last executing test programs: 15.975421126s ago: executing program 3 (id=3068): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) shutdown(r1, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x4c005) socket$kcm(0x29, 0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, 0x0, &(0x7f0000000280), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) 14.704238275s ago: executing program 4 (id=3070): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 14.677328707s ago: executing program 3 (id=3071): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x4005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000200)={{&(0x7f000030b000/0x3000)=nil, 0x3000}, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) 13.920032796s ago: executing program 3 (id=3072): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0xa, 0x801, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 13.5188051s ago: executing program 4 (id=3073): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000180)={0x20, 0x3, 0x2, "8ce4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x0, 0x14, 0x10, "54025880dd32ffc5e631d96982848970"}, 0x0, 0x0, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0x2}, 0x0, 0x0}) 13.128048378s ago: executing program 3 (id=3075): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000a00), 0x0, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xffb) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) socket$inet6(0xa, 0x2, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.085531861s ago: executing program 3 (id=3077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74", 0xd}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xe98}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.696617725s ago: executing program 0 (id=3081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x83, &(0x7f0000001000)={r2}, 0x8) 9.523768057s ago: executing program 4 (id=3084): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe000095069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 9.522871836s ago: executing program 0 (id=3085): syz_open_procfs(0x0, &(0x7f0000000e40)='mountinfo\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) 9.396471029s ago: executing program 3 (id=3086): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) 9.34284158s ago: executing program 2 (id=3087): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, 0x0, 0x4005) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000200)={{&(0x7f000030b000/0x3000)=nil, 0x3000}, 0x100000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000600)='./tracing/dynamic_events\x00', 0x118) 8.815924034s ago: executing program 0 (id=3089): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)='m', 0xffffff4c}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 8.644668289s ago: executing program 1 (id=3090): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 8.352881109s ago: executing program 1 (id=3091): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0xa, 0x801, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 8.348684841s ago: executing program 2 (id=3092): mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 8.298929244s ago: executing program 4 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000240)={0x3, 0x0, &(0x7f00000000c0), 0x0}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f00000001c0)={{r4, r3, 0x1, [0x0, 0xf7df]}, {r4, r5, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x2, 0x2, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x1402, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) write$sequencer(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="810100"], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 8.297184441s ago: executing program 1 (id=3094): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000180)={0x20, 0x3, 0x2, "8ce4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x0, 0x14, 0x10, "54025880dd32ffc5e631d96982848970"}, 0x0, 0x0, &(0x7f0000000680)={0xc0, 0xa1, 0x4, 0x2}, 0x0, 0x0}) 8.262945034s ago: executing program 0 (id=3095): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) fsopen(&(0x7f00000001c0)='bdev\x00', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='16', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) close(r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe000095069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) 8.07603502s ago: executing program 2 (id=3096): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xaed8e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000004}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.746744122s ago: executing program 0 (id=3097): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) socket$phonet(0x23, 0x2, 0x1) 4.745787182s ago: executing program 1 (id=3098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 3.415390541s ago: executing program 1 (id=3099): syz_open_procfs(0x0, &(0x7f0000000e40)='mountinfo\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 2.472595412s ago: executing program 2 (id=3100): capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a43", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.425492809s ago: executing program 4 (id=3101): socket$kcm(0x2, 0xa, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x195) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 1.516550092s ago: executing program 0 (id=3102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x18, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 1.488487995s ago: executing program 1 (id=3103): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0xfff0}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x24000804) 1.397588295s ago: executing program 4 (id=3104): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0xa, 0x801, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 1.250907417s ago: executing program 2 (id=3105): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0xfffffffffffffee7, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xf}, {0xd}}}, 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000280)=r0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 0s ago: executing program 2 (id=3106): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) fsopen(0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) kernel console output (not intermixed with test programs): nd, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 297.689671][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.740755][ T5886] usb 3-1: config 0 descriptor?? [ 298.178760][ T5886] hid_parser_main: 29 callbacks suppressed [ 298.178785][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178816][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178840][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178864][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178888][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178912][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178937][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178962][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.178986][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.179011][ T5886] lenovo 0003:17EF:60B5.0005: unknown main item tag 0x0 [ 298.295472][ T5886] lenovo 0003:17EF:60B5.0005: hidraw0: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 298.362858][ T5886] usb 3-1: USB disconnect, device number 35 [ 298.497441][ T9162] fido_id[9162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 299.216734][ T5721] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 299.379509][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 299.379538][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 299.381593][ T5721] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 299.381620][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.381634][ T5721] usb 1-1: Product: syz [ 299.381641][ T5721] usb 1-1: Manufacturer: syz [ 299.381648][ T5721] usb 1-1: SerialNumber: syz [ 299.395639][ T5615] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 299.469510][ T5721] ums-karma 1-1:1.0: USB Mass Storage device detected [ 299.491027][ T5721] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 299.491027][ T5721] Please send a copy of this message to and [ 299.548072][ T5615] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 299.548100][ T5615] usb 2-1: config 0 has no interface number 0 [ 299.548145][ T5615] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 299.550474][ T5615] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 299.550512][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 299.550534][ T5615] usb 2-1: Manufacturer: syz [ 299.550549][ T5615] usb 2-1: SerialNumber: syz [ 299.622650][ T5615] usb 2-1: config 0 descriptor?? [ 299.687228][ T5721] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5 [ 299.816881][ T31] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 299.965668][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 299.970690][ T31] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 299.970726][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.970759][ T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 299.970783][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.992601][ T31] usb 3-1: config 0 descriptor?? [ 300.243164][ T5957] usb 2-1: USB disconnect, device number 24 [ 300.403763][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 300.403896][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 300.412280][ T31] usb 3-1: USB disconnect, device number 36 [ 301.088981][ T9260] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 301.318410][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1327'. [ 301.335793][ T5957] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 301.488655][ T5957] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 301.488683][ T5957] usb 2-1: config 0 has no interface number 0 [ 301.488729][ T5957] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 301.490782][ T5957] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 301.490812][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 301.490832][ T5957] usb 2-1: Manufacturer: syz [ 301.490847][ T5957] usb 2-1: SerialNumber: syz [ 301.520940][ T5957] usb 2-1: config 0 descriptor?? [ 301.904141][ T9295] geneve0: entered promiscuous mode [ 301.916822][ T9295] geneve0: left promiscuous mode [ 301.917186][ T5615] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 301.989408][ T31] usb 1-1: USB disconnect, device number 32 [ 302.065826][ T5615] usb 4-1: Using ep0 maxpacket: 8 [ 302.068258][ T5615] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 302.068294][ T5615] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.068328][ T5615] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 302.068352][ T5615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.120884][ T5615] usb 4-1: config 0 descriptor?? [ 302.194933][ T31] usb 2-1: USB disconnect, device number 25 [ 302.566482][ T5615] usbhid 4-1:0.0: can't add hid device: -71 [ 302.566596][ T5615] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 302.626265][ T5738] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 302.630336][ T5615] usb 4-1: USB disconnect, device number 21 [ 302.784437][ T5738] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 302.784457][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.803327][ T5738] usb 3-1: config 0 descriptor?? [ 302.810991][ T5738] cp210x 3-1:0.0: cp210x converter detected [ 303.210000][ T5738] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 303.213196][ T5738] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 303.213270][ T5738] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 303.235970][ T5738] usb 3-1: cp210x converter now attached to ttyUSB0 [ 304.477018][ T5738] usb 3-1: USB disconnect, device number 37 [ 304.542475][ T5738] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.544104][ T5738] cp210x 3-1:0.0: device disconnected [ 304.787214][ T5891] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 304.939629][ T5891] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 304.939658][ T5891] usb 2-1: config 0 has no interface number 0 [ 304.939700][ T5891] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 304.944018][ T5891] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 304.944049][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 304.944069][ T5891] usb 2-1: Manufacturer: syz [ 304.944084][ T5891] usb 2-1: SerialNumber: syz [ 305.037454][ T5891] usb 2-1: config 0 descriptor?? [ 305.798232][ T5886] usb 2-1: USB disconnect, device number 26 [ 306.343676][ T5738] IPVS: starting estimator thread 0... [ 306.425754][ T9418] IPVS: using max 9 ests per chain, 21600 per kthread [ 306.474786][ T9424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1397'. [ 307.295973][ T5738] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 307.456668][ T5738] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 307.456702][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.456722][ T5738] usb 4-1: Product: syz [ 307.456737][ T5738] usb 4-1: Manufacturer: syz [ 307.456750][ T5738] usb 4-1: SerialNumber: syz [ 307.938825][ T5738] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 307.938889][ T5738] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 308.576138][ T5615] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.735749][ T5615] usb 2-1: Using ep0 maxpacket: 32 [ 308.738903][ T5615] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 308.738930][ T5615] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 308.738950][ T5615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.738969][ T5615] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 308.738990][ T5615] usb 2-1: config 1 has no interface number 0 [ 308.739034][ T5615] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 308.739047][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.853491][ T5615] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 308.955702][ T5738] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 308.955759][ T5738] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 308.956607][ T5738] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 309.049062][ T5615] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 309.049512][ T5615] snd_usb_pod 2-1:1.1: invalid control EP [ 309.049529][ T5615] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 