end_report+0x73/0x170 [ 1306.372142][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.372160][T12864] kasan_report+0x128/0x150 [ 1306.372181][T12864] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.372204][T12864] __list_del_entry_valid_or_report+0xb5/0x190 [ 1306.372224][T12864] kcov_remote_start+0x295/0x6f0 [ 1306.372253][T12864] hci_rx_work+0x10f/0x1020 [ 1306.372278][T12864] ? process_scheduled_works+0xa20/0x14e0 [ 1306.372302][T12864] process_scheduled_works+0xa8e/0x14e0 [ 1306.372337][T12864] ? __pfx_process_scheduled_works+0x10/0x10 [ 1306.372361][T12864] ? assign_work+0x3cf/0x5d0 [ 1306.372384][T12864] worker_thread+0xa47/0xfb0 [ 1306.372412][T12864] ? __kthread_parkme+0x71/0x1f0 [ 1306.372439][T12864] kthread+0x388/0x470 [ 1306.372466][T12864] ? __pfx_worker_thread+0x10/0x10 [ 1306.372487][T12864] ? __pfx_kthread+0x10/0x10 [ 1306.372514][T12864] ret_from_fork+0x514/0xb70 [ 1306.372543][T12864] ? __pfx_ret_from_fork+0x10/0x10 [ 1306.372570][T12864] ? __switch_to+0xc89/0x1420 [ 1306.372595][T12864] ? __pfx_kthread+0x10/0x10 [ 1306.372628][T12864] ret_from_fork_asm+0x1a/0x30 [ 1306.372652][T12864] [ 1306.373254][T12864] Kernel Offset: disabled