309.049825][ T5615] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 309.050461][ T5615] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 309.061667][ T5738] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 309.098304][ T5738] usb 4-1: USB disconnect, device number 22 [ 309.253032][ T31] usb 2-1: USB disconnect, device number 27 [ 310.848174][ T36] kauditd_printk_skb: 1064 callbacks suppressed [ 310.848193][ T36] audit: type=1800 audit(1785790502.024:1078): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1447" name="bus" dev="tmpfs" ino=1321 res=0 errno=0 [ 311.715795][ T5615] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 311.881303][ T5615] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 311.881331][ T5615] usb 1-1: config 0 has no interface number 0 [ 311.881375][ T5615] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 311.883649][ T5615] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 311.883679][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 311.883699][ T5615] usb 1-1: Manufacturer: syz [ 311.883714][ T5615] usb 1-1: SerialNumber: syz [ 311.905940][ T5886] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 311.970832][ T5615] usb 1-1: config 0 descriptor?? [ 312.081037][ T5886] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 312.081069][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.081089][ T5886] usb 2-1: Product: syz [ 312.081110][ T5886] usb 2-1: Manufacturer: syz [ 312.081124][ T5886] usb 2-1: SerialNumber: syz [ 312.552014][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 312.552050][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 313.982075][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 313.982133][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 314.008690][ T5886] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 314.031957][ T5886] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 314.076423][ T5886] usb 2-1: USB disconnect, device number 28 [ 314.358282][ T9635] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 314.502251][ T5610] usb 1-1: USB disconnect, device number 33 [ 314.676872][ T9648] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1486'. [ 314.869151][ T9658] l2tp_ppp: sess 2/0: no socket in recv [ 315.858609][ T9684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1500'. [ 316.614694][ T9714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.198480][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.198547][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.872127][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.076856][ T9774] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1537'. [ 320.375221][ T9789] overlayfs: overlapping lowerdir path [ 322.113784][ T9822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.805903][ T5721] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 323.085706][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 323.088010][ T5721] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 323.088038][ T5721] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 323.088059][ T5721] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 323.088080][ T5721] usb 3-1: config 1 has no interface number 0 [ 323.088124][ T5721] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.088150][ T5721] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 323.088192][ T5721] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 323.088220][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.200526][ T5721] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 323.350929][ T9853] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1571'. [ 323.403846][ T5721] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 323.426529][ T9855] overlayfs: overlapping lowerdir path [ 323.856184][ T5886] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 323.995063][ T5886] usb 1-1: device descriptor read/64, error -71 [ 324.042307][ T5738] usb 3-1: USB disconnect, device number 38 [ 324.811695][ T5738] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 324.936039][ T5886] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 324.954753][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 324.954778][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 325.076156][ T5886] usb 1-1: device descriptor read/64, error -71 [ 325.979579][ T5886] usb usb1-port1: attempt power cycle [ 326.141377][ T9894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.328593][ T5886] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 326.384070][ T5886] usb 1-1: device descriptor read/8, error -71 [ 326.641215][ T5886] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 326.666408][ T5886] usb 1-1: device descriptor read/8, error -71 [ 326.753797][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 326.753821][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 326.775968][ T5886] usb usb1-port1: unable to enumerate USB device [ 326.945782][ T5957] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 327.115287][ T5957] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.115319][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.115339][ T5957] usb 2-1: Product: syz [ 327.115352][ T5957] usb 2-1: Manufacturer: syz [ 327.115366][ T5957] usb 2-1: SerialNumber: syz [ 327.355820][ T5886] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 327.515629][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 327.519885][ T5886] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 327.519913][ T5886] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 327.519934][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 327.519955][ T5886] usb 1-1: config 1 has no interface number 0 [ 327.520009][ T5886] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 327.520035][ T5886] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 327.520075][ T5886] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 327.520098][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.741673][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 327.752976][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 327.753049][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 327.979879][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 328.393956][ T5886] usb 1-1: USB disconnect, device number 38 [ 328.409171][ T5886] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 328.995930][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 328.995985][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 328.997428][ T5957] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 329.079181][ T5957] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 329.139134][ T5957] usb 2-1: USB disconnect, device number 29 [ 330.165624][ T5886] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 330.319110][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.322524][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.322550][ T5886] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 330.322592][ T5886] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 330.322629][ T5886] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 330.322667][ T5886] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.322693][ T5886] usb 3-1: config 1 interface 1 has no altsetting 0 [ 330.409667][ T5886] usb 3-1: string descriptor 0 read error: -22 [ 330.409872][ T5886] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 330.409899][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.389525][ T5886] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 332.226781][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1662'. [ 332.983228][ T5734] usb 3-1: USB disconnect, device number 39 [ 333.235761][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 333.251548][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1673'. [ 334.603144][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.604463][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.938421][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.945532][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.424181][T10110] Invalid ELF header magic: != ELF [ 336.485989][ T3345] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.487582][ T160] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.487623][ T160] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.487657][ T160] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.245844][ T5734] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 337.418112][ T5734] usb 3-1: Using ep0 maxpacket: 8 [ 337.422377][ T5734] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 337.422405][ T5734] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 337.422440][ T5734] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 337.422463][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.205301][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.061539][ T5615] usb 3-1: USB disconnect, device number 40 [ 340.939541][T10277] Invalid ELF header magic: != ELF [ 341.495620][ T48] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 341.645662][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 341.648045][ T48] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 341.648926][ T48] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 341.648969][ T48] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 341.649148][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.750319][T10298] overlay: Unknown parameter '/' [ 342.362413][ T5615] usb 2-1: USB disconnect, device number 30 [ 343.869348][T10334] binder: 10330:10334 ioctl c0306201 200000000680 returned -14 [ 344.210213][T10341] overlay: Unknown parameter '/' [ 344.355666][ T5957] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 344.595682][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 344.597939][ T5957] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 344.597966][ T5957] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 344.598004][ T5957] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 344.598084][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.863261][T10351] Invalid ELF header magic: != ELF [ 346.944645][ T5734] usb 3-1: USB disconnect, device number 41 [ 349.135224][ T5615] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 349.357166][ T5615] usb 2-1: Using ep0 maxpacket: 8 [ 349.359084][ T5615] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 349.359126][ T5615] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 349.359148][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.074135][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.125090][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.140887][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.175610][ T48] usb 2-1: USB disconnect, device number 31 [ 350.255848][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.286446][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.219491][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1843'. [ 352.666268][ T4915] Bluetooth: hci5: command tx timeout [ 354.410964][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 354.804041][ T4915] Bluetooth: hci5: command tx timeout [ 355.380157][T10572] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 357.586923][ T4915] Bluetooth: hci5: command tx timeout [ 357.751703][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.196277][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1870'. [ 359.296219][T10604] Can't find ip_set type hash:ip,port, [ 359.599694][ T4915] Bluetooth: hci5: command tx timeout [ 359.895501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 360.834295][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.900888][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.264503][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.264864][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.265089][T10485] bridge_slave_0: entered allmulticast mode [ 366.300328][T10485] bridge_slave_0: entered promiscuous mode [ 366.403684][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.403786][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.403920][T10485] bridge_slave_1: entered allmulticast mode [ 366.406601][T10485] bridge_slave_1: entered promiscuous mode [ 367.685533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 367.805418][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.324712][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.330098][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.493531][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 368.643181][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1893'. [ 369.454721][T10485] team0: Port device team_slave_0 added [ 369.528805][T10485] team0: Port device team_slave_1 added [ 369.638515][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.638531][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.638552][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.641161][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.641176][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.641200][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.786127][ T5886] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 369.981179][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.982731][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.982756][ T5886] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 369.982805][ T5886] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 369.982844][ T5886] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 369.982886][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 369.982912][ T5886] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 369.982934][ T5886] usb 1-1: config 1 interface 1 has no altsetting 0 [ 369.990210][ T5886] usb 1-1: string descriptor 0 read error: -22 [ 369.990367][ T5886] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 369.990392][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.619571][T10710] gadgetfs: bound to dummy_udc driver [ 370.724095][ T5886] usb 1-1: incorrect wMaxPacketSize 0x0 for BADD profile [ 371.047839][T10485] hsr_slave_0: entered promiscuous mode [ 371.050782][T10485] hsr_slave_1: entered promiscuous mode [ 371.066405][T10485] debugfs: 'hsr0' already exists in 'hsr' [ 371.066448][T10485] Cannot create hsr debugfs directory [ 371.195647][ T5886] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 373.216143][ T5957] usb 1-1: USB disconnect, device number 39 [ 373.450025][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1907'. [ 373.676308][ T42] bridge_slave_1: left allmulticast mode [ 373.676582][ T42] bridge_slave_1: left promiscuous mode [ 373.701291][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.899032][ T42] bridge_slave_0: left allmulticast mode [ 373.899069][ T42] bridge_slave_0: left promiscuous mode [ 373.899403][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.796523][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.796590][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.438631][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.486303][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.508082][ T42] bond0 (unregistering): Released all slaves [ 379.514095][ T42] bond1 (unregistering): Released all slaves [ 379.529290][ T42] bond2 (unregistering): Released all slaves [ 379.745802][ T5957] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 379.887608][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 379.906413][ T5957] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 379.906441][ T5957] usb 1-1: config 0 has no interface number 0 [ 379.906482][ T5957] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 379.906510][ T5957] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 379.910650][ T5957] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 379.910678][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 379.910696][ T5957] usb 1-1: Manufacturer: syz [ 379.910710][ T5957] usb 1-1: SerialNumber: syz [ 380.005298][ T5957] usb 1-1: config 0 descriptor?? [ 380.218360][ T5957] usbtouchscreen 1-1:0.214: Failed to read FW rev: 9 [ 380.218702][ T5957] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 382.580520][ T5721] usb 1-1: USB disconnect, device number 40 [ 389.507533][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 389.730344][T10896] l2tp_ppp: sess 2/0: no socket in recv [ 391.318825][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 391.377522][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 393.116574][ T42] hsr_slave_0: left promiscuous mode [ 393.145670][ T42] hsr_slave_1: left promiscuous mode [ 393.146536][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.146616][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.184417][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.184443][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.270131][ T42] veth1_macvtap: left promiscuous mode [ 393.270593][ T42] veth0_macvtap: left promiscuous mode [ 393.271711][ T42] veth1_vlan: left promiscuous mode [ 393.272231][ T42] veth0_vlan: left promiscuous mode [ 396.496388][ T42] team0 (unregistering): Port device team_slave_1 removed [ 396.561213][ T42] team0 (unregistering): Port device team_slave_0 removed [ 398.864791][T11026] Invalid ELF header magic: != ELF [ 401.927745][T11055] tipc: Started in network mode [ 401.927780][T11055] tipc: Node identity 46638e52dc3a, cluster identity 4711 [ 402.956111][T11055] tipc: Enabled bearer , priority 0 [ 403.021745][T11059] syzkaller0: entered promiscuous mode [ 403.021774][T11059] syzkaller0: entered allmulticast mode [ 403.030920][T11065] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 403.174958][T11059] tipc: Resetting bearer [ 403.581279][T11054] tipc: Resetting bearer [ 404.282586][T11054] tipc: Disabling bearer [ 404.923700][ T5721] tipc: Node number set to 2589560402 [ 407.151437][T10485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.293718][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.367056][T10485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.423956][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.425200][T11157] tipc: Started in network mode [ 407.425220][T11157] tipc: Node identity 823f60da93c3, cluster identity 4711 [ 407.425360][T11157] tipc: Enabled bearer , priority 0 [ 407.427435][T10485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.489840][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.493292][T11157] syzkaller0: entered promiscuous mode [ 407.493312][T11157] syzkaller0: entered allmulticast mode [ 407.503781][T11159] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 407.560902][T10485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 407.821572][T10485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.864905][T11170] tipc: Resetting bearer [ 407.983175][T11153] tipc: Resetting bearer [ 408.601305][T11186] Invalid ELF header magic: != ELF [ 409.248736][T11153] tipc: Disabling bearer [ 409.683792][ T5734] tipc: Node number set to 301752538 [ 411.038894][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.073823][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.079955][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.081031][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.082054][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.139993][T11241] Invalid ELF header magic: != ELF [ 413.765528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 413.772923][ T4915] Bluetooth: hci2: command tx timeout [ 414.534066][T11256] tipc: Started in network mode [ 414.534096][T11256] tipc: Node identity 1efee67ba71e, cluster identity 4711 [ 414.534265][T11256] tipc: Enabled bearer , priority 0 [ 414.563515][T11256] syzkaller0: entered promiscuous mode [ 414.563539][T11256] syzkaller0: entered allmulticast mode [ 414.669411][T11256] tipc: Resetting bearer [ 414.726210][T11255] tipc: Resetting bearer [ 414.900362][T11255] tipc: Disabling bearer [ 415.845674][ T4915] Bluetooth: hci2: command tx timeout [ 417.915776][ T4915] Bluetooth: hci2: command tx timeout [ 418.270942][T11314] tipc: Enabled bearer , priority 0 [ 418.289146][T11315] syzkaller0: entered promiscuous mode [ 418.289174][T11315] syzkaller0: entered allmulticast mode [ 418.507423][T11309] tipc: Resetting bearer [ 418.606630][T11308] tipc: Resetting bearer [ 418.731406][T11308] tipc: Disabling bearer [ 419.995651][ T4915] Bluetooth: hci2: command tx timeout [ 422.951735][T11386] binder: BINDER_SET_CONTEXT_MGR already set [ 422.951751][T11386] binder: 11385:11386 ioctl 4018620d 200000001000 returned -16 [ 425.329938][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.330060][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.330286][T11215] bridge_slave_0: entered allmulticast mode [ 425.359831][T11215] bridge_slave_0: entered promiscuous mode [ 425.487833][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.487957][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.488182][T11215] bridge_slave_1: entered allmulticast mode [ 425.564964][T11215] bridge_slave_1: entered promiscuous mode [ 425.889643][T11400] UDC core: g1: couldn't find an available UDC or it's busy [ 426.045742][ T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 426.465720][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 426.746909][ T31] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 426.746946][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.746997][ T31] usb 3-1: Product: syz [ 426.747012][ T31] usb 3-1: Manufacturer: syz [ 426.747068][ T31] usb 3-1: SerialNumber: syz [ 426.837624][ T31] usb 3-1: config 0 descriptor?? [ 427.409726][ T31] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 427.410291][ T31] dvb-usb: bulk message failed: -22 (4/0) [ 427.419631][ T31] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 427.432031][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 427.432066][ T31] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 428.860084][T11429] binder: BINDER_SET_CONTEXT_MGR already set [ 428.951328][T11429] binder: 11428:11429 ioctl 4018620d 200000001000 returned -16 [ 429.230197][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 429.262271][ T31] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 429.262849][ T31] usb 3-1: media controller created [ 430.122847][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.144136][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.206834][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.208164][ T31] usb 3-1: selecting invalid altsetting 3 [ 430.208197][ T31] ttusb2: set interface to alts=3 failed [ 430.297815][ T31] DVB: Unable to find symbol tda10086_attach() [ 430.297832][ T31] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 430.299644][ T31] dvb-usb: bulk message failed: -22 (4/0) [ 430.299693][ T31] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 430.299890][ T31] dvb-usb: bulk message failed: -22 (5/0) [ 430.299933][ T31] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 430.300060][ T31] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 433.113069][T11461] binder: BINDER_SET_CONTEXT_MGR already set [ 433.113085][T11461] binder: 11460:11461 ioctl 4018620d 200000001000 returned -16 [ 433.157355][ T5615] usb 3-1: USB disconnect, device number 42 [ 433.398340][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 433.561480][T11215] team0: Port device team_slave_0 added [ 433.573991][T11467] tipc: Enabled bearer , priority 0 [ 433.599087][T11215] team0: Port device team_slave_1 added [ 433.599456][T11470] syzkaller0: entered promiscuous mode [ 433.599478][T11470] syzkaller0: entered allmulticast mode [ 433.678212][T11469] gadgetfs: bound to dummy_udc driver [ 433.764051][T11464] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 433.900726][T11470] tipc: Resetting bearer [ 434.995703][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.995720][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.995747][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.325836][T11463] tipc: Resetting bearer [ 437.187619][T11463] tipc: Disabling bearer [ 437.650674][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.650691][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.650717][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.707450][T11518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 437.729858][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 438.005014][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 438.067922][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2102'. [ 440.567596][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.567681][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.675501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 441.908931][ T42] bridge_slave_1: left allmulticast mode [ 441.908967][ T42] bridge_slave_1: left promiscuous mode [ 441.909208][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.776825][ T42] bridge_slave_0: left allmulticast mode [ 442.776849][ T42] bridge_slave_0: left promiscuous mode [ 442.777001][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.105839][ T5734] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 443.186258][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.258755][ T5734] usb 2-1: unable to get BOS descriptor or descriptor too short [ 443.259815][ T5734] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.259838][ T5734] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.259886][ T5734] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 443.259916][ T5734] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 443.259938][ T5734] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 443.259952][ T5734] usb 2-1: config 1 interface 1 has no altsetting 0 [ 443.263065][ T5734] usb 2-1: string descriptor 0 read error: -22 [ 443.263186][ T5734] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 443.263200][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.360369][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.440543][ T42] bond0 (unregistering): Released all slaves [ 443.590572][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.590789][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.768304][ T5734] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 443.768332][ T5734] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 443.768349][ T5734] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 443.802647][ T5734] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 443.851757][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.858069][T11533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.022452][ T5734] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 444.050060][ T5734] usb 2-1: USB disconnect, device number 32 [ 445.020081][T11215] hsr_slave_0: entered promiscuous mode [ 445.022984][T11215] hsr_slave_1: entered promiscuous mode [ 445.023856][T11215] debugfs: 'hsr0' already exists in 'hsr' [ 445.023879][T11215] Cannot create hsr debugfs directory [ 447.697885][ T42] hsr_slave_0: left promiscuous mode [ 447.892703][ T42] hsr_slave_1: left promiscuous mode [ 447.893680][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.931887][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.155369][ T5886] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 448.327767][ T5886] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 448.327796][ T5886] usb 1-1: config 0 has no interface number 0 [ 448.331511][ T5886] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 448.331538][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.331558][ T5886] usb 1-1: Product: syz [ 448.331571][ T5886] usb 1-1: Manufacturer: syz [ 448.331585][ T5886] usb 1-1: SerialNumber: syz [ 448.370464][ T5886] usb 1-1: config 0 descriptor?? [ 449.298636][ T42] team0 (unregistering): Port device team_slave_1 removed [ 450.288013][ T42] team0 (unregistering): Port device team_slave_0 removed [ 450.980422][ T5886] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 451.037686][ T5886] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 451.049693][ T5886] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 451.049856][ T5886] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 451.089307][ T5886] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 451.267806][ T5886] usb 1-1: USB disconnect, device number 41 [ 451.422841][ T5886] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 451.534480][ T5886] keyspan 1-1:0.133: device disconnected [ 453.777271][T11633] veth3: entered promiscuous mode [ 453.777296][T11633] veth3: entered allmulticast mode [ 453.797119][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 454.072039][ T160] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.072087][ T160] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.072121][ T160] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.172745][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 454.246869][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2129'. [ 455.287955][T11655] UDC core: g1: couldn't find an available UDC or it's busy [ 455.297659][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.298013][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.640030][T11649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.644427][T11649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.967164][T11679] veth3: entered promiscuous mode [ 456.967192][T11679] veth3: entered allmulticast mode [ 457.165599][ T160] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.166533][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.166574][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.166607][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.166641][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.075496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.095492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.155490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.165495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.175511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 461.185509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 463.692218][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 463.860813][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 463.881360][T11770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 468.633875][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 468.757672][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 468.768791][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 472.576627][ T5607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 472.608252][ T5607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 472.692961][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 472.711571][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2180'. [ 472.816595][ T5607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.640077][ T5607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.672418][ T5607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 475.841048][ T4915] Bluetooth: hci5: command tx timeout [ 476.735448][T11910] veth5: entered promiscuous mode [ 476.735570][T11910] veth5: entered allmulticast mode [ 477.992809][ T5607] Bluetooth: hci5: command tx timeout [ 478.262486][T11925] trusted_key: encrypted_key: insufficient parameters specified [ 480.270282][ T4915] Bluetooth: hci5: command tx timeout [ 481.474547][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 481.592204][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 482.571439][ T4915] Bluetooth: hci5: command tx timeout [ 484.720630][T12009] UDC core: g1: couldn't find an available UDC or it's busy [ 485.293916][ T121] bridge_slave_1: left allmulticast mode [ 485.293951][ T121] bridge_slave_1: left promiscuous mode [ 485.294197][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.348282][T12025] UDC core: g1: couldn't find an available UDC or it's busy [ 486.454226][ T121] bridge_slave_0: left allmulticast mode [ 486.572938][ T121] bridge_slave_0: left promiscuous mode [ 486.640840][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.720770][ T121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.026220][ T121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.163086][ T121] bond0 (unregistering): Released all slaves [ 493.472527][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.472737][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.473110][T11858] bridge_slave_0: entered allmulticast mode [ 493.497171][T11858] bridge_slave_0: entered promiscuous mode [ 493.607939][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.608150][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.608383][T11858] bridge_slave_1: entered allmulticast mode [ 493.704074][T11858] bridge_slave_1: entered promiscuous mode [ 494.051136][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.417575][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.234856][ T121] hsr_slave_0: left promiscuous mode [ 496.581837][T12138] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 499.646724][ T121] hsr_slave_1: left promiscuous mode [ 499.647426][ T121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.686560][ T121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.538741][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.538813][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.611367][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 501.629828][ T121] team0 (unregistering): Port device team_slave_1 removed [ 501.676728][ T121] team0 (unregistering): Port device team_slave_0 removed [ 502.029547][T11858] team0: Port device team_slave_0 added [ 502.044634][T11858] team0: Port device team_slave_1 added [ 502.101039][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.101056][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.101167][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.153770][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.153789][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.153817][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.484066][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2243'. [ 502.537859][T11858] hsr_slave_0: entered promiscuous mode [ 502.553901][T11858] hsr_slave_1: entered promiscuous mode [ 502.571080][T11858] debugfs: 'hsr0' already exists in 'hsr' [ 502.572310][T11858] Cannot create hsr debugfs directory [ 502.584512][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'. [ 507.732229][T11858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 507.896781][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.956762][T11858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.070749][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.073009][T11858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.160960][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 509.056919][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.155043][T11858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.250863][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 509.311389][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'. [ 509.430243][T11858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.574080][T12292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2268'. [ 514.426040][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.468563][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.534369][ T2368] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.534537][ T2368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.622513][ T3345] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.622665][ T3345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.248867][T12339] UDC core: g1: couldn't find an available UDC or it's busy [ 520.622242][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.546213][T11858] veth0_vlan: entered promiscuous mode [ 526.639853][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2292'. [ 526.663426][T11858] veth1_vlan: entered promiscuous mode [ 527.263322][T11858] veth0_macvtap: entered promiscuous mode [ 528.091870][T11858] veth1_macvtap: entered promiscuous mode [ 528.358385][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.376187][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.609914][ T3345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.069492][ T3345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.726376][ T2368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.727056][ T2368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.260885][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.260906][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.339965][T12444] Invalid ELF header magic: != ELF [ 533.501826][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 533.564585][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.580817][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.603662][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.604952][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 535.532310][T12499] trusted_key: encrypted_key: insufficient parameters specified [ 535.758127][ T5607] Bluetooth: hci2: command tx timeout [ 538.425182][ T5607] Bluetooth: hci2: command tx timeout [ 540.556409][ T5607] Bluetooth: hci2: command tx timeout [ 541.233672][T12539] trusted_key: encrypted_key: insufficient parameters specified [ 542.772585][ T5607] Bluetooth: hci2: command tx timeout [ 548.404191][ T4339] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.241874][T12602] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2344'. [ 553.335404][ T4339] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.279040][ T4339] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.298731][T12651] Invalid ELF header magic: != ELF [ 557.210471][ T4339] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.488239][T12675] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2365'. [ 559.644480][T12683] fuse: Bad value for 'group_id' [ 559.644501][T12683] fuse: Bad value for 'group_id' [ 560.344569][T12694] trusted_key: encrypted_key: insufficient parameters specified [ 560.516534][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.516627][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.516805][T12475] bridge_slave_0: entered allmulticast mode [ 560.524376][T12475] bridge_slave_0: entered promiscuous mode [ 560.584760][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.584984][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.585185][T12475] bridge_slave_1: entered allmulticast mode [ 560.602705][T12475] bridge_slave_1: entered promiscuous mode [ 561.555635][ T5734] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 561.737567][ T5734] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 561.737596][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.737616][ T5734] usb 2-1: config 0 has no interface number 0 [ 561.740769][ T5734] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 561.740798][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.740817][ T5734] usb 2-1: Product: syz [ 561.740831][ T5734] usb 2-1: Manufacturer: syz [ 561.740845][ T5734] usb 2-1: SerialNumber: syz [ 561.822311][ T5734] usb 2-1: config 0 descriptor?? [ 562.090076][ T5734] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 562.090305][ T5734] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 82 [ 562.092844][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.122261][ T5734] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 562.122353][ T5734] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 562.122435][ T5734] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 562.163987][ T5734] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 562.291977][ T5891] usb 2-1: USB disconnect, device number 33 [ 562.330803][ T5891] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 562.367367][ T5891] keyspan 2-1:0.133: device disconnected [ 562.959773][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959841][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.062390][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.055728][T12733] Invalid ELF header magic: != ELF [ 565.608376][T12475] team0: Port device team_slave_0 added [ 565.818700][T12475] team0: Port device team_slave_1 added [ 565.879541][T12739] fuse: Bad value for 'group_id' [ 565.879560][T12739] fuse: Bad value for 'group_id' [ 567.396532][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.396549][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.396576][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.708346][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.708363][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.708390][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.876177][ T4339] bridge_slave_1: left allmulticast mode [ 568.876208][ T4339] bridge_slave_1: left promiscuous mode [ 568.876452][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.813433][ T4339] bridge_slave_0: left allmulticast mode [ 570.910809][ T4339] bridge_slave_0: left promiscuous mode [ 570.989418][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.178813][T12789] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2394'. [ 575.795107][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.828823][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.852398][ T4339] bond0 (unregistering): Released all slaves [ 576.597832][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.767761][T12475] hsr_slave_0: entered promiscuous mode [ 576.832699][T12475] hsr_slave_1: entered promiscuous mode [ 576.833817][T12475] debugfs: 'hsr0' already exists in 'hsr' [ 576.833858][T12475] Cannot create hsr debugfs directory [ 577.434024][T12827] fuse: Bad value for 'group_id' [ 577.434045][T12827] fuse: Bad value for 'group_id' [ 579.400344][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 579.435078][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 579.528055][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2410'. [ 587.293861][T12930] Invalid ELF header magic: != ELF [ 588.357088][ T4339] hsr_slave_0: left promiscuous mode [ 588.365152][T12946] trusted_key: encrypted_key: insufficient parameters specified [ 588.427245][ T4339] hsr_slave_1: left promiscuous mode [ 588.428333][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.428360][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.530252][ T4339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.530279][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.658060][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2429'. [ 588.916035][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 588.981534][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'. [ 589.073858][ T4339] veth1_macvtap: left promiscuous mode [ 589.073962][ T4339] veth0_macvtap: left promiscuous mode [ 589.074266][ T4339] veth1_vlan: left promiscuous mode [ 589.074431][ T4339] veth0_vlan: left promiscuous mode [ 589.125575][ T5957] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 589.398248][ T5957] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 589.398287][ T5957] usb 2-1: config 0 has no interface number 0 [ 589.398332][ T5957] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.404021][ T5957] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 589.404051][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.404070][ T5957] usb 2-1: Product: syz [ 589.404084][ T5957] usb 2-1: Manufacturer: syz [ 589.404097][ T5957] usb 2-1: SerialNumber: syz [ 589.429945][ T5957] usb 2-1: config 0 descriptor?? [ 590.080093][T12976] Invalid ELF header magic: != ELF [ 590.610377][ T5957] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 590.664249][ T5957] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 590.664304][ T5957] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 590.664348][ T5957] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 590.696756][ T5957] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 590.820105][ T5957] usb 2-1: USB disconnect, device number 34 [ 590.892610][ T5957] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 590.894891][ T5957] keyspan 2-1:0.133: device disconnected [ 591.006015][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 591.041730][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 592.330766][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2439'. [ 593.725097][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.009817][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.060611][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.083532][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.101771][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.401889][T13037] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2447'. [ 596.335614][ T4915] Bluetooth: hci5: command tx timeout [ 596.813107][T13067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2450'. [ 598.397182][ T4915] Bluetooth: hci5: command tx timeout [ 598.625481][ T5610] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 598.834475][ T5610] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 598.834493][ T5610] usb 3-1: config 0 has no interface number 0 [ 598.837977][ T5610] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 598.837994][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.838004][ T5610] usb 3-1: Product: syz [ 598.838011][ T5610] usb 3-1: Manufacturer: syz [ 598.838018][ T5610] usb 3-1: SerialNumber: syz [ 598.870296][ T5610] usb 3-1: config 0 descriptor?? [ 599.283990][T13097] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2454'. [ 600.475600][ T4915] Bluetooth: hci5: command tx timeout [ 601.508394][ T5610] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 601.529331][ T5610] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 601.529444][ T5610] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 601.529489][ T5610] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 601.535015][ T5610] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 601.598106][ T5610] usb 3-1: USB disconnect, device number 43 [ 601.649274][ T5610] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 601.651440][ T5610] keyspan 3-1:0.133: device disconnected [ 601.707984][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2460'. [ 602.417662][ T4339] bridge_slave_1: left allmulticast mode [ 602.417698][ T4339] bridge_slave_1: left promiscuous mode [ 602.418190][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.555868][ T4915] Bluetooth: hci5: command tx timeout [ 602.783845][ T5615] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 603.138250][ T5615] usb 1-1: Using ep0 maxpacket: 32 [ 603.314243][ T5615] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 603.314281][ T5615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.314351][ T5615] usb 1-1: Product: syz [ 603.314404][ T5615] usb 1-1: Manufacturer: syz [ 603.314472][ T5615] usb 1-1: SerialNumber: syz [ 603.455763][ T4339] bridge_slave_0: left allmulticast mode [ 603.455832][ T4339] bridge_slave_0: left promiscuous mode [ 603.456602][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.701726][ T5615] usb 1-1: config 0 descriptor?? [ 603.996773][ T5615] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 603.996859][ T5615] dvb-usb: bulk message failed: -22 (4/0) [ 603.996874][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 603.996985][ T5615] dvb-usb: bulk message failed: -22 (5/0) [ 603.996998][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 604.055903][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 604.056385][ T5615] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 604.056417][ T5615] usb 1-1: media controller created [ 604.086438][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 604.106093][ T5615] usb 1-1: selecting invalid altsetting 3 [ 604.106106][ T5615] ttusb2: set interface to alts=3 failed [ 604.268188][ T5615] DVB: Unable to find symbol tda10086_attach() [ 604.268210][ T5615] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 604.269108][ T5615] dvb-usb: bulk message failed: -22 (4/0) [ 604.269126][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 604.269255][ T5615] dvb-usb: bulk message failed: -22 (5/0) [ 604.269269][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 604.269331][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 607.703048][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 608.087143][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.216711][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.299436][ T4339] bond0 (unregistering): Released all slaves [ 608.419616][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 609.065539][ T5738] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 609.252335][ T5738] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 609.252366][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.252385][ T5738] usb 2-1: Product: syz [ 609.252398][ T5738] usb 2-1: Manufacturer: syz [ 609.252413][ T5738] usb 2-1: SerialNumber: syz [ 610.320718][ T5734] usb 1-1: USB disconnect, device number 42 [ 610.486261][ T5738] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 610.486403][ T5738] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 610.999319][ T5738] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 610.999423][ T5738] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 611.131772][ T5738] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 611.371382][ T5738] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 612.389524][ T5734] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 612.537883][T13223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2482'. [ 612.675802][ T5738] usb 2-1: USB disconnect, device number 35 [ 613.407540][ T4339] hsr_slave_0: left promiscuous mode [ 614.229716][ T4339] hsr_slave_1: left promiscuous mode [ 614.230407][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.266175][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.762559][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 614.812333][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 616.457940][T13236] veth5: entered promiscuous mode [ 616.457966][T13236] veth5: entered allmulticast mode [ 618.383966][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.394040][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.394276][T13017] bridge_slave_0: entered allmulticast mode [ 618.405694][T13017] bridge_slave_0: entered promiscuous mode [ 618.411968][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.412087][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.412282][T13017] bridge_slave_1: entered allmulticast mode [ 618.418353][T13017] bridge_slave_1: entered promiscuous mode [ 619.388350][ T5615] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 619.619085][T13017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.710281][ T5615] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.710351][ T5615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.710405][ T5615] usb 2-1: Product: syz [ 619.710456][ T5615] usb 2-1: Manufacturer: syz [ 619.710471][ T5615] usb 2-1: SerialNumber: syz [ 620.024394][T13017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.191104][T13017] team0: Port device team_slave_0 added [ 620.194920][T13017] team0: Port device team_slave_1 added [ 620.337880][T13017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.337898][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.337925][T13017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.340395][T13017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.340409][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.340434][T13017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.404755][ T5615] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 621.404818][ T5615] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 621.733397][ T5615] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 621.733444][ T5615] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 621.745778][ T5615] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 621.817991][ T5615] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 621.834057][ T5615] usb 2-1: USB disconnect, device number 36 [ 622.121617][T13017] hsr_slave_0: entered promiscuous mode [ 622.125313][T13017] hsr_slave_1: entered promiscuous mode [ 622.144125][T13017] debugfs: 'hsr0' already exists in 'hsr' [ 622.144152][T13017] Cannot create hsr debugfs directory [ 624.821706][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.821777][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.464246][T13330] trusted_key: encrypted_key: insufficient parameters specified [ 625.525687][ T5886] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 625.811258][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 625.811290][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.811311][ T5886] usb 1-1: Product: syz [ 625.811325][ T5886] usb 1-1: Manufacturer: syz [ 625.811340][ T5886] usb 1-1: SerialNumber: syz [ 626.200714][T13340] netlink: 'syz.2.2516': attribute type 13 has an invalid length. [ 626.268020][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 626.268071][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 626.897064][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 626.897122][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 626.898050][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 626.938041][ T5886] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 627.114237][T13017] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 627.164454][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 627.189271][T13017] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 627.248788][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 627.250189][T13017] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 628.332280][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.361802][T13017] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 628.392059][ T5886] usb 1-1: USB disconnect, device number 43 [ 628.421522][T13017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.956951][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.021088][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.059162][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.059393][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.117399][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.117978][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.745485][ T5721] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 630.903280][ T5721] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 630.903312][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.903329][ T5721] usb 2-1: Product: syz [ 630.903342][ T5721] usb 2-1: Manufacturer: syz [ 630.903356][ T5721] usb 2-1: SerialNumber: syz [ 631.384714][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 631.384774][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 632.150180][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 632.150290][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 632.237900][ T5721] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 632.642795][ T5721] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 632.743133][ T5721] usb 2-1: USB disconnect, device number 37 [ 635.551819][T13017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.156952][T13017] veth0_vlan: entered promiscuous mode [ 642.201273][T13017] veth1_vlan: entered promiscuous mode [ 642.327287][T13521] netlink: 'syz.1.2557': attribute type 13 has an invalid length. [ 643.564821][T13530] Invalid ELF header magic: != ELF [ 647.996923][T13017] veth0_macvtap: entered promiscuous mode [ 651.011974][T13560] veth3: entered promiscuous mode [ 651.011992][T13560] veth3: entered allmulticast mode [ 651.218366][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2567'. [ 651.225934][T13017] veth1_macvtap: entered promiscuous mode [ 656.543790][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 656.720390][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 656.742934][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 656.745123][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 656.779597][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 657.153720][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 658.885621][ T5607] Bluetooth: hci2: command tx timeout [ 659.047347][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2583'. [ 659.585716][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 659.640212][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2585'. [ 660.955905][ T5607] Bluetooth: hci2: command tx timeout [ 663.035576][ T5607] Bluetooth: hci2: command tx timeout [ 665.164019][ T5607] Bluetooth: hci2: command tx timeout [ 665.616081][ T5615] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 665.658484][T13685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2593'. [ 665.768257][ T5615] usb 3-1: Using ep0 maxpacket: 32 [ 665.773495][ T5615] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 665.773524][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.773544][ T5615] usb 3-1: Product: syz [ 665.773558][ T5615] usb 3-1: Manufacturer: syz [ 665.773571][ T5615] usb 3-1: SerialNumber: syz [ 665.819385][ T5615] usb 3-1: config 0 descriptor?? [ 665.831685][ T5615] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 665.831752][ T5615] dvb-usb: bulk message failed: -22 (4/0) [ 665.831762][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 665.831831][ T5615] dvb-usb: bulk message failed: -22 (5/0) [ 665.831839][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 665.847471][ T5615] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 665.848180][ T5615] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 665.848236][ T5615] usb 3-1: media controller created [ 665.875246][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.926000][ T5615] usb 3-1: selecting invalid altsetting 3 [ 665.926018][ T5615] ttusb2: set interface to alts=3 failed [ 665.980125][ T5615] DVB: Unable to find symbol tda10086_attach() [ 665.980137][ T5615] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 665.980748][ T5615] dvb-usb: bulk message failed: -22 (4/0) [ 665.980759][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 665.980834][ T5615] dvb-usb: bulk message failed: -22 (5/0) [ 665.980841][ T5615] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 665.980875][ T5615] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 666.333084][T13714] fuse: Unknown parameter 'group_id00000000000000000000' [ 668.061936][T13720] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 668.061973][T13720] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 668.062000][T13720] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 669.462945][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2604'. [ 669.482113][ T5957] usb 3-1: USB disconnect, device number 44 [ 669.731289][ T5957] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 671.713080][T13768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2611'. [ 674.325744][T13599] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.325872][T13599] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.326096][T13599] bridge_slave_0: entered allmulticast mode [ 674.370356][T13599] bridge_slave_0: entered promiscuous mode [ 674.437290][T13776] fuse: Bad value for 'user_id' [ 674.437302][T13776] fuse: Bad value for 'user_id' [ 675.910514][T13599] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.910683][T13599] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.910922][T13599] bridge_slave_1: entered allmulticast mode [ 675.944599][T13599] bridge_slave_1: entered promiscuous mode [ 677.820780][T13599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.106695][T13599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.428195][T13599] team0: Port device team_slave_0 added [ 683.442975][T13599] team0: Port device team_slave_1 added [ 683.790271][ T3345] bridge_slave_1: left allmulticast mode [ 683.790306][ T3345] bridge_slave_1: left promiscuous mode [ 683.790554][ T3345] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.077613][ T3345] bridge_slave_0: left allmulticast mode [ 684.077647][ T3345] bridge_slave_0: left promiscuous mode [ 684.077797][ T3345] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.508034][T13850] fuse: Bad value for 'user_id' [ 684.508053][T13850] fuse: Bad value for 'user_id' [ 685.845705][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.845770][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.107618][ T3345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.177213][ T3345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.217502][ T3345] bond0 (unregistering): Released all slaves [ 686.539595][T13839] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 686.789666][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 686.826124][T13599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.826143][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.826170][T13599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.829254][T13872] netlink: 'syz.2.2636': attribute type 34 has an invalid length. [ 686.831017][T13599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.831032][T13599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.831059][T13599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.442538][T13599] hsr_slave_0: entered promiscuous mode [ 687.443537][T13599] hsr_slave_1: entered promiscuous mode [ 687.458386][T13599] debugfs: 'hsr0' already exists in 'hsr' [ 687.458414][T13599] Cannot create hsr debugfs directory [ 687.588439][T13884] fuse: Bad value for 'user_id' [ 687.588460][T13884] fuse: Bad value for 'user_id' [ 687.741918][ T3345] hsr_slave_0: left promiscuous mode [ 687.847139][ T3345] hsr_slave_1: left promiscuous mode [ 687.848126][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.907616][ T3345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.824345][ T3345] veth1_macvtap: left promiscuous mode [ 689.824488][ T3345] veth0_macvtap: left promiscuous mode [ 689.824737][ T3345] veth1_vlan: left promiscuous mode [ 689.824907][ T3345] veth0_vlan: left promiscuous mode [ 693.464077][T13938] netlink: 'syz.0.2652': attribute type 13 has an invalid length. [ 694.738123][T13957] fuse: Bad value for 'fd' [ 695.494169][ T3345] team0 (unregistering): Port device team_slave_1 removed [ 695.661368][ T3345] team0 (unregistering): Port device team_slave_0 removed [ 696.050805][T13984] Invalid ELF header magic: != ELF [ 698.488520][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 698.612675][T14011] fuse: Bad value for 'fd' [ 698.686573][T14014] UDC core: g1: couldn't find an available UDC or it's busy [ 701.137452][T14046] netlink: 'syz.3.2683': attribute type 13 has an invalid length. [ 701.993244][T14062] gadgetfs: bound to dummy_udc driver [ 703.866787][T14073] Invalid ELF header magic: != ELF [ 704.963384][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 705.251352][T14096] fuse: Bad value for 'fd' [ 709.449502][T14141] Invalid ELF header magic: != ELF [ 710.537704][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'. [ 711.120153][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 711.130574][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 711.228060][T14158] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.228718][T14158] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.614308][T14158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.621878][T14158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.444669][T14168] fuse: Bad value for 'fd' [ 714.934813][T14190] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2714'. [ 715.349127][T14202] Invalid ELF header magic: != ELF [ 718.521105][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.563215][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 718.575838][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 718.589159][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 718.591704][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.895624][ T1170] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.895679][ T1170] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.895713][ T1170] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.895746][ T1170] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.935548][ T5738] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 719.087623][T14235] hub 8-0:1.0: USB hub found [ 719.116830][ T5738] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.116885][ T5738] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 719.116907][ T5738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.154687][ T5738] usb 2-1: config 0 descriptor?? [ 719.166240][ T5738] pwc: Askey VC010 type 2 USB webcam detected. [ 719.187991][T14235] hub 8-0:1.0: 1 port detected [ 719.576037][ T5738] pwc: recv_control_msg error -32 req 02 val 2b00 [ 719.767445][ T5738] pwc: recv_control_msg error -71 req 02 val 2700 [ 719.767902][ T5738] pwc: recv_control_msg error -71 req 02 val 2c00 [ 719.769672][ T5738] pwc: recv_control_msg error -71 req 04 val 1000 [ 719.770254][ T5738] pwc: recv_control_msg error -71 req 04 val 1300 [ 719.771217][ T5738] pwc: recv_control_msg error -71 req 04 val 1400 [ 719.810752][ T5738] pwc: recv_control_msg error -71 req 02 val 2000 [ 719.811228][ T5738] pwc: recv_control_msg error -71 req 02 val 2100 [ 719.811694][ T5738] pwc: recv_control_msg error -71 req 04 val 1500 [ 719.812069][ T5738] pwc: recv_control_msg error -71 req 02 val 2500 [ 719.812457][ T5738] pwc: recv_control_msg error -71 req 02 val 2400 [ 719.812825][ T5738] pwc: recv_control_msg error -71 req 02 val 2600 [ 719.813251][ T5738] pwc: recv_control_msg error -71 req 02 val 2900 [ 719.813607][ T5738] pwc: recv_control_msg error -71 req 02 val 2800 [ 719.814102][ T5738] pwc: recv_control_msg error -71 req 04 val 1100 [ 719.814470][ T5738] pwc: recv_control_msg error -71 req 04 val 1200 [ 719.947983][ T5738] pwc: Registered as video103. [ 719.954116][ T5738] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 720.024117][ T5738] usb 2-1: USB disconnect, device number 38 [ 720.809140][ T5607] Bluetooth: hci5: command tx timeout [ 721.162408][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 721.260964][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2726'. [ 722.666823][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2731'. [ 722.675731][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 722.965831][ T5607] Bluetooth: hci5: command tx timeout [ 725.902840][ T5607] Bluetooth: hci5: command tx timeout [ 726.241442][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2740'. [ 726.923990][T14344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2740'. [ 727.915647][ T5607] Bluetooth: hci5: command tx timeout [ 727.979855][T14333] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 728.436038][ T2368] bridge_slave_1: left allmulticast mode [ 728.436075][ T2368] bridge_slave_1: left promiscuous mode [ 729.784876][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.067315][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'. [ 730.166141][T14389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'. [ 730.278210][ T2368] bridge_slave_0: left allmulticast mode [ 730.278244][ T2368] bridge_slave_0: left promiscuous mode [ 730.304604][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.598146][ T2368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.707219][ T2368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.068673][ T2368] bond0 (unregistering): Released all slaves [ 733.639933][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'. [ 733.759516][T14432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2758'. [ 734.445948][ T2368] hsr_slave_0: left promiscuous mode [ 734.564798][ T2368] hsr_slave_1: left promiscuous mode [ 734.597017][ T2368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.652809][ T2368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.667100][T14465] Config c/1 of g1 needs at least one function. [ 736.672627][T14465] udc dummy_udc.0: failed to start g1: -22 [ 736.672658][T14465] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 736.752513][T14465] UDC core: g1: couldn't find an available UDC or it's busy [ 736.769647][ T2368] team0 (unregistering): Port device team_slave_1 removed [ 736.847719][ T2368] team0 (unregistering): Port device team_slave_0 removed [ 738.242753][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 738.276620][T14485] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2771'. [ 738.302698][T14488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 740.414185][T14203] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.419092][T14203] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.419325][T14203] bridge_slave_0: entered allmulticast mode [ 740.427837][T14203] bridge_slave_0: entered promiscuous mode [ 740.513491][T14203] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.513605][T14203] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.513839][T14203] bridge_slave_1: entered allmulticast mode [ 740.535203][T14203] bridge_slave_1: entered promiscuous mode [ 740.654949][T14203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.668763][T14203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.713629][T14203] team0: Port device team_slave_0 added [ 740.722838][T14203] team0: Port device team_slave_1 added [ 740.776498][T14203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.776515][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.776539][T14203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.778749][T14203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.778763][T14203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.778786][T14203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.069099][T14203] hsr_slave_0: entered promiscuous mode [ 741.070019][T14203] hsr_slave_1: entered promiscuous mode [ 741.072143][T14203] debugfs: 'hsr0' already exists in 'hsr' [ 741.072159][T14203] Cannot create hsr debugfs directory [ 741.207233][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 741.310969][T14525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2778'. [ 741.848838][T14540] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2783'. [ 742.355251][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 742.357547][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'. [ 742.779984][T14560] Invalid ELF header magic: != ELF [ 743.880673][T14563] Config c/1 of g1 needs at least one function. [ 743.884598][T14563] udc dummy_udc.0: failed to start g1: -22 [ 743.884696][T14563] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 744.259384][T14563] UDC core: g1: couldn't find an available UDC or it's busy [ 747.309121][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.309188][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.859961][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 747.878281][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2799'. [ 748.843752][T14203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 748.966811][T14203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 748.967994][T14203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 749.773401][T14203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.850026][T14203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 749.940149][T14203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.954860][T14203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 750.028181][T14203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.217260][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.284540][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.301009][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.301228][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.243875][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.244003][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.654269][T14636] Invalid ELF header magic: != ELF [ 752.170887][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2810'. [ 753.421384][T14203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.922356][T14203] veth0_vlan: entered promiscuous mode [ 753.947280][T14691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2822'. [ 753.947652][T14203] veth1_vlan: entered promiscuous mode [ 754.050276][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2822'. [ 754.153915][T14203] veth0_macvtap: entered promiscuous mode [ 754.173740][T14203] veth1_macvtap: entered promiscuous mode [ 754.217255][T14203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.249869][T14203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.648244][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.868301][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 755.879353][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'. [ 756.127780][ T3345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.127802][ T3345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.378880][ T1170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.378929][ T1170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.378964][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.856156][T14732] Invalid ELF header magic: != ELF [ 757.775537][ T822] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 757.776402][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 757.808559][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.808581][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.895748][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2833'. [ 757.930283][ T822] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 757.930310][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.930330][ T822] usb 4-1: Product: syz [ 757.930342][ T822] usb 4-1: Manufacturer: syz [ 757.930354][ T822] usb 4-1: SerialNumber: syz [ 758.145433][T14733] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 758.296513][T14733] usb 2-1: no configurations [ 758.296534][T14733] usb 2-1: can't read configurations, error -22 [ 758.402774][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 758.402836][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 758.427837][T14733] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 759.316618][T14733] usb 2-1: no configurations [ 759.316640][T14733] usb 2-1: can't read configurations, error -22 [ 759.317227][T14733] usb usb2-port1: attempt power cycle [ 759.655602][T14733] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 759.677504][T14733] usb 2-1: no configurations [ 759.677526][T14733] usb 2-1: can't read configurations, error -22 [ 759.805494][T14733] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 759.827368][T14733] usb 2-1: no configurations [ 759.827389][T14733] usb 2-1: can't read configurations, error -22 [ 759.832652][T14733] usb usb2-port1: unable to enumerate USB device [ 760.010639][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 760.010698][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 760.011555][ T822] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 760.397474][ T822] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 761.385556][T14733] usb 4-1: USB disconnect, device number 23 [ 774.169454][ T4915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.244795][ T4915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.256471][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.270510][ T4915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.275101][ T4915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 776.068450][ T5734] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 776.408334][ T4915] Bluetooth: hci2: command tx timeout [ 776.588008][ T5734] usb 5-1: no configurations [ 776.588085][ T5734] usb 5-1: can't read configurations, error -22 [ 777.218859][ T5734] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 777.251061][ T5891] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 777.459613][ T5734] usb 5-1: no configurations [ 777.459635][ T5734] usb 5-1: can't read configurations, error -22 [ 777.599639][ T5891] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 777.599669][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.599688][ T5891] usb 1-1: Product: syz [ 777.599705][ T5891] usb 1-1: Manufacturer: syz [ 777.599712][ T5891] usb 1-1: SerialNumber: syz [ 777.650680][ T5734] usb usb5-port1: attempt power cycle [ 778.046081][ T5734] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 778.081950][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 778.081995][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 778.083032][ T5734] usb 5-1: no configurations [ 778.083049][ T5734] usb 5-1: can't read configurations, error -22 [ 778.285802][ T5734] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 778.316525][ T5734] usb 5-1: no configurations [ 778.316539][ T5734] usb 5-1: can't read configurations, error -22 [ 778.340459][ T5734] usb usb5-port1: unable to enumerate USB device [ 778.475765][ T4915] Bluetooth: hci2: command tx timeout [ 779.163461][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 779.163503][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 779.268617][ T5891] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 779.354885][ T5891] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 781.263906][ T4915] Bluetooth: hci2: command tx timeout [ 781.394970][T14731] usb 1-1: USB disconnect, device number 44 [ 783.045525][T14731] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 784.262549][ T4915] Bluetooth: hci2: command tx timeout [ 784.279223][T14731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.279248][T14731] usb 4-1: config 0 has no interfaces? [ 784.279275][T14731] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 784.279297][T14731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.298544][T14731] usb 4-1: config 0 descriptor?? [ 786.488060][ T2368] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 786.559970][T14731] usb 4-1: USB disconnect, device number 24 [ 794.745945][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.488597][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.582108][ T5610] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 795.646371][T14787] bridge_slave_0: entered allmulticast mode [ 795.658399][T14787] bridge_slave_0: entered promiscuous mode [ 795.737684][ T5610] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.737708][ T5610] usb 1-1: config 0 has no interfaces? [ 795.737731][ T5610] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 795.737752][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.047909][ T5610] usb 1-1: config 0 descriptor?? [ 797.078459][T14787] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.078654][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.643658][T14787] bridge_slave_1: entered allmulticast mode [ 798.697162][T14787] bridge_slave_1: entered promiscuous mode [ 798.753897][ T5610] usb 1-1: can't set config #0, error -71 [ 798.809035][ T5610] usb 1-1: USB disconnect, device number 45 [ 800.300295][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.390600][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.834734][ T4339] bridge_slave_1: left allmulticast mode [ 801.834777][ T4339] bridge_slave_1: left promiscuous mode [ 801.843515][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.947294][ T4339] bridge_slave_0: left allmulticast mode [ 801.947328][ T4339] bridge_slave_0: left promiscuous mode [ 801.947577][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.285584][T14733] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 804.477462][T14733] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.477531][T14733] usb 4-1: config 0 has no interfaces? [ 804.477593][T14733] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 804.477655][T14733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.672430][T14733] usb 4-1: config 0 descriptor?? [ 805.286132][ T4339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.366487][ T4339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.386396][ T4339] bond0 (unregistering): Released all slaves [ 805.395057][ T4339] bond1 (unregistering): Released all slaves [ 805.429401][T14787] team0: Port device team_slave_0 added [ 805.627783][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 805.639453][T14787] team0: Port device team_slave_1 added [ 805.830644][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.830656][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.830670][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.833516][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.833527][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.833541][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.189507][T14787] hsr_slave_0: entered promiscuous mode [ 806.190925][T14787] hsr_slave_1: entered promiscuous mode [ 806.192239][T14787] debugfs: 'hsr0' already exists in 'hsr' [ 806.192262][T14787] Cannot create hsr debugfs directory [ 806.210386][T15020] hub 8-0:1.0: USB hub found [ 806.214106][T15020] hub 8-0:1.0: 1 port detected [ 807.122274][T14733] usb 4-1: USB disconnect, device number 25 [ 809.292467][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2906'. [ 809.774978][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 809.869313][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.869375][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.001129][T15062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'. [ 811.260491][T15086] hub 8-0:1.0: USB hub found [ 811.265516][T15086] hub 8-0:1.0: 1 port detected [ 814.426448][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 814.605923][ T4339] hsr_slave_0: left promiscuous mode [ 815.890047][ T4339] hsr_slave_1: left promiscuous mode [ 815.891090][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.926381][ T4339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.847951][ T4339] team0 (unregistering): Port device team_slave_1 removed [ 819.028721][T15164] UDC core: g1: couldn't find an available UDC or it's busy [ 819.056246][ T4339] team0 (unregistering): Port device team_slave_0 removed [ 825.833589][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2947'. [ 826.640363][T15224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2949'. [ 826.905559][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2950'. [ 828.012689][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.013490][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.172634][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.177004][T15231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 830.465148][T15259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 830.465172][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 831.541356][T15259] 8021q: adding VLAN 0 to HW filter on device bond3 [ 832.599200][T15289] gadgetfs: bound to dummy_udc driver [ 834.096979][ T160] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.097038][ T160] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.097073][ T160] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.097106][ T160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.158409][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 834.203200][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 834.206161][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 834.214709][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 834.218236][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.373915][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2968'. [ 835.307565][ T4339] IPVS: stop unused estimator thread 0... [ 836.003416][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2972'. [ 837.459266][ T5607] Bluetooth: hci1: command tx timeout [ 837.691713][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 839.023351][T15363] UDC core: g1: couldn't find an available UDC or it's busy [ 839.145410][T15370] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2981'. [ 839.525363][ T4915] Bluetooth: hci1: command tx timeout [ 841.515480][ T4915] Bluetooth: hci5: command 0x0406 tx timeout [ 841.595357][ T4915] Bluetooth: hci1: command tx timeout [ 842.148054][T15387] UDC core: g1: couldn't find an available UDC or it's busy [ 842.555527][T15408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2988'. [ 843.679754][ T5607] Bluetooth: hci1: command tx timeout [ 847.380237][ T2368] bridge_slave_1: left allmulticast mode [ 847.380268][ T2368] bridge_slave_1: left promiscuous mode [ 847.380455][ T2368] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.358802][ T2368] bridge_slave_0: left allmulticast mode [ 848.358867][ T2368] bridge_slave_0: left promiscuous mode [ 848.385485][ T2368] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.976158][ T2368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.076280][ T2368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.157835][ T2368] bond0 (unregistering): Released all slaves [ 853.438559][ T2368] hsr_slave_0: left promiscuous mode [ 853.456959][ T2368] hsr_slave_1: left promiscuous mode [ 853.457927][ T2368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.479214][ T2368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.806336][ T2368] team0 (unregistering): Port device team_slave_1 removed [ 854.845930][ T2368] team0 (unregistering): Port device team_slave_0 removed [ 855.433206][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 856.624487][T15304] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.624601][T15304] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.624815][T15304] bridge_slave_0: entered allmulticast mode [ 856.630243][T15304] bridge_slave_0: entered promiscuous mode [ 856.635182][T15304] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.636574][T15304] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.636790][T15304] bridge_slave_1: entered allmulticast mode [ 856.651612][T15304] bridge_slave_1: entered promiscuous mode [ 856.707456][T15562] netlink: 'syz.4.3022': attribute type 1 has an invalid length. [ 856.837359][T15562] 8021q: adding VLAN 0 to HW filter on device bond1 [ 856.919979][T15562] gretap1: entered promiscuous mode [ 856.948541][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.960765][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.137992][T15304] team0: Port device team_slave_0 added [ 857.143262][T15304] team0: Port device team_slave_1 added [ 857.277269][T15304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.277288][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.277314][T15304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.535498][ T5957] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 858.687802][ T5957] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 858.687835][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.694302][ T5957] usb 5-1: config 0 descriptor?? [ 858.718447][ T5957] cp210x 5-1:0.0: cp210x converter detected [ 858.787757][T15304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.787772][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.787791][T15304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.902821][ T5957] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 858.902937][ T5957] cp210x 5-1:0.0: querying part number failed [ 858.944064][ T5957] usb 5-1: cp210x converter now attached to ttyUSB0 [ 861.231024][ T5891] usb 5-1: USB disconnect, device number 33 [ 861.608048][T15304] hsr_slave_0: entered promiscuous mode [ 861.618404][T15304] hsr_slave_1: entered promiscuous mode [ 861.624125][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 861.696045][T15304] debugfs: 'hsr0' already exists in 'hsr' [ 861.696070][T15304] Cannot create hsr debugfs directory [ 861.735202][ T5891] cp210x 5-1:0.0: device disconnected [ 865.987865][T15304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 866.885075][T15304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 866.905812][T15304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 867.017269][T15304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.018745][T15304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 867.055544][T14733] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 868.002978][T14733] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 868.003011][T14733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.015780][T14733] usb 3-1: config 0 descriptor?? [ 868.025591][T14733] cp210x 3-1:0.0: cp210x converter detected [ 868.133136][T15304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.330637][T14733] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 868.330666][T14733] cp210x 3-1:0.0: querying part number failed [ 868.340221][T14733] usb 3-1: cp210x converter now attached to ttyUSB0 [ 868.358426][T15304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 869.298906][T15304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.388418][T15675] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 869.857010][T15679] trusted_key: encrypted_key: insufficient parameters specified [ 869.958591][T15675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 869.988854][T14733] usb 3-1: USB disconnect, device number 45 [ 870.013388][T14733] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 870.025479][T14733] cp210x 3-1:0.0: device disconnected [ 870.394466][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.394541][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.345150][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 871.547164][T15675] gretap1: entered promiscuous mode [ 872.689927][T15304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.696954][T15304] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.638874][ T1375] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.639008][ T1375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.721144][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.722865][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.355605][ T5886] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 877.328458][ T5886] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 877.328490][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.466892][ T5886] usb 5-1: config 0 descriptor?? [ 879.963373][ T5886] usb 5-1: can't set config #0, error -71 [ 879.972622][ T5886] usb 5-1: USB disconnect, device number 34 [ 882.287954][T15304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.528903][T15780] netlink: 'syz.3.3071': attribute type 13 has an invalid length. [ 882.678236][T15304] veth0_vlan: entered promiscuous mode [ 882.737890][T15304] veth1_vlan: entered promiscuous mode [ 882.894525][T15304] veth0_macvtap: entered promiscuous mode [ 882.927369][T15304] veth1_macvtap: entered promiscuous mode [ 882.983892][T15304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.130042][T15304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.495623][ T121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.495661][ T121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.495687][ T121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.495723][ T121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.030267][T14733] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 884.198845][T14733] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 884.198872][T14733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.246203][T14733] usb 5-1: config 0 descriptor?? [ 884.302712][T14733] cp210x 5-1:0.0: cp210x converter detected [ 884.501825][T14733] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 884.501844][T14733] cp210x 5-1:0.0: querying part number failed [ 884.557180][T14733] usb 5-1: cp210x converter now attached to ttyUSB0 [ 884.604531][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.604552][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.154112][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.154144][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.423411][T15825] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 887.514223][ T5957] usb 5-1: USB disconnect, device number 35 [ 887.547607][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 887.552669][ T5957] cp210x 5-1:0.0: device disconnected [ 887.889954][ T36] audit: type=1326 audit(1785791079.154:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.893452][ T36] audit: type=1326 audit(1785791079.154:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.893502][ T36] audit: type=1326 audit(1785791079.154:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.893541][ T36] audit: type=1326 audit(1785791079.154:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.897973][ T36] audit: type=1326 audit(1785791079.154:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.898016][ T36] audit: type=1326 audit(1785791079.154:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.898053][ T36] audit: type=1326 audit(1785791079.154:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 887.968079][T15847] netlink: 'syz.2.3087': attribute type 13 has an invalid length. [ 887.999652][ T36] audit: type=1326 audit(1785791079.154:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.0.3085" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429311e019 code=0x7fc00000 [ 889.201907][ T5734] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 889.202468][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 889.356055][ T5734] usb 2-1: device descriptor read/64, error -32 [ 889.595459][ T5734] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 889.595854][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 889.753163][ T5734] usb 2-1: device descriptor read/64, error -32 [ 889.879570][ T5734] usb usb2-port1: attempt power cycle [ 890.235510][ T5734] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 890.256539][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 890.256838][ T5734] usb 2-1: device descriptor read/8, error -32 [ 890.371775][ T5734] raw-gadget.0 gadget.1: failed to queue suspend event [ 890.389896][ T5734] raw-gadget.0 gadget.1: failed to queue reset event [ 890.459200][ T5734] raw-gadget.0 gadget.1: failed to queue resume event [ 890.525783][ T5734] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 890.565311][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 890.567283][ T5734] usb 2-1: device descriptor read/8, error -32 [ 890.697726][ T5734] raw-gadget.0 gadget.1: failed to queue suspend event [ 890.698479][ T5734] usb usb2-port1: unable to enumerate USB device [ 892.085676][T15867] raw-gadget.0 gadget.1: failed to queue disconnect event [ 892.319610][T15881] gadgetfs: bound to dummy_udc driver [ 892.929905][T15876] gadgetfs: suspended from state 2 [ 893.717762][T15893] hub 8-0:1.0: USB hub found [ 894.735174][T15893] hub 8-0:1.0: 1 port detected [ 895.408780][ T5721] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 896.073604][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3105'. [ 896.095817][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3105'. [ 897.132401][T15916] gretap1: entered promiscuous mode [ 897.179041][T15844] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 897.192926][T15844] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000121: 0000 [#1] SMP KASAN PTI [ 897.193101][T15844] KASAN: null-ptr-deref in range [0x0000000000000908-0x000000000000090f] [ 897.193189][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.3.3086 Tainted: G L syzkaller #0 PREE[ 897.193189][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.3.3086 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 897.193219][T15844] Tainted: [L]=SOFTLOCKUP [ 897.193226][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.193242][T15844] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 897.193417][T15844] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d2 85 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 b2 85 eb fa 4d 8b 3f 49 83 c7 30 [ 897.193434][T15844] RSP: 0018:ffffc90003eaf710 EFLAGS: 00010206 [ 897.193490][T15844] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 897.193504][T15844] RDX: ffffc9000f454000 RSI: 0000000000018136 RDI: 0000000000018137 [ 897.193518][T15844] RBP: 1ffff11004b28943 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 897.193533][T15844] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: fffffffffffffffc [ 897.193548][T15844] R13: dffffc0000000000 R14: ffff888025944a18 R15: 0000000000000908 [ 897.193564][T15844] FS: 00007f4336f266c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 897.193582][T15844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.193597][T15844] CR2: 00007f21c037b700 CR3: 000000003cbd6000 CR4: 00000000003526f0 [ 897.193615][T15844] Call Trace: [ 897.193651][T15844] [ 897.193717][T15844] uvc_function_bind+0x1076/0x15a0 [ 897.193820][T15844] usb_add_function+0x290/0x930 [ 897.193901][T15844] configfs_composite_bind+0xde0/0x1410 [ 897.193954][T15844] ? __pfx_configfs_composite_bind+0x10/0x10 [ 897.194007][T15844] gadget_bind_driver+0x2ca/0x9e0 [ 897.194041][T15844] ? __pfx_gadget_bind_driver+0x10/0x10 [ 897.194069][T15844] really_probe+0x254/0xae0 [ 897.194158][T15844] __driver_probe_device+0x1e8/0x360 [ 897.194186][T15844] driver_probe_device+0x4f/0x240 [ 897.194216][T15844] __driver_attach+0x339/0x600 [ 897.194244][T15844] bus_for_each_dev+0x23e/0x2c0 [ 897.194265][T15844] ? __pfx___driver_attach+0x10/0x10 [ 897.194290][T15844] ? __pfx_bus_for_each_dev+0x10/0x10 [ 897.194313][T15844] ? rt_spin_unlock+0x163/0x200 [ 897.194398][T15844] bus_add_driver+0x348/0x670 [ 897.194423][T15844] driver_register+0x23a/0x320 [ 897.194443][T15844] usb_gadget_register_driver_owner+0xf9/0x270 [ 897.194473][T15844] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 897.194500][T15844] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 897.194531][T15844] configfs_write_iter+0x33a/0x430 [ 897.194647][T15844] vfs_write+0x61e/0xbb0 [ 897.194716][T15844] ? __pfx_vfs_write+0x10/0x10 [ 897.194741][T15844] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 897.194767][T15844] ? lockdep_hardirqs_on+0x7a/0x110 [ 897.194823][T15844] ? mutex_lock_nested+0x152/0x1d0 [ 897.194841][T15844] ? fdget_pos+0x252/0x320 [ 897.194896][T15844] ksys_write+0x156/0x270 [ 897.194921][T15844] ? __pfx_ksys_write+0x10/0x10 [ 897.194949][T15844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.194988][T15844] do_syscall_64+0x174/0x580 [ 897.195038][T15844] ? trace_irq_disable+0x3b/0x140 [ 897.195105][T15844] ? clear_bhb_loop+0x40/0x90 [ 897.195128][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.195147][T15844] RIP: 0033:0x7f4338cce019 [ 897.195165][T15844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.195181][T15844] RSP: 002b:00007f4336f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 897.195202][T15844] RAX: ffffffffffffffda RBX: 00007f4338f55fa0 RCX: 00007f4338cce019 [ 897.195217][T15844] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000003 [ 897.195227][T15844] RBP: 00007f4338d6500c R08: 0000000000000000 R09: 0000000000000000 [ 897.195238][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.195248][T15844] R13: 00007f4338f56038 R14: 00007f4338f55fa0 R15: 00007ffeb2211078 [ 897.195269][T15844] [ 897.195282][T15844] Modules linked in: [ 897.195332][T15844] ---[ end trace 0000000000000000 ]--- [ 897.225367][T15844] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 897.225416][T15844] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d2 85 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 b2 85 eb fa 4d 8b 3f 49 83 c7 30 [ 897.225434][T15844] RSP: 0018:ffffc90003eaf710 EFLAGS: 00010206 [ 897.225452][T15844] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 897.225467][T15844] RDX: ffffc9000f454000 RSI: 0000000000018136 RDI: 0000000000018137 [ 897.225480][T15844] RBP: 1ffff11004b28943 R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 897.225496][T15844] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: fffffffffffffffc [ 897.225511][T15844] R13: dffffc0000000000 R14: ffff888025944a18 R15: 0000000000000908 [ 897.225526][T15844] FS: 00007f4336f266c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 897.225544][T15844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.225557][T15844] CR2: 0000001b30f1fff8 CR3: 000000003cbd6000 CR4: 00000000003526f0 [ 897.225650][T15844] Kernel panic - not syncing: Fatal exception [ 897.225796][T15844] Kernel Offset: disabled